Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: ttvOzVnm+q7SAr5//XGpaL6Yu6uPmsfk/DvautktA5o=
Subject key identifier: D7:7D:EE:D2:83:55:49:F9:83:BB:D4:25:90:FC:82:CE:3C:38:84:C1
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019D992B3071ECD34AB807AD1A731FF35D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0BA0
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: UalBDe3317NvYHihZ074QuuKEnjvVtxYP3XwNyfrAJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:30:71:ec:d3:4a:b8:07:ad:1a:73:1f:f3:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=d77deed2835549f983bbd42590fc82ce3c3884c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:59:2f:f9:69:6c:cd:80:b0:fd:a5:9a:2c:
45:56:d6:a5:f9:8b:fb:01:5c:7a:c7:d9:c5:fc:1c:
8c:72:99:79:34:36:8f:35:7d:d2:45:62:5b:cf:c8:
56:00:89:ae:62:8d:fa:25:cf:58:15:bf:e4:2e:47:
fd:e4:ae:42:2a:a7:4a:1b:f5:c8:7e:cc:42:7d:af:
65:c9:2b:21:b0:4a:bb:f8:f0:84:18:bb:5d:ad:5a:
2d:ab:9d:98:41:43:0c:a3:7c:75:e8:d1:1f:12:dc:
06:60:2b:3a:b3:9f:a7:59:df:7e:98:a2:f9:a4:1a:
92:a0:7a:8b:0a:db:eb:02:a2:af:4e:e7:6a:4e:ef:
56:49:f3:fb:6f:cd:14:b4:26:cf:05:e5:ca:a9:d9:
ab:b5:42:81:4a:18:45:5f:8b:fb:0b:05:ec:a1:ce:
ad:f7:77:a3:c9:db:1e:f1:0c:26:78:3f:f6:d1:6b:
8f:aa:93:52:9b:d9:bc:f2:c6:cd:a5:af:13:90:e6:
51:2e:76:a0:a9:5a:a4:cc:67:d4:bf:84:f0:28:5f:
f0:21:3e:c7:ec:0c:8c:cd:26:68:cb:13:91:29:65:
2c:68:2d:87:4c:84:1c:8f:77:76:64:33:69:7d:34:
d1:ff:0f:21:83:2b:18:99:fe:32:5c:5f:e0:15:1b:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:EE:D2:83:55:49:F9:83:BB:D4:25:90:FC:82:CE:3C:38:84:C1
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:c2:e0:13:08:92:fd:70:d4:a4:f6:70:9a:b7:49:76:81:
1e:a6:61:87:a0:bf:ca:40:44:31:de:18:be:d1:9a:6c:94:02:
d3:2b:91:66:20:21:77:00:35:35:e3:54:89:2d:0a:65:5e:3e:
c9:19:2f:44:07:1e:51:33:25:05:3d:d9:de:a9:85:9c:d2:21:
e1:f0:29:f6:36:36:50:44:c2:ac:7a:70:08:95:70:0a:e2:26:
75:49:d5:fe:09:f6:5c:29:98:1c:a4:68:36:ef:4c:8c:29:da:
3f:50:ff:86:32:e5:6f:84:dc:eb:aa:40:00:50:74:72:8b:66:
34:0a:f8:bd:80:cb:c8:1d:4e:aa:a1:bc:d5:e6:fd:5b:f0:a3:
ec:85:27:e4:c4:10:0d:de:d6:0d:91:35:76:a1:c6:76:9a:c0:
38:5c:1d:ae:57:47:f5:3a:5b:0d:26:c9:eb:f6:23:41:6e:44:
46:83:5a:45:cd:29:89:41:78:bc:e9:d3:e6:36:8a:b4:e7:e1:
b1:99:6e:e8:32:fd:cd:fa:bc:bd:92:f7:df:21:fa:85:4c:67:
8b:19:db:86:00:76:b0:bb:d5:1d:8a:74:e7:f2:1f:16:82:32:
5c:a9:9b:bd:21:89:6a:b3:95:3e:25:f3:1e:6f:08:61:1f:2b:
76:43:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:51 2026 by rpki-client