Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: YXiqsfy9UVGjGXJvP6rRld+ZlylmZ6fPOVZOvtUOTrg=
Subject key identifier: D1:81:51:CB:36:1F:A1:B9:5B:19:EC:D3:D8:4C:27:68:EF:5B:21:BC
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 019FA93DFBEDFD1802E9B430755ADF360B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 15:00:39 +0000
Manifest this update: Tue 28 Jul 2026 15:00:39 +0000
Manifest next update: Wed 29 Jul 2026 15:00:39 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: RJVL07S4FgyM4jaZKGTIqEY1dO6jGvSV/yI5Mxcnbe4=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:fb:ed:fd:18:02:e9:b4:30:75:5a:df:36:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Jul 28 15:00:39 2026 GMT
Not After : Jul 29 15:00:39 2026 GMT
Subject: CN=d18151cb361fa1b95b19ecd3d84c2768ef5b21bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:d6:9f:20:82:9f:3e:69:fe:5b:74:17:0a:
6a:6f:9e:15:f3:da:9e:b6:b6:5a:86:1b:d5:02:88:
39:41:2b:6d:35:0c:b5:56:ac:3a:4b:30:a0:05:08:
9d:d7:17:20:f6:63:f4:c0:45:19:66:06:be:ec:49:
ea:84:3e:ab:fe:4e:ba:09:2a:2f:a6:44:52:13:67:
a9:b7:9f:c2:e6:7d:37:77:16:6b:0d:c3:94:61:dd:
1f:a9:b6:cf:71:ed:62:f8:cd:21:d4:6c:8a:6b:7c:
30:c4:20:61:f7:db:eb:5c:7e:27:f3:97:e3:a9:ae:
b8:90:d3:06:04:c3:e6:1a:84:39:8a:28:2b:78:35:
03:d1:91:15:ff:73:80:d5:8c:27:98:4e:3d:a9:e1:
ee:33:81:67:2e:b5:ff:1f:44:c3:d0:54:cc:e2:83:
43:94:17:f6:b7:ce:34:54:9a:c5:74:47:fd:43:7c:
37:e3:e3:36:e7:5c:16:7a:b0:ef:1a:12:e5:44:fe:
ae:56:1f:4c:d7:3d:f6:ad:ef:9b:2e:56:66:b2:6d:
76:94:33:a3:4e:4c:d9:aa:5d:d6:ef:a9:f8:28:12:
c9:c6:a0:ef:ef:07:3a:ce:c0:83:de:32:9c:87:9e:
c0:d9:03:fd:a4:35:7a:72:55:ab:5a:86:e0:2f:fa:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:51:CB:36:1F:A1:B9:5B:19:EC:D3:D8:4C:27:68:EF:5B:21:BC
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:1a:fd:41:cf:a3:5c:03:89:8e:41:e8:4f:0c:28:9d:8b:
eb:2e:94:1a:29:e7:5b:8d:07:3e:cf:76:d4:ec:53:5d:a0:b4:
1f:3c:f9:34:0b:b4:8d:6e:38:b1:0e:b3:57:bc:ec:c1:94:f9:
26:2d:7b:04:45:4a:02:b6:de:22:f2:d1:ba:a2:9b:4e:b7:0c:
0f:73:bf:f2:dd:2a:53:03:b0:ea:ff:f9:02:96:dc:df:88:69:
1a:f9:0c:96:99:57:52:53:dc:22:95:af:a3:d3:dd:97:07:57:
92:34:4d:b3:57:fa:74:87:37:eb:7f:79:35:e6:78:60:41:9f:
74:93:03:59:18:7d:32:7c:bb:c1:cb:7a:2d:17:52:e0:0f:56:
32:67:db:5e:52:1b:6f:f3:b1:39:42:ae:b4:ee:21:c9:4a:e1:
0b:64:82:ec:8c:bf:ff:0a:f8:e0:eb:0f:c7:fa:4e:76:9c:8d:
93:63:01:dd:4b:9d:5f:9b:73:60:32:46:3f:18:b9:ce:a3:5c:
7c:50:1b:26:8e:29:96:a8:58:00:e2:5a:b0:e3:58:5a:a2:c3:
c5:83:83:8d:82:d5:7b:b3:4a:45:da:a9:dc:de:f2:e6:a1:e1:
ba:c5:43:30:e1:a0:50:f4:cc:ce:4a:d9:f0:20:65:d6:06:1a:
8a:e9:48:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPfvt/RgC6bQwdVrfNgsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTFkMDdkZTZmMTI4ZjQ2OWM0YzNiMzAyOGFkZjhkNGQz
N2UyZDkwHhcNMjYwNzI4MTUwMDM5WhcNMjYwNzI5MTUwMDM5WjAzMTEwLwYDVQQD
EyhkMTgxNTFjYjM2MWZhMWI5NWIxOWVjZDNkODRjMjc2OGVmNWIyMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5fWnyCCnz5p/lt0Fwpqb54V89qe
trZahhvVAog5QSttNQy1Vqw6SzCgBQid1xcg9mP0wEUZZga+7EnqhD6r/k66CSov
pkRSE2ept5/C5n03dxZrDcOUYd0fqbbPce1i+M0h1GyKa3wwxCBh99vrXH4n85fj
qa64kNMGBMPmGoQ5iigreDUD0ZEV/3OA1YwnmE49qeHuM4FnLrX/H0TD0FTM4oND
lBf2t840VJrFdEf9Q3w34+M251wWerDvGhLlRP6uVh9M1z32re+bLlZmsm12lDOj
TkzZql3W76n4KBLJxqDv7wc6zsCD3jKch57A2QP9pDV6clWrWobgL/q1zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGBUcs2H6G5Wxns09hMJ2jvWyG8MB8GA1UdIwQY
MBaAFAXh0H3m8Sj0acTDswKK341NN+LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMt
OGQxM2Y3YjNmMTQyLzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMtOGQxM2Y3YjNmMTQy
LzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9Ua/UHP
o1wDiY5B6E8MKJ2L6y6UGinnW40HPs921OxTXaC0Hzz5NAu0jW44sQ6zV7zswZT5
Ji17BEVKArbeIvLRuqKbTrcMD3O/8t0qUwOw6v/5Apbc34hpGvkMlplXUlPcIpWv
o9PdlwdXkjRNs1f6dIc36395NeZ4YEGfdJMDWRh9Mny7wct6LRdS4A9WMmfbXlIb
b/OxOUKutO4hyUrhC2SC7Iy//wr44OsPx/pOdpyNk2MB3UudX5tzYDJGPxi5zqNc
fFAbJo4plqhYAOJasONYWqLDxYODjYLVe7NKRdqp3N7y5qHhusVDMOGgUPTMzkrZ
8CBl1gYaiulIFA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:20 2026 by rpki-client