Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: wQTF9u8GsrL/FpCtreiZx6aLPK814BMQUHvwmgFqXO0=
Subject key identifier: 4B:43:65:A1:03:04:A0:2F:CB:0D:C7:EE:E8:79:89:3C:6C:BD:95:3E
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 019CAAC6B87774B6A036A01E7A65F14E92CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 043B
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: R_QXAd0ljQo11gwzi4iQ8aziD6Y.roa (hash: of6gwgr1hLSBTBKNTi/EQcBYEpZYdsoorOxLzo/9c8g=)
2: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: cD3eLoNXkSZIDvxSG8oPlDOjRiGD4ctxs77LDDV9j5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b8:77:74:b6:a0:36:a0:1e:7a:65:f1:4e:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=4b4365a10304a02fcb0dc7eee879893c6cbd953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:9a:b1:c3:8b:ae:bc:db:ca:61:91:5b:39:
fe:85:e3:81:86:34:cb:de:51:be:10:d7:22:cc:66:
6c:6d:ab:01:73:1f:fe:6e:ab:a1:d5:d6:50:3c:98:
ef:16:31:6a:25:51:4f:1a:55:b8:e6:74:e8:ce:da:
00:79:95:25:81:d6:94:81:f5:54:75:3e:39:05:92:
c4:1f:2e:ac:7e:57:3b:34:94:54:6d:98:d7:d1:ff:
fb:47:78:0f:38:d4:34:82:53:3e:f3:9d:ca:38:a6:
1a:45:3a:1c:03:a7:92:da:5e:ff:6d:da:c3:b1:ca:
08:bd:e7:99:1c:cf:19:5f:ac:37:a5:1e:40:fa:0c:
8a:2d:70:bf:a4:7a:28:2a:f5:e9:e0:97:a1:68:d8:
da:af:a8:54:e7:7f:9e:b7:53:bc:af:fd:61:be:04:
4c:89:be:ee:f9:0d:fe:a0:89:62:55:f8:76:bc:7f:
5c:d8:79:f1:35:d6:0a:d3:83:e6:a0:4d:ed:9e:93:
bb:66:89:a5:a2:5d:95:22:46:f7:7b:91:d5:2d:e9:
e4:5a:ad:45:c5:77:2c:5e:55:a9:ee:5a:22:e3:1d:
b3:90:56:1f:e8:59:b7:f7:71:5f:bc:30:ac:40:c2:
21:3c:99:fe:24:84:2b:d6:63:5e:b1:2a:25:76:b3:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:65:A1:03:04:A0:2F:CB:0D:C7:EE:E8:79:89:3C:6C:BD:95:3E
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5d:78:fc:9e:68:a7:36:4d:76:37:7c:06:bc:f8:20:ef:6c:
14:af:84:60:f3:54:03:88:e4:23:d7:43:5f:5b:1c:5d:05:82:
ee:25:cd:c1:20:3b:80:7a:18:c0:13:f2:1a:92:34:2b:64:17:
ec:03:42:1e:09:db:18:f2:bb:f2:b1:28:50:a4:a7:a9:9a:16:
a9:a0:8d:cc:76:93:5c:11:df:bd:79:9c:e3:ac:59:d2:a3:85:
cd:16:c8:17:9b:fa:33:b4:08:a3:b0:fb:db:f2:90:af:5b:ed:
0d:c0:9c:1f:e9:47:79:1e:bf:7a:e8:52:d9:1b:98:3a:d2:c0:
7a:d0:8b:a2:3f:b5:a9:b9:6d:a6:a9:9a:ef:9f:16:e9:43:3b:
83:6a:36:29:eb:6b:59:e3:28:fc:ba:76:33:71:f8:a6:d1:74:
c9:a9:33:a9:ab:03:5e:ad:34:55:1b:ed:fa:67:cf:be:78:a5:
9c:b5:12:22:18:0d:23:30:08:87:bb:a5:5e:f0:ea:d4:29:2d:
3e:45:40:04:3e:04:11:32:ac:97:62:35:f0:cc:a4:50:dc:7b:
4c:82:86:c8:ad:a0:bd:2a:48:17:59:4c:4f:f2:fb:b0:4d:76:
58:36:3a:9e:02:12:4d:ea:8d:50:81:90:b6:67:0d:24:74:f2:
31:24:77:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrh3dLagNqAeemXxTpLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTc5NTI1OTExOWVlOGE2ZDEwOGU5YjVjYmUwYmI5MGMw
OThlY2UwHhcNMjYwMzAxMTkwMTE1WhcNMjYwMzAyMTkwMTE1WjAzMTEwLwYDVQQD
Eyg0YjQzNjVhMTAzMDRhMDJmY2IwZGM3ZWVlODc5ODkzYzZjYmQ5NTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAKascOLrrzbymGRWzn+heOBhjTL
3lG+ENcizGZsbasBcx/+bquh1dZQPJjvFjFqJVFPGlW45nToztoAeZUlgdaUgfVU
dT45BZLEHy6sflc7NJRUbZjX0f/7R3gPONQ0glM+853KOKYaRTocA6eS2l7/bdrD
scoIveeZHM8ZX6w3pR5A+gyKLXC/pHooKvXp4JehaNjar6hU53+et1O8r/1hvgRM
ib7u+Q3+oIliVfh2vH9c2HnxNdYK04PmoE3tnpO7Zomlol2VIkb3e5HVLenkWq1F
xXcsXlWp7loi4x2zkFYf6Fm393FfvDCsQMIhPJn+JIQr1mNesSoldrNgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtDZaEDBKAvyw3H7uh5iTxsvZU+MB8GA1UdIwQY
MBaAFPwXlSWRGe6KbRCOm1y+C7kMCY7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYt
Y2ZhNmEyNTQzMmU5LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xYThiYzMtZDQyZS00YWMzLWE5ODYtY2ZhNmEyNTQzMmU5
LzEvX0JlVkpaRVo3b3B0RUk2YlhMNEx1UXdKanM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHl14/J5o
pzZNdjd8Brz4IO9sFK+EYPNUA4jkI9dDX1scXQWC7iXNwSA7gHoYwBPyGpI0K2QX
7ANCHgnbGPK78rEoUKSnqZoWqaCNzHaTXBHfvXmc46xZ0qOFzRbIF5v6M7QIo7D7
2/KQr1vtDcCcH+lHeR6/euhS2RuYOtLAetCLoj+1qbltpqma758W6UM7g2o2Ketr
WeMo/Lp2M3H4ptF0yakzqasDXq00VRvt+mfPvnilnLUSIhgNIzAIh7ulXvDq1Ckt
PkVABD4EETKsl2I18MykUNx7TIKGyK2gvSpIF1lMT/L7sE12WDY6ngISTeqNUIGQ
tmcNJHTyMSR3nw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:20 2026 by rpki-client