Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: tDWZBz+9Jacv9hpCmpJ4K51fkBUexp9ACfUQreVL88U=
Subject key identifier: 29:DF:D8:41:FA:78:23:23:65:59:BD:DE:0A:9E:AD:06:C4:66:85:A0
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019FAA50EC778BE7F0E48A4306FE07E35037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0CB2
Signing time: Tue 28 Jul 2026 20:00:57 +0000
Manifest this update: Tue 28 Jul 2026 20:00:57 +0000
Manifest next update: Wed 29 Jul 2026 20:00:57 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: XZ4lYOyItZ+F9kWcirqHpQJhoL40/RuXwsWexn3oCjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ec:77:8b:e7:f0:e4:8a:43:06:fe:07:e3:50:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Jul 28 20:00:57 2026 GMT
Not After : Jul 29 20:00:57 2026 GMT
Subject: CN=29dfd841fa7823236559bdde0a9ead06c46685a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:7a:94:2f:c8:df:e1:f5:48:ed:6b:d6:d5:
34:4c:43:d8:04:a5:92:c9:ab:4e:78:2d:7d:95:4f:
67:b4:7f:cf:89:55:01:85:e4:30:18:57:c5:32:a0:
a9:00:5b:f7:8b:89:4b:41:94:de:b1:4d:5d:81:5d:
1c:cc:96:68:10:9c:5e:05:9e:f9:1b:81:3d:fe:e8:
12:41:42:40:7b:fe:24:fd:c2:a6:97:12:29:f2:b6:
78:f2:66:9b:97:2a:36:5a:6d:b0:76:27:f8:da:f1:
72:c2:05:19:a9:27:31:37:02:3b:a9:eb:ba:25:bf:
cf:bc:62:71:cf:a6:0a:0c:53:c9:7d:5a:c5:28:28:
53:cb:36:e9:ff:4f:22:d4:62:92:19:de:94:2c:d0:
ae:2c:e5:75:3e:2c:51:e3:38:51:c8:37:83:8d:48:
34:96:e4:85:27:14:ef:de:13:6d:42:4c:ab:ed:3b:
77:15:1b:f3:2d:e4:5b:4e:04:66:1e:3e:b2:dc:c0:
80:72:a7:dd:2f:68:cc:f3:cf:7f:eb:63:5e:14:e1:
c4:ee:5b:dd:5e:70:7a:83:24:77:13:5e:99:0e:0f:
b9:57:03:8e:db:99:4e:76:f6:05:b4:18:75:fd:63:
be:c6:d1:05:3c:0d:cb:da:9e:49:67:7a:c9:6f:e8:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:D8:41:FA:78:23:23:65:59:BD:DE:0A:9E:AD:06:C4:66:85:A0
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:24:46:99:fc:79:d9:5f:5c:e2:ec:e7:59:fc:b9:23:3e:
5b:e0:67:d6:82:3a:e4:92:55:c3:07:0d:f9:a3:2e:f3:1f:26:
69:9e:02:39:94:16:4c:51:4e:fa:d9:58:23:0c:41:72:63:cf:
0a:b2:fc:80:30:8a:b0:a2:d6:89:37:88:22:14:ed:45:28:49:
11:76:1a:73:d5:30:cc:f6:08:23:9e:17:2e:e1:de:87:63:b0:
00:f4:28:c7:7c:9a:f2:0d:ff:2d:5e:53:67:2f:1d:6e:7f:f6:
6c:49:2f:df:da:94:64:e2:09:7f:bb:44:89:7b:e2:bb:10:70:
f5:4d:92:4e:d2:a0:2f:81:de:2b:63:f6:13:42:4d:f3:54:40:
60:59:1b:93:1a:c8:16:e8:b3:06:9c:30:94:35:5e:c9:30:5f:
19:a0:2e:57:b8:e7:9d:e7:ea:19:b5:8b:95:62:96:ad:26:67:
5c:fd:ba:ac:9e:e1:c1:1d:25:d4:62:2f:2f:36:91:4e:4f:f8:
6a:31:77:0a:2e:9f:22:d9:f0:3d:25:5e:74:7b:b5:75:c3:7e:
95:1e:fb:03:b0:cb:95:20:e2:c8:b3:eb:4b:0a:76:b4:d2:c7:
9c:44:51:95:ef:c4:e7:b0:4a:c2:04:78:0c:34:69:ef:a0:6f:
73:f6:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:33 2026 by rpki-client