Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: 2+ATi+nnR6U9dbixybF8nwbRFSrJNSkAwOmV6zI7eqM=
Subject key identifier: 15:7C:C0:83:3B:01:14:06:34:23:CD:42:6E:60:71:7C:C0:D9:FD:43
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 019D98187F322C9C460C24D6E0E2978C5911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 21:00:35 +0000
Manifest this update: Thu 16 Apr 2026 21:00:35 +0000
Manifest next update: Fri 17 Apr 2026 21:00:35 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: uZ2MtUON5pi1gPu4tIS7e7ItxI6ixCJ83ge45mq1VRA=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:7f:32:2c:9c:46:0c:24:d6:e0:e2:97:8c:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Apr 16 21:00:35 2026 GMT
Not After : Apr 17 21:00:35 2026 GMT
Subject: CN=157cc0833b0114063423cd426e60717cc0d9fd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:8a:cb:97:de:30:6c:e1:f5:cc:68:1f:38:
d5:31:20:e6:c6:db:36:3f:02:67:1d:3e:7f:36:b3:
33:9c:79:f4:5a:76:9e:11:c3:8c:1c:de:02:55:21:
b8:d9:6a:d9:0f:2e:bd:1b:56:96:b9:b9:54:32:d3:
36:7d:bd:fd:5f:73:dc:42:ed:50:95:55:63:4f:30:
52:37:64:b5:da:25:c9:01:1a:6a:e3:12:34:81:43:
4e:71:00:80:73:31:63:8f:8a:1c:09:f6:27:d6:e3:
52:a8:95:f5:07:f8:cf:38:96:db:e8:b5:fc:43:be:
a5:51:5a:73:21:01:d8:f4:45:28:b8:21:ef:d0:9e:
e8:90:06:61:d3:79:1c:50:1a:34:2b:25:82:9b:89:
47:e7:8c:24:ea:4a:97:e6:9b:f9:c5:19:f0:20:5c:
4b:fa:40:55:f7:72:b8:dc:3e:0c:67:b2:a4:2b:f8:
f1:bb:59:59:3f:03:69:11:2c:7d:b9:56:8c:a6:54:
3e:85:78:d8:85:05:07:4a:30:18:91:14:7d:4e:d1:
9d:2d:2a:92:61:fc:9d:31:e8:5a:a8:20:d0:92:a9:
5f:4e:43:ef:cd:81:fc:67:54:6b:87:8d:a0:c0:44:
7d:d1:f4:fa:25:e1:39:75:08:c7:db:21:93:81:b2:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7C:C0:83:3B:01:14:06:34:23:CD:42:6E:60:71:7C:C0:D9:FD:43
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:47:22:03:d3:29:b6:1a:7e:06:53:04:6f:b5:32:ae:04:d8:
73:c8:48:0f:48:73:20:71:ac:56:80:f8:90:43:00:55:73:92:
a5:e7:bd:bd:00:15:f4:15:9a:b8:10:51:5a:9b:c8:1f:9e:87:
96:ff:fc:4f:2a:0b:f5:4b:fb:48:8d:71:bf:76:1f:35:b7:bc:
8f:ff:3a:95:45:55:a8:7d:58:6f:b7:22:e8:93:4b:39:e4:60:
51:66:76:3b:98:08:ce:d4:30:95:e0:6c:20:8a:be:8f:23:ce:
11:bd:69:56:5e:22:d8:4e:42:7c:cb:36:15:f7:99:fc:53:58:
01:3e:e1:c3:d2:e7:e9:c3:b7:07:ab:41:4f:be:f3:bd:44:29:
3b:ba:10:cd:2c:6f:23:7c:25:2a:ac:fe:fb:3b:91:eb:8c:5d:
0d:83:90:54:66:83:08:bc:ac:09:e5:ee:f8:b3:ca:60:5b:d1:
b9:0b:52:0f:8d:08:54:89:bc:b7:e1:c3:2f:cd:d9:85:fd:e0:
e7:b8:98:1a:7e:53:b1:b4:de:14:7d:2f:57:5d:9d:12:ee:15:
0f:3d:5c:89:89:a9:48:c2:0d:1f:9a:44:cb:cc:94:af:81:11:
84:53:50:a4:a2:92:de:30:ce:96:f8:7a:f3:0c:7a:84:aa:3a:
23:82:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:32 2026 by rpki-client