Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: 358a7qQliseKvsRn7yRAYbQ6bd4s36SgtClfpq+XvIE=
Subject key identifier: 5C:FF:70:D5:C8:E4:75:B5:A3:B7:29:82:DB:DB:A6:50:D4:DF:39:C3
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 019FA93E105A9679AFE38FAD4DEB69A80779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 15:00:44 +0000
Manifest this update: Tue 28 Jul 2026 15:00:44 +0000
Manifest next update: Wed 29 Jul 2026 15:00:44 +0000
Files and hashes: 1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: zVaz/IQdyjR3EhMRW36ctaGhP0er/kmTqnsroNtVAGw=)
3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:10:5a:96:79:af:e3:8f:ad:4d:eb:69:a8:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Jul 28 15:00:44 2026 GMT
Not After : Jul 29 15:00:44 2026 GMT
Subject: CN=5cff70d5c8e475b5a3b72982dbdba650d4df39c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:10:2b:a8:bb:d3:a9:dc:ee:dd:ca:8e:e4:
12:9a:a6:29:8d:7d:d2:90:37:c2:1d:d4:3f:6a:03:
85:25:5d:6e:fe:58:87:73:76:f6:94:fa:c2:01:fa:
84:ba:30:51:8c:ef:a1:29:1a:7b:05:c5:6e:09:ac:
a3:e1:0e:18:64:61:29:e1:c0:be:12:06:3c:3e:73:
d5:e2:b6:0a:88:21:ec:fa:59:8b:f7:33:61:2c:bb:
55:2e:21:28:c7:c2:41:92:10:46:cc:af:73:73:e5:
de:e3:3b:6a:c7:6f:04:7e:ab:43:bf:c8:6f:14:2d:
b4:db:94:5f:49:dd:24:06:19:51:88:f0:f0:0f:6a:
1d:4f:96:8e:6b:50:ea:b6:4e:f3:53:ce:61:c5:34:
f4:b9:c1:bf:a8:fa:58:85:af:1c:4b:f6:21:07:64:
cc:62:f7:e0:7d:00:da:36:59:66:0d:d8:97:6c:eb:
7e:86:c6:fd:c7:a9:9e:89:10:c7:f5:ed:e8:e8:71:
c2:f3:63:69:e5:aa:1f:c2:8c:07:dc:12:af:00:81:
14:ac:c1:b1:13:f3:89:d3:29:72:65:74:06:46:91:
d3:0d:87:e6:07:62:29:84:f8:c9:69:97:f4:e6:35:
8e:6e:c7:f4:fc:ee:63:74:da:d3:2a:6b:18:2c:29:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:70:D5:C8:E4:75:B5:A3:B7:29:82:DB:DB:A6:50:D4:DF:39:C3
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:51:dd:37:a1:ff:22:37:7d:bc:9f:8d:63:c1:3c:3a:7d:a5:
aa:e8:18:96:33:33:4f:5a:1b:7f:7b:47:8b:ca:7b:9a:4d:a4:
76:16:68:fc:a7:ea:f6:d8:49:83:93:34:72:b6:44:20:ac:d6:
ca:23:c2:08:fa:9e:a5:88:4f:01:f1:70:c1:c4:f8:97:80:f3:
f8:57:23:41:d2:42:64:23:61:b8:14:02:0f:a3:05:30:10:3e:
00:50:3e:33:05:1c:d9:9e:b5:68:ae:ca:e8:0d:da:f3:d1:01:
bb:1c:48:4f:9e:22:05:5b:a5:c4:c7:3c:87:d8:d1:bc:0b:6e:
4d:48:f7:36:bd:1e:32:e2:a8:3f:bb:e8:eb:2d:46:e0:07:70:
04:78:7c:46:0a:4f:a9:47:d9:49:d3:00:13:fa:00:ce:7c:29:
c7:6f:f1:12:da:15:4d:d7:dc:2b:a2:4c:62:53:29:f7:44:58:
d0:8a:da:e0:3f:dd:73:fe:73:6f:04:7a:9f:30:56:ab:10:f6:
22:86:1b:a9:be:c4:4a:c2:03:01:de:bc:8c:1c:c8:26:fa:c4:
08:fd:1b:92:36:9c:cf:4d:74:6e:64:4c:6f:de:61:a8:14:22:
7d:e2:6e:b4:71:e1:14:e4:2e:ab:cb:7f:f0:5c:84:b8:3b:38:
7d:da:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:18 2026 by rpki-client