Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: dv/zuDz6Szh3eOKNHYWqdNRMfU+9CZhq1z53rhg/Oas=
Subject key identifier: 3A:D2:FE:76:EB:24:CC:9D:94:14:02:B9:13:85:BE:DB:F8:4D:6B:34
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019CAC7DBB17B844553B99E24CC63DD01680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: eNlV6UjbaS+DyqX/W0/pNyMQBkMbiBZmo6NCBD6sUfM=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:bb:17:b8:44:55:3b:99:e2:4c:c6:3d:d0:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=3ad2fe76eb24cc9d941402b91385bedbf84d6b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:fe:89:c7:16:c4:3c:4b:88:ea:ed:f1:75:
51:7c:5e:33:9b:c0:5b:27:32:f9:c5:a3:9b:fe:60:
a4:e2:a6:02:da:c3:8e:7b:b6:f8:ba:a3:d1:74:4a:
db:a6:c7:22:cd:bf:f3:66:a6:e1:3f:2a:29:a1:9b:
04:69:ad:8b:1d:ce:3c:3f:0f:44:0c:4d:d9:a4:68:
d0:c4:3e:13:b4:1a:2e:ed:2b:aa:5d:f7:99:fd:e0:
b0:56:65:61:08:b6:76:a5:d0:60:d4:f1:03:d3:e9:
d9:98:06:4d:48:50:76:ca:bb:89:d8:35:e4:92:e0:
02:0a:97:d5:2b:fd:72:6d:e0:20:4b:2a:69:62:9d:
e8:f7:4c:7c:42:18:00:5a:2b:a4:a1:4a:7d:fb:e1:
4e:59:96:ce:86:8e:76:b3:91:7a:43:d4:fe:5f:bf:
7c:e9:50:87:91:f6:76:2c:44:7e:1b:75:34:2a:89:
7f:45:75:fd:b6:86:fb:43:df:f9:3d:32:76:a9:36:
1f:93:ae:f3:f0:fe:9a:33:83:b3:d4:16:65:c5:28:
1d:c3:df:cf:72:2c:f0:ae:3c:ef:24:01:c3:b8:61:
e8:8b:8b:b4:31:67:7d:e1:db:e0:d1:dd:de:0a:0f:
3a:61:11:ac:5c:a0:44:db:17:9b:67:09:b6:35:a3:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:FE:76:EB:24:CC:9D:94:14:02:B9:13:85:BE:DB:F8:4D:6B:34
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:56:4c:18:7f:5e:14:cc:b6:29:fa:08:cf:30:99:a8:53:b1:
ee:c2:91:07:73:44:ed:e5:50:ed:22:b4:ae:e1:dd:21:f2:e0:
7d:78:fd:11:4a:33:0b:de:69:41:00:bc:5c:e8:1c:eb:10:df:
dd:20:0b:d2:d1:d2:cf:02:bc:51:7c:b9:d9:38:5a:ff:67:e5:
d0:d5:62:38:3c:95:79:60:d8:24:10:f1:08:73:03:c4:78:7d:
e4:37:40:c7:ce:eb:c0:6f:bb:76:d2:49:a4:5b:58:72:d2:96:
40:13:94:56:ac:cb:32:c1:62:9c:f5:dc:a8:dd:55:41:ce:20:
c7:52:f0:b1:44:1e:5a:20:5e:4c:2a:a1:84:8d:76:fb:28:92:
f0:55:1c:69:16:c2:ed:84:9c:f5:e8:a8:c9:e6:6e:80:cb:22:
6c:8f:8e:1a:f7:96:b0:67:28:2b:a9:07:35:82:95:6e:99:8f:
df:ba:bc:31:5d:ff:5b:b0:38:cb:65:8e:43:7b:cf:1a:95:c7:
dd:50:ac:4d:96:b5:b1:12:ed:b0:75:63:2f:f9:be:01:4e:d4:
17:b5:93:c3:4c:8b:e7:f9:19:fd:39:dc:c7:fc:70:86:21:83:
75:e3:a7:85:93:88:33:58:22:bf:bc:4b:80:00:da:12:ea:52:
4c:64:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:39 2026 by rpki-client