Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier: JKI2B9qwwuzvMGEfZnt2qlCcufgvbyf4Kg0dfjUTMDU=
Subject key identifier: 2D:31:05:D8:D1:01:4A:1C:29:34:8C:78:CF:1A:37:B4:FD:7E:E3:C7
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 019D98F4EF716C8DDB48A4B9FDA7EF75D367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:21 +0000
Manifest this update: Fri 17 Apr 2026 01:01:21 +0000
Manifest next update: Sat 18 Apr 2026 01:01:21 +0000
Files and hashes: 1: 7GQw0x5KqIsgeFzJvLB4KZmgC4w.roa (hash: SeWjQt30/zP5wJWgCETZ2WU8SMyQZP06xEXIUI0AM3E=)
2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: SeUQBIlqgaE6tT+bkE7G3duI0RFB3xiA/XX/0jRg1EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ef:71:6c:8d:db:48:a4:b9:fd:a7:ef:75:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Apr 17 01:01:21 2026 GMT
Not After : Apr 18 01:01:21 2026 GMT
Subject: CN=2d3105d8d1014a1c29348c78cf1a37b4fd7ee3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:d4:67:88:44:b9:f1:c8:9e:c7:7f:28:4e:
0a:6f:96:83:3f:74:6a:bb:e2:93:e0:b9:71:d8:3c:
5c:12:3a:10:2d:32:0f:32:5a:89:a4:fa:4d:78:bd:
4c:0a:a2:de:a5:3a:89:33:96:fe:0e:d1:00:78:40:
f4:a1:2f:db:27:c2:46:09:0d:cb:e5:09:77:00:68:
31:96:83:98:b3:bc:36:b5:b2:12:1a:6b:a6:34:9a:
2b:f0:e7:fc:43:03:8b:86:50:67:66:bb:58:50:67:
8b:35:74:8f:19:3d:ee:e2:ea:ab:ed:bb:01:a1:6a:
52:64:de:3b:d4:3d:06:a7:3d:b8:3a:7a:c4:4b:3b:
1d:84:04:6e:70:f3:d4:0d:fd:b5:03:3f:55:82:c7:
19:12:b4:e8:4d:4a:db:f4:3b:1c:cb:37:d5:0c:70:
84:c4:bd:e3:12:90:92:49:f9:07:29:30:52:dc:ef:
61:ee:ae:91:9c:0f:cb:8b:34:d9:9c:3f:fe:fa:4e:
fd:cf:fc:9a:28:35:c5:6a:bf:6f:58:57:e5:d9:11:
50:02:07:f7:89:9d:4a:3d:b8:f1:0f:90:54:35:43:
7d:39:bd:21:6e:4f:39:b3:d6:40:da:f3:05:a7:c1:
d0:55:20:8c:c1:40:2f:75:c3:b4:b7:fc:06:d1:5c:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:05:D8:D1:01:4A:1C:29:34:8C:78:CF:1A:37:B4:FD:7E:E3:C7
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:33:b3:b6:87:35:7f:07:fa:bd:3b:6d:80:76:50:28:26:c0:
ff:2e:00:bb:7c:1f:7c:14:f5:37:95:41:ff:54:fa:88:b1:84:
71:0d:4f:06:e4:6a:90:a9:ba:54:8c:ca:56:fe:d8:87:c5:df:
5f:68:a7:d1:87:d4:ea:ec:d8:7d:32:11:d4:8c:67:4d:72:75:
d7:b2:f4:ca:b0:71:02:ce:7f:df:a5:eb:1b:d3:fc:08:83:68:
73:51:b3:c1:e2:a5:17:94:49:b2:c2:88:0f:a1:68:55:c1:d1:
b7:06:98:d8:25:fb:64:91:45:66:f8:5b:ac:29:87:eb:5e:34:
7a:3f:7f:2f:39:f7:e2:d9:b4:de:71:51:b2:d0:a6:0f:87:ee:
b6:2b:d0:10:49:a5:66:51:24:2f:00:9f:38:7c:83:d6:8f:e0:
86:a7:8b:2b:c6:7d:c7:d6:ed:81:63:a3:a0:ce:22:e9:b2:5d:
ce:44:7a:29:50:a5:30:0a:d1:5b:05:81:bf:de:67:11:95:64:
42:4e:13:c7:db:37:a5:20:0e:ea:82:d1:cd:3e:1f:d3:f8:cc:
a4:db:8a:9f:85:a1:a7:6f:42:c9:1b:d9:e0:7c:85:b6:ee:51:
47:e8:3e:46:bb:d5:69:0e:ba:d4:fb:2e:25:6b:ba:11:69:1e:
f8:28:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:20 2026 by rpki-client