Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: u1Qh8WcYOt/ciPepc2lJxR6DONhiKlisGz3nEoTwtPo=
Subject key identifier: 3D:AA:0C:5E:B2:86:6A:50:E0:A4:5A:0E:E8:81:FE:B1:EF:7C:E3:A7
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 01A0C52036793E0663CB259B0D2639C037E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 18:00:17 +0000
Manifest this update: Mon 21 Sep 2026 18:00:17 +0000
Manifest next update: Tue 22 Sep 2026 18:00:17 +0000
Files and hashes: 1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: JUNE3xZgGqPX3RHVCtIl4a5HP8M/QrSktaG7XWdj/PU=)
2: VWPkAIzUwfjvAD2bE5V3R53e5mc.roa (hash: NXtM995z5bDkL83i01SCwz8vmeFlZ9WpRyVZ5adDGJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:36:79:3e:06:63:cb:25:9b:0d:26:39:c0:37:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Sep 21 18:00:17 2026 GMT
Not After : Sep 22 18:00:17 2026 GMT
Subject: CN=3daa0c5eb2866a50e0a45a0ee881feb1ef7ce3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:ec:1f:13:05:94:58:c6:e6:30:a7:e4:f6:
6f:28:27:39:a7:e3:a9:d5:ad:b6:9d:ca:95:21:fb:
5b:93:bf:36:46:97:b5:8c:06:e3:82:5a:8a:fb:61:
1a:73:78:90:d5:e5:b9:40:4e:f8:1f:b4:42:37:3b:
19:c3:2b:9a:81:9e:10:39:0b:6e:2f:e8:ab:f6:0f:
88:12:cd:94:1f:61:1d:aa:a3:40:6f:07:17:04:20:
71:3d:10:ef:4a:4d:f6:3e:d5:61:b6:af:3b:37:c0:
69:cb:21:93:fe:68:05:3c:35:8f:09:88:05:80:39:
38:f7:5f:6c:8a:b2:ab:29:5e:77:b0:02:17:52:ef:
d1:49:95:b1:c7:40:73:62:1c:4c:9a:dd:6a:09:8f:
13:bc:d0:37:62:45:7d:bf:bf:7a:c6:75:7a:bd:74:
69:18:c0:01:b6:63:1d:3d:bf:b0:e0:4b:47:47:fa:
ca:7e:7a:dc:72:65:43:30:1c:4a:bc:e6:c4:52:70:
82:e1:b1:ff:05:54:d7:7f:ff:3e:ff:96:aa:3b:a2:
ce:2f:62:aa:a4:44:94:c5:40:49:a6:de:d4:8d:9d:
e6:37:0d:16:10:5b:93:1b:ae:de:ce:d6:25:46:a0:
dc:e6:39:84:08:b4:e1:1c:69:56:cf:72:35:f5:7b:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:0C:5E:B2:86:6A:50:E0:A4:5A:0E:E8:81:FE:B1:EF:7C:E3:A7
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:3f:22:df:b8:d2:65:fe:1c:be:fc:1a:98:12:0f:28:e6:
38:9c:c8:de:1d:40:f8:56:1a:4e:c2:c7:d5:0d:95:d9:f3:1b:
3d:d7:1e:a0:c2:23:ea:97:38:ea:c6:3d:af:6f:f0:42:ee:ca:
48:1d:3b:1f:82:cf:c8:c4:b6:72:02:98:0d:2a:3d:4b:4b:a8:
fd:bb:4a:e8:13:d6:e8:84:89:15:12:0b:e5:f6:ef:1d:05:72:
f5:03:04:2d:ed:59:ee:06:f8:bf:0e:39:81:d4:75:b0:60:59:
b8:93:db:de:b3:60:23:1b:43:46:de:05:cd:68:11:7b:71:5b:
e2:0a:bb:4e:08:6f:51:74:19:80:32:20:63:96:1a:6b:57:ba:
6f:50:79:0d:da:76:8e:57:16:fa:c5:8d:3d:3c:e9:e3:02:75:
cf:af:3c:31:ec:9b:75:0c:ea:fa:85:a0:b4:10:4d:4a:ee:71:
58:a1:82:9e:0a:5f:1b:d4:46:35:98:fa:a2:9f:75:c9:fa:59:
29:1c:8e:36:55:0b:86:3b:b7:07:17:05:ae:cb:7b:13:60:de:
30:73:a4:8c:04:35:af:a1:1b:2a:f6:17:61:28:a8:02:6e:77:
ea:d7:bc:a6:14:9c:64:3b:9a:af:b4:1c:ed:79:6c:0a:fc:8d:
d6:d4:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:29:14 2026 by rpki-client