Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File: Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier: ZF/n6j6TMtRrItQoCrhhQLxQLbXRluCiBL+UNDPu4lM=
Subject key identifier: E2:A1:D9:60:DF:17:07:9B:24:88:F8:8D:BD:63:46:BB:FB:36:2D:1D
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer: /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial: 019CAA21421A721D94726F8794D41578E2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number: 1372
Signing time: Sun 01 Mar 2026 16:00:32 +0000
Manifest this update: Sun 01 Mar 2026 16:00:32 +0000
Manifest next update: Mon 02 Mar 2026 16:00:32 +0000
Files and hashes: 1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: gVzbpwGGzKCm9KNoP0nBsQqzTO/BVZuxTgg42GrpFu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:42:1a:72:1d:94:72:6f:87:94:d4:15:78:e2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Validity
Not Before: Mar 1 16:00:32 2026 GMT
Not After : Mar 2 16:00:32 2026 GMT
Subject: CN=e2a1d960df17079b2488f88dbd6346bbfb362d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:cc:30:12:ce:a9:5f:d4:9d:5b:a0:66:b1:
d0:30:64:cb:e6:78:92:42:de:4c:4a:c0:5b:45:52:
58:d9:2a:d1:81:0f:71:52:4a:25:79:6d:8e:0b:be:
94:a2:bd:54:4f:6c:ee:1d:52:f1:aa:f9:5c:9d:25:
d3:9d:a7:6c:91:ce:c6:ac:bc:67:53:7f:f2:c3:72:
9f:cd:b9:4d:bd:15:ac:8f:7a:53:8b:e3:83:29:4e:
12:23:df:c2:19:13:29:7d:83:a7:5e:42:24:7d:4c:
f6:8a:f5:97:c5:28:54:bb:1c:34:de:36:98:ba:81:
d2:b9:6b:8e:71:67:a6:0c:b8:6e:6b:74:f8:c1:83:
c1:e0:67:79:1b:71:df:96:0e:7c:bb:c6:5f:e5:df:
ad:d9:c2:62:55:d8:a4:69:fb:12:6b:f5:57:f5:c8:
2c:94:ff:1d:4e:24:07:73:07:2f:9b:bd:20:0a:42:
f7:5b:35:52:c4:88:6b:74:d9:dc:f1:31:95:d0:79:
04:3f:8b:31:1f:96:5e:dc:a3:93:39:57:b6:a5:95:
af:da:d2:71:42:42:bd:77:1d:44:54:b1:33:bf:04:
47:60:67:bd:e4:cd:e5:1e:38:7c:46:45:40:d2:9d:
c9:78:4a:76:b1:3b:8e:ae:ea:04:5e:a7:27:a5:64:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:D9:60:DF:17:07:9B:24:88:F8:8D:BD:63:46:BB:FB:36:2D:1D
X509v3 Authority Key Identifier:
keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:55:23:c0:08:ab:09:8b:58:f5:13:4b:6c:2b:fe:ad:11:9f:
fa:df:67:c6:98:8c:03:7d:49:75:ea:e9:06:a3:e0:34:d5:45:
a2:04:6b:f8:98:e8:66:f3:3b:52:f8:bf:39:85:6e:ba:6e:72:
12:e3:e3:8b:f3:fe:48:03:4b:fc:75:47:60:90:5f:7c:ed:7c:
5a:23:e6:c4:e6:b2:bd:ad:a3:ef:dc:ab:8d:e6:3b:d0:32:60:
31:73:fe:3f:54:7c:1c:22:1e:50:ac:89:3c:98:0c:7c:19:6d:
3a:a1:7b:42:58:55:33:f6:fe:3a:b1:69:a5:da:b7:d0:df:15:
a7:c5:04:c1:1b:a7:66:74:e2:8d:6f:29:8a:8e:88:4b:f6:d5:
75:ca:b3:8d:73:23:0e:55:ab:fc:d6:0e:1d:34:40:29:cf:54:
1d:c7:ab:da:42:1c:a2:9e:1d:b5:d4:47:15:d1:65:b8:6a:74:
7f:60:a6:20:e4:0c:b4:70:56:ec:78:b7:49:36:f8:c7:f5:98:
6b:65:31:ba:98:47:e9:2d:23:9f:e9:15:c7:97:81:a7:3f:2e:
55:d8:f9:19:fd:8c:93:34:27:4d:ab:96:17:ee:71:33:47:d2:
95:ab:36:bc:8f:3d:60:bb:1d:a3:1b:44:d4:84:c6:1e:7b:6e:
3e:c8:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:39 2026 by rpki-client