Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: +6+cE/wu3Rt/C0KqtQAwZGz2x1Be3gRwLRyAUn6TYRU=
Subject key identifier: 41:AE:9E:14:15:4D:48:7E:2C:DE:85:98:02:A3:6C:DD:A1:6F:C8:9B
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019CAE6BD98FF5A63536D6C96A493F246DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 12:00:29 +0000
Manifest this update: Mon 02 Mar 2026 12:00:29 +0000
Manifest next update: Tue 03 Mar 2026 12:00:29 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: 5TB5krjXU8u6cv8iqW95DiBm4o2ExIS1wLBo/u+7aRg=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:d9:8f:f5:a6:35:36:d6:c9:6a:49:3f:24:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Mar 2 12:00:29 2026 GMT
Not After : Mar 3 12:00:29 2026 GMT
Subject: CN=41ae9e14154d487e2cde859802a36cdda16fc89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:96:bc:26:c9:23:c2:79:f3:3e:8f:dd:93:da:
6b:84:39:35:bd:3e:55:f4:1e:34:a0:73:2d:ff:fa:
a2:8c:80:5d:87:49:76:67:a5:33:19:58:a3:8a:0f:
5e:b2:ae:d6:2d:bb:62:30:87:60:f8:11:46:b7:3a:
91:73:b6:e3:cf:4a:87:97:b1:36:dd:0d:fd:8d:d9:
fc:ed:a5:9b:e1:38:6f:7e:96:85:3c:65:91:7e:4b:
bb:e1:8d:94:93:8c:92:95:2b:6f:4c:69:33:71:54:
ab:74:8f:3f:27:6e:e0:a9:28:bf:a1:4e:bc:14:ce:
e3:01:05:dd:66:02:89:e9:85:6b:cb:cd:dc:75:24:
c1:a5:e5:79:f0:9b:12:00:94:3d:35:31:f9:21:4f:
f5:13:e6:23:ed:e5:09:48:82:86:90:6d:14:c5:6e:
01:06:e9:a1:eb:6a:6e:5d:c5:5b:56:5a:2d:17:cb:
fc:b7:2c:05:33:b3:8d:59:ba:7c:4f:f3:d3:2d:d0:
18:90:5c:e3:36:50:82:4c:38:31:04:f9:e8:b7:0a:
b7:fb:d6:6d:15:cf:0a:78:a0:29:03:27:5e:4a:36:
74:df:1d:b6:cf:ec:00:56:75:a9:73:ff:a5:d3:bd:
99:96:7f:ee:52:74:fc:87:7f:75:10:a3:e8:7c:52:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:9E:14:15:4D:48:7E:2C:DE:85:98:02:A3:6C:DD:A1:6F:C8:9B
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bd:39:0b:63:a3:34:71:06:cf:d3:ef:68:2f:21:1a:43:bc:
14:51:82:da:c2:a1:2f:55:9d:84:99:0a:64:bc:78:fe:0e:28:
e7:e0:6c:00:6a:dc:5f:9f:14:bf:3a:c4:ce:03:d7:a4:c4:e2:
56:7d:ae:13:5e:9d:dd:e0:c1:cd:5a:66:5a:d5:94:c6:18:cb:
60:39:86:68:0b:94:a7:73:1a:be:d3:9c:dd:ac:66:45:10:b2:
e3:52:bd:2f:21:df:f9:d1:cc:f2:11:51:80:21:96:9f:a6:0b:
87:e7:a8:b5:1d:70:10:13:64:76:7e:eb:d5:ef:48:00:44:51:
64:b6:72:18:6a:f0:8f:a4:c3:db:bc:12:c7:ff:d6:76:3c:71:
90:52:36:53:d4:2b:31:2d:71:2e:72:f4:69:97:00:ba:98:55:
ae:cc:5f:74:9e:27:c6:d8:43:0c:ff:52:3b:a0:9e:5d:47:e6:
27:db:b9:2a:43:93:86:dc:f3:38:9a:58:fd:56:09:fd:5a:7c:
da:97:38:6e:22:da:f4:ad:95:74:7c:70:4b:b1:4e:60:6d:98:
06:13:63:0e:3c:ac:7c:b7:1c:fa:58:00:5e:48:6c:40:df:a3:
17:e1:88:7e:98:ed:8d:75:73:f7:ae:14:45:ba:38:38:d7:ff:
78:e6:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:31 2026 by rpki-client