Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: G8avAk+1tLhBc6SrcBM3qAzO8Ggo8N5TBz2a4MtNb0M=
Subject key identifier: 63:7A:74:6F:9D:8A:12:43:4F:DF:0A:53:0F:32:A4:81:2B:10:EB:FF
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019F9135BDEE602A596D30E4DD0CD59BA2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:00:46 +0000
Manifest this update: Thu 23 Jul 2026 23:00:46 +0000
Manifest next update: Fri 24 Jul 2026 23:00:46 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: NUOlqCpQtvSpxnBL+CRGadqYfy53BH2FFCNFXYp904w=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:bd:ee:60:2a:59:6d:30:e4:dd:0c:d5:9b:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jul 23 23:00:46 2026 GMT
Not After : Jul 24 23:00:46 2026 GMT
Subject: CN=637a746f9d8a12434fdf0a530f32a4812b10ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:b7:86:12:15:86:42:7b:21:47:b4:f3:28:
76:18:b9:a2:5a:8c:7b:ed:81:38:49:78:9e:71:f3:
aa:7e:d3:e0:87:94:79:44:3b:bf:22:5f:6f:94:00:
41:06:24:02:d4:7e:64:31:eb:19:53:8f:77:3e:ba:
c1:3b:88:c0:ae:ee:93:fb:a0:cd:14:04:f1:6a:ee:
22:59:b2:4c:73:4b:ac:a3:d3:ee:aa:ad:95:3b:3c:
a0:ae:eb:52:00:23:34:cc:b9:b8:da:1b:9e:7b:58:
43:94:d8:5a:c8:54:90:78:1f:2c:ab:60:3f:19:18:
77:ae:cc:79:01:93:1f:d0:86:3a:46:7c:08:c2:0c:
49:ec:77:d0:71:65:81:49:7f:4a:a7:89:2e:84:83:
70:db:45:17:cc:4a:40:4a:dc:82:4d:6b:86:02:4f:
42:0b:27:89:b5:93:87:a6:4d:8c:f0:3d:4f:5f:ff:
42:19:af:85:af:95:4e:31:67:be:c1:a1:96:91:05:
04:b0:25:6c:d0:0f:43:24:80:01:eb:ab:26:5e:0c:
e7:4e:69:b1:b8:78:39:5b:ae:5b:3f:62:85:f5:22:
93:35:f0:30:39:cc:11:7d:f8:b6:70:e3:1e:2b:15:
12:bf:f5:ae:2c:09:60:4f:b6:1f:9f:39:a2:c5:03:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:74:6F:9D:8A:12:43:4F:DF:0A:53:0F:32:A4:81:2B:10:EB:FF
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6e:cb:d0:b5:90:e4:97:ce:de:ef:8a:a6:8f:84:03:2b:0c:
f3:a3:60:d3:95:09:e9:d8:57:1f:0e:8d:a5:98:9d:5d:ad:ca:
cd:47:d6:d1:1f:56:2c:25:f6:4c:d1:00:a2:4c:10:04:11:8b:
3c:f9:01:db:5c:51:e5:ac:f4:1f:08:2d:18:26:67:72:f2:26:
9b:87:29:71:67:b4:11:9f:32:f3:f4:58:94:64:53:77:92:41:
4d:b1:e7:eb:ca:17:1f:58:86:2e:56:18:c5:5d:84:7f:59:7e:
c9:9c:ec:07:17:31:b2:7d:fa:a3:28:29:6f:f1:08:42:90:4e:
ca:a9:05:46:49:f2:d6:99:dd:e0:71:5c:e2:bd:28:97:7f:45:
93:a4:1f:3a:f1:cf:2c:c9:b9:19:46:73:85:57:b5:19:6e:15:
7b:83:9a:2c:d4:ef:20:0b:a6:f9:ac:7f:2b:8c:bd:d6:fd:5a:
6c:4a:1b:6a:9a:46:ea:12:28:59:d5:d0:be:a0:4c:9c:c6:4a:
d7:18:c5:02:7b:de:f6:54:65:64:4b:f1:9a:35:1d:83:18:2b:
cb:09:c6:d9:89:4f:b7:14:5d:f1:54:4f:36:b3:cc:25:ab:16:
fc:f6:6b:a7:41:e9:f4:70:4a:2d:be:dc:d9:ae:45:80:a6:ab:
c4:6b:56:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNb3uYCpZbTDk3QzVm6LZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGIyMmQyNDliNjY2M2Y5ZmEzNGIxNzYyZDI1ZmZkOWZi
M2ZlZDMwHhcNMjYwNzIzMjMwMDQ2WhcNMjYwNzI0MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg2MzdhNzQ2ZjlkOGExMjQzNGZkZjBhNTMwZjMyYTQ4MTJiMTBlYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02+3hhIVhkJ7IUe08yh2GLmiWox7
7YE4SXiecfOqftPgh5R5RDu/Il9vlABBBiQC1H5kMesZU493PrrBO4jAru6T+6DN
FATxau4iWbJMc0uso9Puqq2VOzygrutSACM0zLm42huee1hDlNhayFSQeB8sq2A/
GRh3rsx5AZMf0IY6RnwIwgxJ7HfQcWWBSX9Kp4kuhINw20UXzEpAStyCTWuGAk9C
CyeJtZOHpk2M8D1PX/9CGa+Fr5VOMWe+waGWkQUEsCVs0A9DJIAB66smXgznTmmx
uHg5W65bP2KF9SKTNfAwOcwRffi2cOMeKxUSv/WuLAlgT7YfnzmixQOVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGN6dG+dihJDT98KUw8ypIErEOv/MB8GA1UdIwQY
MBaAFARLItJJtmY/n6NLF2LSX/2fs/7TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEt
NjM3M2QzNmNlZWY2LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEtNjM3M2QzNmNlZWY2
LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZW7L0LWQ
5JfO3u+Kpo+EAysM86Ng05UJ6dhXHw6NpZidXa3KzUfW0R9WLCX2TNEAokwQBBGL
PPkB21xR5az0HwgtGCZncvImm4cpcWe0EZ8y8/RYlGRTd5JBTbHn68oXH1iGLlYY
xV2Ef1l+yZzsBxcxsn36oygpb/EIQpBOyqkFRkny1pnd4HFc4r0ol39Fk6QfOvHP
LMm5GUZzhVe1GW4Ve4OaLNTvIAum+ax/K4y91v1abEobappG6hIoWdXQvqBMnMZK
1xjFAnve9lRlZEvxmjUdgxgrywnG2YlPtxRd8VRPNrPMJasW/PZrp0Hp9HBKLb7c
2a5FgKarxGtWww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:43 2026 by rpki-client