Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
File: BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft (raw, json)
Hash identifier: lcvxIk6v3sBz5HP7kbWjo68wkeH5LIO+R9Zi4TdbeWw=
Subject key identifier: C7:08:1D:A4:45:44:BA:9F:61:AB:B9:8D:D2:63:59:5C:76:97:BD:00
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Certificate issuer: /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial: 019EC2C8FD2FC1F0B68A348671425C0E7D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
Manifest number: 8E
Signing time: Sat 13 Jun 2026 21:00:12 +0000
Manifest this update: Sat 13 Jun 2026 21:00:12 +0000
Manifest next update: Sun 14 Jun 2026 21:00:12 +0000
Files and hashes: 1: BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl (hash: Bi0o9MiqD24rpm1gsF8viwWA8zeZaxChhCjAqQbxPnE=)
2: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (hash: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c8:fd:2f:c1:f0:b6:8a:34:86:71:42:5c:0e:7d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Jun 14 21:00:12 2026 GMT
Subject: CN=c7081da44544ba9f61abb98dd263595c7697bd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:6f:39:da:5a:3d:a6:9e:5d:d6:65:53:9f:
e8:9e:de:4f:0b:63:c7:e7:e4:88:60:ab:e4:f4:56:
e6:c9:4f:ec:7f:7c:92:39:15:f9:86:65:9a:f7:bd:
78:4c:c9:58:c1:c7:70:45:c6:2e:bd:d3:4a:79:7b:
c0:11:31:35:10:e7:ca:8a:93:28:00:67:63:09:85:
11:29:db:47:fd:b4:6c:3a:12:fe:2c:fd:10:fa:18:
a8:d3:ef:46:72:a2:5f:e6:d9:1f:ba:cc:0d:50:a8:
22:0a:53:04:cd:39:60:50:2c:a9:e2:ec:f5:3b:b8:
25:39:3c:1c:6e:4b:0b:f9:b1:73:b0:84:e6:c6:8e:
c2:18:07:83:d7:98:91:4c:2e:2b:99:aa:99:14:17:
66:2d:0b:a0:f1:5f:f5:ec:f1:a5:36:d4:24:48:bd:
85:a5:f0:5b:7a:16:f7:44:d7:f6:08:f7:f9:35:fd:
90:fd:4b:d2:b6:64:1e:34:22:35:ff:75:7b:8f:8e:
7d:69:20:d5:f8:11:73:ee:7d:65:6b:72:82:35:2e:
76:4d:cc:86:ad:fb:9a:24:5b:e5:a3:15:dc:1b:1a:
d9:93:d0:bf:9b:5d:3b:97:80:ea:8b:f0:c6:48:3c:
c0:53:4b:bf:14:3f:91:33:3e:c6:65:94:c7:e8:d3:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:08:1D:A4:45:44:BA:9F:61:AB:B9:8D:D2:63:59:5C:76:97:BD:00
X509v3 Authority Key Identifier:
keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ca:1b:8b:e7:d2:95:97:f9:22:a3:56:1f:d1:f2:2b:04:f8:
e6:78:37:bb:ba:b9:63:43:ca:ad:ec:7e:5a:6a:7e:d7:ba:f8:
76:e8:7b:79:f9:c1:67:4b:bd:01:fa:c1:2e:e8:9e:5e:1c:e1:
0c:03:e7:f6:03:7c:08:16:c6:20:31:63:9a:ec:55:df:40:08:
dc:d4:ba:cb:da:ab:54:73:b9:41:82:00:d3:fe:e2:b2:3a:f3:
4b:30:65:03:05:61:ae:89:25:22:66:76:5f:30:e2:9d:50:6a:
f1:81:ed:38:a9:a0:f5:32:c7:b3:bd:2e:d9:b3:63:17:d8:23:
fc:21:cb:29:21:bd:20:f7:08:50:2d:12:f6:8a:99:b7:eb:9a:
de:47:7e:f5:8d:25:68:38:ee:83:c4:f6:a9:2e:19:8f:b1:cb:
79:71:ec:d0:b6:b4:a5:10:19:ca:a0:8f:2a:34:55:33:5f:32:
6c:04:05:89:01:1d:d9:dc:dd:5f:a6:fb:cf:04:84:f7:3c:6c:
9d:6d:2f:25:af:d4:d3:20:ac:03:49:6b:fa:c9:eb:81:a9:56:
77:1b:85:13:5c:07:6c:b8:df:51:9c:80:5d:79:6a:50:06:7c:
92:aa:be:b8:1e:bd:48:a6:2f:88:3b:f9:4f:5b:11:38:24:ef:
13:d4:24:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyP0vwfC2ijSGcUJcDn2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NDQ4ZDkwNGY3N2M3MGNkOWVlMTIzMzY2MjVkNDg1MWFj
Y2I2MDQwHhcNMjYwNjEzMjEwMDEyWhcNMjYwNjE0MjEwMDEyWjAzMTEwLwYDVQQD
EyhjNzA4MWRhNDQ1NDRiYTlmNjFhYmI5OGRkMjYzNTk1Yzc2OTdiZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnllvOdpaPaaeXdZlU5/ont5PC2PH
5+SIYKvk9FbmyU/sf3ySORX5hmWa9714TMlYwcdwRcYuvdNKeXvAETE1EOfKipMo
AGdjCYURKdtH/bRsOhL+LP0Q+hio0+9GcqJf5tkfuswNUKgiClMEzTlgUCyp4uz1
O7glOTwcbksL+bFzsITmxo7CGAeD15iRTC4rmaqZFBdmLQug8V/17PGlNtQkSL2F
pfBbehb3RNf2CPf5Nf2Q/UvStmQeNCI1/3V7j459aSDV+BFz7n1la3KCNS52TcyG
rfuaJFvloxXcGxrZk9C/m107l4Dqi/DGSDzAU0u/FD+RMz7GZZTH6NO/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcIHaRFRLqfYau5jdJjWVx2l70AMB8GA1UdIwQY
MBaAFAREjZBPd8cM2e4SM2Yl1IUazLYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVTTmtFOTN4d3paN2hJelppWFVoUnJNdGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NGE1MjItM2EzNC00ODA0LThjMzIt
NDU2NDRjZDVkODI5LzEvQkVTTmtFOTN4d3paN2hJelppWFVoUnJNdGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80NGE1MjItM2EzNC00ODA0LThjMzItNDU2NDRjZDVkODI5
LzEvQkVTTmtFOTN4d3paN2hJelppWFVoUnJNdGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8obi+fS
lZf5IqNWH9HyKwT45ng3u7q5Y0PKrex+Wmp+17r4duh7efnBZ0u9AfrBLuieXhzh
DAPn9gN8CBbGIDFjmuxV30AI3NS6y9qrVHO5QYIA0/7isjrzSzBlAwVhroklImZ2
XzDinVBq8YHtOKmg9TLHs70u2bNjF9gj/CHLKSG9IPcIUC0S9oqZt+ua3kd+9Y0l
aDjug8T2qS4Zj7HLeXHs0La0pRAZyqCPKjRVM18ybAQFiQEd2dzdX6b7zwSE9zxs
nW0vJa/U0yCsA0lr+snrgalWdxuFE1wHbLjfUZyAXXlqUAZ8kqq+uB69SKYviDv5
T1sROCTvE9QkoA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:28 2026 by rpki-client