Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: E7M8AwM4CoCnKsxxjylQBsCyry9jzFraLQPfhh382G8=
Subject key identifier: 7C:90:5F:A3:D7:51:F8:7E:22:92:1B:5A:73:1B:C4:12:79:D0:21:F6
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 01A0C520580831BE0468D88B75024CCEB761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 18:00:26 +0000
Manifest this update: Mon 21 Sep 2026 18:00:26 +0000
Manifest next update: Tue 22 Sep 2026 18:00:26 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: cFc9amAen2eg65mKh/tfxy6hg8p/UDlI9o3SfnNpWJ4=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:58:08:31:be:04:68:d8:8b:75:02:4c:ce:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Sep 21 18:00:26 2026 GMT
Not After : Sep 22 18:00:26 2026 GMT
Subject: CN=7c905fa3d751f87e22921b5a731bc41279d021f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:5a:d3:1b:f7:9f:6a:08:56:8f:19:66:92:
27:0a:5a:10:c3:e5:b7:41:21:8a:ab:40:bb:92:aa:
81:3c:e3:87:03:0c:d4:6c:c0:35:8a:4b:10:11:bf:
8d:7e:b5:21:1a:52:18:dd:f7:09:86:ee:ef:ad:4b:
75:03:5f:9e:57:90:c4:a7:48:ab:05:9c:4c:a1:05:
76:60:1f:94:d5:8c:de:32:74:01:b9:d8:9e:4e:ff:
d3:73:33:70:97:2f:38:a4:d4:31:62:71:43:03:2a:
84:c2:d6:54:14:58:72:a9:46:a9:32:16:d0:b9:5f:
3a:1d:3d:45:f6:b5:b6:4d:88:f4:b7:a2:b3:2a:44:
4a:09:c1:bb:5a:b2:f7:26:09:4c:4a:32:8e:fa:68:
55:45:82:d2:30:d6:93:59:15:5e:8c:c8:13:3d:59:
49:79:6a:c4:60:1d:e7:53:61:dc:34:1b:9d:ed:e7:
be:83:e9:87:98:5e:22:b0:c3:ac:b7:9c:e9:06:19:
9e:b1:b4:76:55:2a:19:92:21:53:e8:52:85:63:7f:
d1:ea:4e:95:c7:8f:b1:8c:e1:ee:98:9a:36:7e:6c:
51:bf:61:d0:83:35:89:6c:cf:0d:51:30:51:ab:6b:
fc:f3:96:cb:95:51:eb:8b:8e:6f:21:ad:55:17:e3:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:5F:A3:D7:51:F8:7E:22:92:1B:5A:73:1B:C4:12:79:D0:21:F6
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:2d:5a:b3:fc:63:e2:d6:9f:43:ad:c5:52:43:49:9f:7b:
23:00:13:c9:c5:1a:e2:68:fd:8b:f9:63:9e:7c:e1:cd:4a:05:
a7:57:5d:08:29:64:cb:07:60:87:a3:9f:b7:0f:3e:a1:b2:42:
c6:99:a6:73:d3:03:46:c6:dc:aa:b5:1e:ab:00:52:3f:0c:c6:
05:c1:a3:5c:ec:f0:d6:7a:ee:84:af:ac:61:b1:cd:01:c5:9d:
78:e0:e9:73:20:90:58:a0:82:1c:12:9f:de:5a:ea:f6:a8:5a:
1e:7d:6d:ab:71:d6:02:71:2d:ee:35:35:2c:23:f3:73:a2:82:
bf:65:44:ab:47:a0:87:ea:9f:2c:19:76:1c:b7:26:d8:bc:61:
a3:79:93:1d:e3:94:4c:5c:79:a3:0a:c6:45:c1:ef:a9:6f:1c:
f5:38:67:ee:97:cc:d1:50:66:46:be:fe:a1:51:b5:6c:d0:6c:
e5:a2:af:e6:52:ee:d6:f9:72:87:42:6c:2f:ed:b7:38:2d:78:
50:40:42:72:4b:1a:4a:f4:a7:63:09:55:3c:56:ec:86:84:eb:
26:cc:05:94:c9:21:9e:4a:bf:b0:32:a0:56:8b:da:5a:8c:ad:
e0:3e:93:a0:81:51:b4:b0:e5:a2:3a:58:e1:db:50:d0:95:45:
c5:17:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:24 2026 by rpki-client