Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: +QT7LyogOHQ4yaP27plH7Synzml/XFMMkCZ9ewCDvWg=
Subject key identifier: C2:82:3D:84:CC:6E:AF:57:90:54:2E:74:13:38:CF:44:82:A7:64:14
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 01A0D3B828A520BAC7D1D8B0023E622825F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 14:00:56 +0000
Manifest this update: Thu 24 Sep 2026 14:00:56 +0000
Manifest next update: Fri 25 Sep 2026 14:00:56 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: L1/Mb28j4BIA1n30kwA32UPW8C9mbuZozL3GxAv8LAo=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:28:a5:20:ba:c7:d1:d8:b0:02:3e:62:28:25:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Sep 24 14:00:56 2026 GMT
Not After : Sep 25 14:00:56 2026 GMT
Subject: CN=c2823d84cc6eaf5790542e741338cf4482a76414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:4c:9e:4a:bf:a2:98:26:56:92:f5:b5:b8:
38:e9:83:c6:c4:d9:07:4d:1b:15:d4:d9:a9:13:cd:
a2:31:e9:ed:ae:e7:90:75:3e:70:ce:5d:2b:ce:d7:
3b:9d:03:44:60:0d:71:9f:1c:ee:02:1f:68:94:4e:
e4:38:0c:c7:db:c2:5d:03:f4:67:ac:08:34:93:3b:
2e:89:89:56:9a:13:3a:d6:f1:8e:2d:e8:90:ea:16:
cf:bb:a2:35:29:41:af:11:cb:74:26:ec:33:11:7e:
8c:f5:1b:6e:47:f3:88:d4:fd:86:e8:90:f1:86:0b:
cf:78:f4:cd:a9:1b:3f:72:af:29:81:dc:10:9d:90:
e9:89:35:a1:8a:3c:0e:c6:03:11:17:13:e8:b1:33:
54:c9:1a:cb:7e:9f:61:3b:29:97:e3:ea:14:b7:6d:
b2:50:8b:9e:f7:96:57:fd:c9:05:94:11:01:a6:78:
a1:8e:84:64:9f:1a:63:e7:03:58:84:99:c9:7b:51:
d5:05:46:b9:07:07:f5:b5:a0:62:65:3d:70:15:f0:
d5:5b:31:39:27:d8:8c:47:cb:83:cd:45:74:15:ea:
7a:b1:30:72:e1:19:4d:0f:c7:67:a9:0b:60:08:b7:
a8:fa:e4:a5:b5:88:cd:13:3d:34:11:d8:71:44:c1:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:82:3D:84:CC:6E:AF:57:90:54:2E:74:13:38:CF:44:82:A7:64:14
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:01:5a:9e:72:b3:d9:2f:b5:97:0b:1a:66:32:42:9d:ba:5e:
f7:c3:ef:3e:75:c9:7f:d5:28:e3:1d:a1:5d:84:dd:f4:79:a2:
30:21:37:de:5a:15:38:21:a0:e2:ea:ed:f0:4e:11:16:3b:d6:
08:34:3c:f5:d3:54:29:4f:68:11:56:15:eb:95:ef:f3:f2:ec:
50:be:23:a7:55:b5:f3:24:f9:e4:73:c5:9f:3a:5e:8d:c4:de:
b1:0e:85:6d:36:6f:25:33:8d:4b:e5:41:89:a3:f6:a7:a4:5a:
c1:48:34:ba:82:45:34:f6:c3:ee:a0:8b:69:8e:2d:eb:4c:c7:
44:7f:0c:b5:c8:2a:a8:7f:b9:9a:13:83:a4:98:88:cb:3a:fc:
3b:a1:a7:65:6e:2d:78:06:ec:d3:d7:2e:eb:31:69:1b:a3:3e:
18:29:15:84:f8:a6:90:e0:43:61:8b:dc:b2:2d:d4:24:84:50:
4d:86:23:8d:9a:7d:cb:e6:b7:49:f0:7a:39:35:53:f3:f4:98:
85:a1:fd:1b:14:34:cd:09:1a:e3:0b:03:f1:2b:e8:f7:9d:78:
5e:74:9f:89:5b:07:5a:aa:a5:f9:b6:00:80:ae:35:78:87:03:
a9:90:5d:b3:6c:5d:45:ee:ba:42:8e:1d:53:3a:6d:ae:d9:c3:
65:1c:eb:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuCilILrH0diwAj5iKCX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGIyMmQyNDliNjY2M2Y5ZmEzNGIxNzYyZDI1ZmZkOWZi
M2ZlZDMwHhcNMjYwOTI0MTQwMDU2WhcNMjYwOTI1MTQwMDU2WjAzMTEwLwYDVQQD
EyhjMjgyM2Q4NGNjNmVhZjU3OTA1NDJlNzQxMzM4Y2Y0NDgyYTc2NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGtMnkq/opgmVpL1tbg46YPGxNkH
TRsV1NmpE82iMentrueQdT5wzl0rztc7nQNEYA1xnxzuAh9olE7kOAzH28JdA/Rn
rAg0kzsuiYlWmhM61vGOLeiQ6hbPu6I1KUGvEct0JuwzEX6M9RtuR/OI1P2G6JDx
hgvPePTNqRs/cq8pgdwQnZDpiTWhijwOxgMRFxPosTNUyRrLfp9hOymX4+oUt22y
UIue95ZX/ckFlBEBpnihjoRknxpj5wNYhJnJe1HVBUa5Bwf1taBiZT1wFfDVWzE5
J9iMR8uDzUV0Fep6sTBy4RlND8dnqQtgCLeo+uSltYjNEz00EdhxRMG1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKCPYTMbq9XkFQudBM4z0SCp2QUMB8GA1UdIwQY
MBaAFARLItJJtmY/n6NLF2LSX/2fs/7TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEt
NjM3M2QzNmNlZWY2LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEtNjM3M2QzNmNlZWY2
LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQFannKz
2S+1lwsaZjJCnbpe98PvPnXJf9Uo4x2hXYTd9HmiMCE33loVOCGg4urt8E4RFjvW
CDQ89dNUKU9oEVYV65Xv8/LsUL4jp1W18yT55HPFnzpejcTesQ6FbTZvJTONS+VB
iaP2p6RawUg0uoJFNPbD7qCLaY4t60zHRH8MtcgqqH+5mhODpJiIyzr8O6GnZW4t
eAbs09cu6zFpG6M+GCkVhPimkOBDYYvcsi3UJIRQTYYjjZp9y+a3SfB6OTVT8/SY
haH9GxQ0zQka4wsD8Svo9514XnSfiVsHWqql+bYAgK41eIcDqZBds2xdRe66Qo4d
UzptrtnDZRzrXg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:04:36 2026 by rpki-client