Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: zRSCG4GnC2+jfYE9lHtxlZr1r53aZObJY/DiZv7FOs0=
Subject key identifier: 88:6D:61:AA:B1:75:59:88:17:63:BE:D6:2D:72:A3:C4:9D:1A:DC:BD
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019D2AA9A75763890106AEC18EEA6DE25F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 15:00:54 +0000
Manifest this update: Thu 26 Mar 2026 15:00:54 +0000
Manifest next update: Fri 27 Mar 2026 15:00:54 +0000
Files and hashes: 1: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (hash: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8=)
2: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (hash: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4=)
3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: 81WbYK+yNHMI3TtjaoUqsulzUwmyeRxtCOD7n+eSIlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:a7:57:63:89:01:06:ae:c1:8e:ea:6d:e2:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Mar 26 15:00:54 2026 GMT
Not After : Mar 27 15:00:54 2026 GMT
Subject: CN=886d61aab17559881763bed62d72a3c49d1adcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:fe:53:41:d5:df:28:2c:48:0b:86:2f:e7:
47:15:0c:1a:93:e9:fa:42:43:e7:63:fa:8e:71:8d:
92:17:c9:1c:a5:6e:dd:47:23:34:a7:82:e4:d8:25:
34:ee:9a:1f:20:52:1c:41:ed:00:c7:9e:fb:76:65:
23:5c:47:ec:5d:06:02:8e:d7:fc:22:01:6b:2a:3e:
84:cf:54:49:c1:ae:2f:cf:0b:6c:52:86:a1:c0:e1:
40:e5:38:b4:6f:f9:25:d3:a2:79:fd:fa:06:bb:68:
ed:ca:e4:b6:4a:57:b7:70:48:fe:fb:d1:56:6c:92:
2e:65:05:35:5b:71:30:2d:32:28:a3:88:97:ab:dd:
82:df:a6:5e:46:61:2c:ee:f7:2b:4c:13:8d:aa:3c:
dd:c1:98:7e:1d:4b:74:64:38:36:dc:a8:57:1d:b2:
29:8f:a2:87:e8:57:f7:4c:f2:24:62:fb:f9:3e:cc:
2d:e4:ed:fb:a8:f4:24:31:f6:5d:89:c3:d2:6f:4d:
1a:b0:16:f0:d9:f7:04:ca:3d:18:7c:49:e0:28:8a:
67:64:94:5f:d6:da:2e:91:ad:cd:8b:38:1b:9d:0b:
9a:5e:4a:44:23:25:0a:d3:91:0d:9f:a3:dc:0e:86:
7f:c3:03:b3:3a:0d:4c:88:8a:ec:91:bb:15:00:ed:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:61:AA:B1:75:59:88:17:63:BE:D6:2D:72:A3:C4:9D:1A:DC:BD
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:31:99:a2:16:a2:eb:88:b6:cd:8a:87:85:bd:06:cc:84:
0c:87:94:b4:7a:af:eb:b1:75:5e:cc:78:b6:0e:e8:8b:c2:c8:
a1:05:59:1c:dd:b6:25:44:44:f8:4f:0c:84:04:83:c3:43:42:
0f:18:d8:6f:58:a5:54:4b:dd:98:70:98:08:7d:b6:6d:3f:de:
b0:57:29:8d:d3:e7:22:fb:06:5f:e6:55:69:db:8e:41:5b:3a:
2b:80:ab:a0:5b:1e:6b:1d:83:f4:8b:eb:c9:6c:73:03:9d:2f:
93:53:03:65:a7:ee:fc:3c:c2:3b:05:ea:01:9d:10:47:f2:33:
18:c0:dc:99:3d:a5:22:ee:00:11:6c:ed:49:e1:69:7b:e4:7b:
b5:73:cd:63:c7:a7:87:c3:52:a1:87:21:a5:8d:2b:62:e4:cd:
8c:17:c0:b7:8b:de:c8:82:70:ae:bb:1f:43:93:94:f3:eb:79:
33:a4:a4:e1:0e:da:f1:e4:b8:e7:5b:4d:c8:54:87:48:3a:a2:
45:8c:1f:15:cd:6a:5d:5d:49:3c:a8:ae:ec:e5:03:9c:49:51:
ff:9f:93:26:5f:d1:a8:13:2e:3a:a0:f1:cd:54:83:57:54:f5:
0a:82:cf:c7:63:32:f0:77:68:0d:72:43:af:70:b9:cd:af:71:
71:01:e6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqadXY4kBBq7Bjupt4l9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh
MTk5ODMwHhcNMjYwMzI2MTUwMDU0WhcNMjYwMzI3MTUwMDU0WjAzMTEwLwYDVQQD
Eyg4ODZkNjFhYWIxNzU1OTg4MTc2M2JlZDYyZDcyYTNjNDlkMWFkY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZL+U0HV3ygsSAuGL+dHFQwak+n6
QkPnY/qOcY2SF8kcpW7dRyM0p4Lk2CU07pofIFIcQe0Ax577dmUjXEfsXQYCjtf8
IgFrKj6Ez1RJwa4vzwtsUoahwOFA5Ti0b/kl06J5/foGu2jtyuS2Sle3cEj++9FW
bJIuZQU1W3EwLTIoo4iXq92C36ZeRmEs7vcrTBONqjzdwZh+HUt0ZDg23KhXHbIp
j6KH6Ff3TPIkYvv5Pswt5O37qPQkMfZdicPSb00asBbw2fcEyj0YfEngKIpnZJRf
1touka3NizgbnQuaXkpEIyUK05ENn6PcDoZ/wwOzOg1MiIrskbsVAO2RrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhtYaqxdVmIF2O+1i1yo8SdGty9MB8GA1UdIwQY
MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt
YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5
LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsExmaIW
ouuIts2Kh4W9BsyEDIeUtHqv67F1Xsx4tg7oi8LIoQVZHN22JURE+E8MhASDw0NC
DxjYb1ilVEvdmHCYCH22bT/esFcpjdPnIvsGX+ZVaduOQVs6K4CroFseax2D9Ivr
yWxzA50vk1MDZafu/DzCOwXqAZ0QR/IzGMDcmT2lIu4AEWztSeFpe+R7tXPNY8en
h8NSoYchpY0rYuTNjBfAt4veyIJwrrsfQ5OU8+t5M6Sk4Q7a8eS451tNyFSHSDqi
RYwfFc1qXV1JPKiu7OUDnElR/5+TJl/RqBMuOqDxzVSDV1T1CoLPx2My8HdoDXJD
r3C5za9xcQHmOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:07 2026 by rpki-client