Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: +lQ4xAFAMPGrfynyXsAhEoV/SABb9QmXY81mjeTdLaI=
Subject key identifier: 8A:86:FC:F3:57:DA:FD:AF:0A:AF:BE:60:AC:D3:95:AA:B9:C5:C4:A9
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019D999971F316BFF9E752972B4FB2B3B7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 122E
Signing time: Fri 17 Apr 2026 04:01:03 +0000
Manifest this update: Fri 17 Apr 2026 04:01:03 +0000
Manifest next update: Sat 18 Apr 2026 04:01:03 +0000
Files and hashes: 1: FT6hKDdOscZGglIPmnTSBT_NdEw.roa (hash: XuMv35p4+01j1k8oQho1O4/aKo7qUhSStQREoa1ANMI=)
2: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: yzxbIHmPKm3Kw0aV31niqrt0MIylL9SQk70r5frjTVg=)
3: saGe65xuOQseP3c8kU3JX4FXHXE.roa (hash: /UkorSrGGemFtdnd/VIVCcjbVQGt7/xFaIltioMhlUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:71:f3:16:bf:f9:e7:52:97:2b:4f:b2:b3:b7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Apr 17 04:01:03 2026 GMT
Not After : Apr 18 04:01:03 2026 GMT
Subject: CN=8a86fcf357dafdaf0aafbe60acd395aab9c5c4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:b3:e9:43:6c:50:da:00:b8:6f:5c:f3:68:
89:2c:b1:ec:f9:2e:5d:f7:18:fe:89:6d:62:a3:46:
20:50:ff:83:bf:a3:1c:06:1f:fd:ea:fb:3a:6b:5e:
e0:ca:54:7d:a6:3d:7b:c2:2e:ed:16:1d:8f:fa:f8:
fd:c0:45:1e:00:15:d7:22:23:5f:1e:df:46:dd:79:
c3:bf:ad:25:8f:8f:3a:58:cf:58:a6:01:e9:31:0a:
da:3f:01:10:0b:dc:0a:a9:01:77:82:2f:ca:b1:ea:
96:ce:30:8e:74:6b:43:fe:90:89:c8:f9:35:96:91:
fc:22:fb:39:26:62:6a:de:47:4e:7e:cc:b9:6a:fb:
3b:5d:40:55:8c:a8:8a:01:ee:ec:7a:ae:06:09:08:
15:4a:fa:f3:27:bf:6c:a9:56:06:a9:fe:ca:d5:04:
0c:e0:00:1d:72:ef:e3:e6:cb:b6:66:26:2b:73:c9:
1c:2d:95:b1:16:70:70:86:7d:86:bd:f6:79:f2:00:
30:88:d8:11:02:30:47:58:09:a8:19:79:72:ce:d4:
60:5d:b4:99:27:ca:96:ca:0a:37:8f:ba:d8:92:0d:
57:1c:eb:9d:6a:57:0b:c7:e7:00:4d:b9:2b:4c:33:
51:98:50:b1:42:b2:c9:0f:4b:8b:19:dd:18:bf:91:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:FC:F3:57:DA:FD:AF:0A:AF:BE:60:AC:D3:95:AA:B9:C5:C4:A9
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:cb:ad:a1:bc:93:bd:9e:01:80:da:79:2d:bc:b6:74:69:
8f:18:3a:22:08:ae:eb:6e:f4:f2:bd:56:c7:17:8e:4b:9e:9c:
9c:39:87:81:d5:0d:73:45:8f:1b:32:8a:54:29:9c:f8:82:af:
44:de:bd:2d:11:bb:9b:e5:81:34:32:18:be:7e:ef:d5:c5:04:
b6:0f:1f:92:e1:2f:59:b1:59:5f:03:b5:7b:87:85:62:56:2b:
b4:b1:68:11:57:5d:a9:93:a2:c8:97:af:50:55:e9:db:5d:c8:
50:53:33:e1:bf:7a:22:88:25:95:27:b8:30:cb:67:8e:e2:fc:
13:14:41:d6:ea:18:c1:83:0e:42:13:09:ae:d2:66:4b:78:69:
13:dd:98:7b:01:5a:d1:ba:c0:c4:99:f2:88:4b:e8:4c:43:2d:
f9:30:75:10:a0:f1:c4:51:28:4d:27:19:ea:55:ea:f0:84:93:
4b:e9:ba:e4:8b:5f:ed:96:ca:91:48:7c:5d:02:50:46:f0:69:
ab:80:5c:ca:7c:1a:71:60:ba:f1:14:6f:a8:b8:e6:61:58:d7:
80:e0:95:7b:0e:c0:04:b3:06:ec:ba:d8:6d:fe:d3:62:86:21:
19:cd:35:06:98:1b:70:71:67:3b:8d:94:ab:55:5a:50:96:1c:
6c:b9:e8:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXHzFr/551KXK0+ys7e2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3
YzEyMTkwHhcNMjYwNDE3MDQwMTAzWhcNMjYwNDE4MDQwMTAzWjAzMTEwLwYDVQQD
Eyg4YTg2ZmNmMzU3ZGFmZGFmMGFhZmJlNjBhY2QzOTVhYWI5YzVjNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGaz6UNsUNoAuG9c82iJLLHs+S5d
9xj+iW1io0YgUP+Dv6McBh/96vs6a17gylR9pj17wi7tFh2P+vj9wEUeABXXIiNf
Ht9G3XnDv60lj486WM9YpgHpMQraPwEQC9wKqQF3gi/KseqWzjCOdGtD/pCJyPk1
lpH8Ivs5JmJq3kdOfsy5avs7XUBVjKiKAe7seq4GCQgVSvrzJ79sqVYGqf7K1QQM
4AAdcu/j5su2ZiYrc8kcLZWxFnBwhn2GvfZ58gAwiNgRAjBHWAmoGXlyztRgXbSZ
J8qWygo3j7rYkg1XHOudalcLx+cATbkrTDNRmFCxQrLJD0uLGd0Yv5G6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqG/PNX2v2vCq++YKzTlaq5xcSpMB8GA1UdIwQY
MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt
YjIxZGQzZjY4YWJhLzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh
LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhHLraG8
k72eAYDaeS28tnRpjxg6Igiu62708r1WxxeOS56cnDmHgdUNc0WPGzKKVCmc+IKv
RN69LRG7m+WBNDIYvn7v1cUEtg8fkuEvWbFZXwO1e4eFYlYrtLFoEVddqZOiyJev
UFXp213IUFMz4b96IogllSe4MMtnjuL8ExRB1uoYwYMOQhMJrtJmS3hpE92YewFa
0brAxJnyiEvoTEMt+TB1EKDxxFEoTScZ6lXq8ISTS+m65Itf7ZbKkUh8XQJQRvBp
q4BcynwacWC68RRvqLjmYVjXgOCVew7ABLMG7LrYbf7TYoYhGc01BpgbcHFnO42U
q1VaUJYcbLnoFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:18:33 2026 by rpki-client