Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: OfRd5ZVAYai6mDtikg5Uy5Jnx7LshhjCrP0tPuhIRmM=
Subject key identifier: B3:01:37:E2:B5:1E:0A:8E:6C:35:7B:96:71:D7:EC:C6:49:5B:44:80
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019FA97532F64CCF93980D420DAFF7A8B5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 05C8
Signing time: Tue 28 Jul 2026 16:00:57 +0000
Manifest this update: Tue 28 Jul 2026 16:00:57 +0000
Manifest next update: Wed 29 Jul 2026 16:00:57 +0000
Files and hashes: 1: R_QXAd0ljQo11gwzi4iQ8aziD6Y.roa (hash: of6gwgr1hLSBTBKNTi/EQcBYEpZYdsoorOxLzo/9c8g=)
2: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: RjjX+JFZdyvA0byFLc2Mmq9fM9gf5u/VLjXjxyi9s8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:32:f6:4c:cf:93:98:0d:42:0d:af:f7:a8:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Jul 28 16:00:57 2026 GMT
Not After : Jul 29 16:00:57 2026 GMT
Subject: CN=b30137e2b51e0a8e6c357b9671d7ecc6495b4480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:fd:6b:9f:25:d2:89:92:07:fc:9b:34:8f:
e7:31:d9:96:99:ab:35:d0:2a:c0:e5:68:2d:03:d9:
1b:79:52:10:9f:5c:c2:f9:14:d5:f3:8a:49:38:78:
a8:08:ee:5d:8e:50:d3:06:69:94:8f:1a:37:a1:63:
f9:c1:d5:d8:f8:cd:31:dc:b2:6d:3d:08:3e:e8:5e:
ce:16:40:23:85:e2:2f:a0:6a:f2:13:ef:99:27:23:
6c:bf:36:c3:ee:9c:60:ee:c6:e9:32:b2:18:96:da:
b3:ae:56:09:b2:ee:b5:e6:d0:d6:f5:aa:27:27:b0:
c9:f2:26:cf:77:67:90:36:85:8b:9f:aa:e8:c1:33:
ad:40:94:db:45:db:a5:50:63:64:30:9b:59:d8:8e:
cb:35:25:43:5b:c7:c3:81:8d:61:6c:2a:88:8c:03:
d0:be:74:fe:9c:5f:70:1d:c5:f2:12:7e:6b:20:5f:
3a:d8:4d:62:e2:b7:8f:c1:f9:27:68:97:53:4c:fa:
38:24:f1:d8:fd:c2:32:32:ab:0c:ba:92:63:53:70:
d7:f5:9d:a2:af:d0:f0:08:18:7f:1e:fe:c8:d4:e3:
9a:67:61:aa:32:af:f1:d3:51:bc:45:e7:61:2e:bd:
0d:1e:ad:da:5d:a8:06:eb:fc:c6:c2:5c:94:b0:d6:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:37:E2:B5:1E:0A:8E:6C:35:7B:96:71:D7:EC:C6:49:5B:44:80
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8c:37:f4:a7:85:ec:70:c7:87:f1:90:76:38:e4:e1:e8:68:
f6:99:e0:fb:aa:43:1e:cb:25:16:66:10:e9:8f:9c:9d:b2:29:
a6:ba:ab:2c:cd:98:30:a9:ce:08:02:e2:5f:58:b0:5a:74:3b:
01:b4:1a:c5:a4:14:34:de:0f:34:87:4e:6c:0b:5f:29:33:05:
33:89:8c:c8:81:1e:8a:14:48:79:d0:c1:c6:64:55:6f:ef:64:
0b:0d:a7:63:5c:c8:29:b6:ad:7f:cd:85:e5:5f:7b:e2:87:56:
7e:03:d7:1f:91:af:b7:77:72:8c:e1:fd:21:f2:88:d8:fc:90:
8c:c4:92:d8:0b:86:82:2f:d7:b7:f4:b7:75:31:76:26:ac:6b:
40:25:ab:2f:61:b7:ed:86:75:9e:11:38:29:2e:43:ed:56:9f:
69:72:1c:76:86:e9:13:58:f5:f1:38:e6:37:8c:04:09:e3:70:
1a:3d:54:b2:4a:76:8c:14:b5:e4:35:34:cd:64:74:16:af:d6:
1e:65:ac:54:9e:b9:cc:55:db:5e:8b:ac:0f:ab:34:3b:67:be:
79:65:c0:b9:41:30:35:8c:d7:5e:88:cd:2a:54:29:0d:5b:76:
87:88:6c:ad:40:9c:33:d4:93:29:84:ff:ad:a1:08:5a:73:d2:
fb:49:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:05 2026 by rpki-client