Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: /h8iYa2/YfDblr8YuIVd4koHw8V/bp36sx8kQb5bP+c=
Subject key identifier: 8C:F5:DC:EA:F9:4D:CE:31:A9:A2:67:2F:B5:E8:F3:47:F6:B2:8A:99
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 019CABA1EC5FBFE3B1B68AB14E8C009B814E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0B25
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: lExx19xasOTPq746hEMGDC1niBFYe1/RBYBiiIlbsdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ec:5f:bf:e3:b1:b6:8a:b1:4e:8c:00:9b:81:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=8cf5dceaf94dce31a9a2672fb5e8f347f6b28a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:04:39:f4:6b:17:75:10:18:bd:7f:a0:35:
05:0f:c3:0e:2c:82:00:f1:16:1a:bb:d6:ab:53:98:
98:45:ff:83:0d:97:0e:4d:19:89:69:be:41:f6:e9:
26:bb:be:e5:60:fa:67:29:ff:e8:99:46:70:5c:c7:
1a:8a:5e:24:9e:77:3d:27:34:f9:7d:4a:06:c5:b1:
b8:02:2c:d3:26:72:27:3b:a4:f2:7b:36:af:27:60:
c2:04:77:03:a3:6d:d5:97:c7:f1:8d:f3:ce:84:73:
3e:30:09:42:9b:66:e3:20:9d:71:60:8b:52:bc:03:
0e:40:94:b5:8c:c1:4b:03:86:a7:49:3d:15:e8:a1:
2d:8e:15:d9:3e:bb:23:f3:92:9c:9a:df:6d:4e:b9:
2e:d7:d9:d4:d2:e8:d0:64:0a:91:d8:bc:e9:27:d0:
d1:15:dd:b2:c3:94:82:84:48:ec:06:9c:9f:47:b8:
16:70:0a:32:d2:49:8d:2e:ec:b6:99:48:be:64:04:
20:7e:84:c6:82:c4:e9:bb:0e:8d:e7:2a:ea:4e:67:
0b:ac:f4:c1:39:16:41:6d:7b:79:d5:a4:93:c5:15:
f0:c1:5a:bf:48:e8:8e:53:b7:09:d9:28:41:72:ea:
89:48:66:53:38:a2:2c:0d:68:ff:17:64:47:7d:84:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:DC:EA:F9:4D:CE:31:A9:A2:67:2F:B5:E8:F3:47:F6:B2:8A:99
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9d:0b:23:cd:f1:4f:88:f4:59:7b:c3:a0:96:f2:1c:32:4e:
26:64:a0:25:86:db:d7:9f:80:77:3a:f2:3e:2d:ac:a2:33:69:
7b:72:a8:84:23:2f:58:de:e3:ce:b0:ba:67:e1:83:a8:34:02:
3b:e5:db:7e:69:70:e2:74:ed:65:4d:5b:75:37:99:72:a6:b7:
35:e6:24:03:09:87:d0:b9:1f:c8:16:41:a0:dd:53:fd:50:12:
9e:c2:24:09:b9:32:91:84:e6:e2:a8:85:7a:34:ad:e8:7a:98:
c0:f2:9a:3d:d5:c3:34:e2:9a:9c:5e:1f:07:55:63:0f:1c:1a:
7b:fa:df:50:74:55:2b:11:97:0d:f5:80:39:65:1a:5b:95:72:
a1:3d:6d:92:83:b4:1a:62:ee:6d:2a:5d:e0:de:13:c4:46:ca:
20:59:6c:ae:3b:06:37:a3:86:d3:fd:ff:7b:1a:bc:5e:1f:ff:
35:07:56:f2:8e:54:3e:89:4a:fc:43:a2:ef:a7:01:58:42:79:
cc:e7:e1:ca:d7:09:a3:71:4f:10:5e:d0:f6:e8:89:95:63:29:
9c:0e:6f:f5:8b:e1:5c:26:f6:46:28:a8:5e:fe:e2:0b:09:e0:
fe:e5:c4:f4:c8:b9:2d:2e:9c:65:5a:e2:9b:f6:f1:ef:34:49:
41:fa:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:28 2026 by rpki-client