Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier: Nv17SBY/uBjfKOJcQn6Qd7iCuSdBWQ0asnbHK6ehU8I=
Subject key identifier: 41:2E:23:9D:71:8A:3B:9A:61:77:32:7A:79:C7:09:1B:8A:14:B0:7E
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer: /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial: 37928D2ED4E8786C6F90056871E2E3D5B7AE8710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number: 012A
Signing time: Sat 14 Nov 2026 17:49:49 +0000
Manifest this update: Sat 14 Nov 2026 17:44:49 +0000
Manifest next update: Sun 15 Nov 2026 21:13:49 +0000
Files and hashes: 1: AS11967.asa (hash: qrZnTIDpiG9un0qsZjyzIzrI+E4EXxLiTHN5tO2HHvI=)
2: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: Jwy2fR8DLmc+LpKyxUSDNEumgik9d3hEyFvozjXwp00=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:92:8d:2e:d4:e8:78:6c:6f:90:05:68:71:e2:e3:d5:b7:ae:87:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Validity
Not Before: Nov 14 17:44:49 2026 GMT
Not After : Nov 15 21:13:49 2026 GMT
Subject: CN=412E239D718A3B9A6177327A79C7091B8A14B07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:3f:1b:33:96:37:af:a1:8a:e8:ad:df:bc:
a4:48:c7:70:00:88:fd:34:38:21:b8:99:c8:fa:33:
d8:83:01:af:8c:6a:41:65:81:52:e3:28:00:00:4e:
24:fe:63:40:80:b0:c8:49:d2:98:57:57:f7:4c:18:
20:60:25:e3:e7:db:97:19:69:18:11:01:cb:f1:4c:
7f:cb:f4:4d:c6:e2:a2:74:ba:59:96:a0:ef:bc:96:
57:ff:a0:a6:ed:a0:30:6e:5f:ea:fc:39:c6:c7:48:
f8:4b:67:1d:db:66:e0:ed:8d:f5:0b:41:df:ec:cf:
e6:fd:f0:7f:48:d0:5e:1f:36:2d:7e:59:45:59:99:
b0:a8:80:85:17:1d:b8:dc:9e:29:af:34:95:45:b4:
b3:0a:d8:88:48:05:76:90:5f:6d:95:7f:ab:ae:43:
63:00:05:1e:85:84:cf:0d:41:7b:90:63:19:fe:b3:
1c:b9:6e:14:23:9d:fe:3d:43:b4:2e:b7:14:ec:d0:
9b:ab:3f:0f:68:37:ce:dc:e1:f1:53:57:92:d9:db:
88:7b:6e:74:c3:67:ae:3e:c4:01:64:3f:b1:57:5c:
6b:09:37:78:2d:83:2e:03:b2:8e:43:7d:a1:b2:1c:
38:51:3d:10:62:07:dc:f0:1d:b7:5a:59:6e:19:a2:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:23:9D:71:8A:3B:9A:61:77:32:7A:79:C7:09:1B:8A:14:B0:7E
X509v3 Authority Key Identifier:
keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ba:da:dd:94:28:73:c5:10:af:6c:09:9a:74:f2:b3:55:b8:
99:0a:fb:8f:bd:ac:35:a0:df:41:8e:73:3a:11:07:7d:7c:a7:
63:aa:41:34:f2:5b:03:db:ec:f2:52:3f:50:88:41:a0:77:a0:
41:c1:06:7d:24:e4:2b:7a:11:8e:21:1b:35:72:77:d4:35:17:
b6:22:46:f9:67:86:ed:aa:17:4d:28:58:5e:ba:a6:54:43:4d:
a4:c4:94:80:f5:0f:a3:ea:db:d6:47:66:67:45:65:cc:06:f7:
9c:a2:cb:2a:15:2d:1d:78:d0:b1:11:a9:5a:8f:2b:39:c2:77:
8e:34:13:ba:8c:64:b9:cd:07:99:54:f2:c4:13:e9:21:3f:db:
60:93:53:71:7f:f7:a0:4e:3b:46:fd:d1:34:7c:6f:b2:bc:78:
bf:aa:1d:40:e1:9a:c8:90:fd:01:07:af:80:96:a0:da:1c:9f:
0d:6c:2e:ca:e8:af:57:82:01:96:77:67:e4:7d:5b:7f:cf:e5:
3c:ef:c7:41:f9:18:38:fc:af:ec:d4:cb:cf:c0:db:a6:60:c5:
0b:d2:a4:06:98:36:ae:a5:7a:f9:96:e2:e7:49:38:d4:92:89:
01:42:13:a1:f3:67:83:85:59:46:09:3f:05:e7:69:3d:d9:a7:
b9:ea:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:12 2026 by rpki-client