Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
File: BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft (raw, json)
Hash identifier: 1IyfHl7KJkA5MkS5etz/EyJiB7kWqL4fGMmRFzdoAj4=
Subject key identifier: 83:5A:98:9E:F4:46:A0:B0:64:34:E3:4E:54:FE:6C:C2:D2:95:86:A1
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Certificate issuer: /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial: 01A12AD7818541B0863DEB1A0BD0E9F6230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
Manifest number: 01CD
Signing time: Sun 11 Oct 2026 12:02:08 +0000
Manifest this update: Sun 11 Oct 2026 12:02:08 +0000
Manifest next update: Mon 12 Oct 2026 12:02:08 +0000
Files and hashes: 1: BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl (hash: ektmw2Nvxx66Zo/LpNg+LUkzAMwQ/I6xD91q0VpmKws=)
2: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (hash: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:81:85:41:b0:86:3d:eb:1a:0b:d0:e9:f6:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
Validity
Not Before: Oct 11 12:02:08 2026 GMT
Not After : Oct 12 12:02:08 2026 GMT
Subject: CN=835a989ef446a0b06434e34e54fe6cc2d29586a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d1:3c:9b:6a:77:68:e2:6c:40:0d:9c:c3:e4:
bc:c4:be:d9:24:35:a8:80:ec:35:d8:95:3e:b0:a1:
51:25:48:e2:81:82:d9:ea:91:02:80:28:85:00:92:
a3:03:52:fc:49:cf:f2:a0:cc:28:39:59:6e:99:1c:
25:69:0d:58:f2:11:24:d4:11:e1:cc:b8:b9:96:f2:
80:03:68:bf:e5:ff:6a:de:b2:06:fa:8b:69:59:48:
d4:03:73:aa:8f:71:28:24:76:04:28:e7:0c:f2:8b:
5f:cc:a0:bc:e0:f7:ed:21:18:be:e0:35:e4:43:74:
29:55:06:c2:79:a5:7a:62:bf:1c:fb:20:8c:ed:26:
9d:0c:53:2a:06:a6:df:ff:17:a3:14:2e:a3:f7:e3:
86:5b:d2:0c:a5:25:c9:dd:be:62:29:49:c1:29:98:
c9:bd:e1:52:e0:1a:7d:9f:4e:88:44:bb:6f:ba:d9:
8f:ee:ff:bc:e3:b3:86:4a:39:0c:e8:b8:09:d0:ff:
ef:ce:ac:93:d1:0c:57:0e:43:bc:5f:26:80:54:98:
5a:15:4e:d2:78:af:48:c6:1b:9e:9c:8e:64:8d:a0:
ac:4c:22:b2:ca:8d:0a:2c:45:06:42:b2:48:4d:7a:
94:f5:43:f8:4c:37:45:69:2c:44:24:a9:5e:48:0a:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:98:9E:F4:46:A0:B0:64:34:E3:4E:54:FE:6C:C2:D2:95:86:A1
X509v3 Authority Key Identifier:
keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5a:79:dc:69:0e:68:05:4d:fd:9e:00:cc:b4:22:0d:34:49:
4a:f5:80:45:05:9c:db:b4:41:d8:00:93:ba:d0:0b:b7:a0:bc:
3a:05:cc:78:32:81:e2:f9:fe:7b:e7:c7:95:97:0a:f8:8f:1f:
ed:c1:8a:25:28:6b:4b:68:7f:0c:d7:56:a2:ae:7b:0f:9c:fd:
5d:a2:94:37:d3:17:91:29:93:eb:2b:0a:8a:54:fc:73:cd:e2:
56:8e:05:8a:db:f2:2b:25:24:b7:bc:d4:9f:ec:ab:87:44:f3:
17:9a:29:16:14:81:2a:f0:ea:93:03:f0:b3:6e:3a:e3:64:00:
4a:70:10:20:9b:87:1c:56:6f:d6:c3:3e:53:ab:8e:fa:73:92:
91:b8:22:82:fe:a9:4e:9c:09:f7:9e:2c:50:1f:30:c3:39:5f:
34:47:4d:e4:fe:ab:e1:45:b8:3a:d2:de:19:02:a2:c5:7d:72:
1a:ef:3a:f5:f3:01:6d:cd:f6:52:b5:92:4f:2b:b2:ae:b4:14:
0a:79:20:96:fb:1f:c8:87:05:79:2d:93:63:aa:84:43:e4:de:
ff:98:a0:66:1a:94:d5:28:a6:77:c4:64:17:f0:44:c9:da:8c:
08:04:ca:b6:91:c2:c0:4c:f4:67:e3:82:d2:cc:9f:23:13:d5:
ec:9c:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:23:07 2026 by rpki-client