Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: O7WE9b6vaZisjvXFMiYQ+dfK5D1SVgsWxkUbQBCBEC4=
Subject key identifier: 9E:41:50:B3:F3:F7:4F:99:CB:4C:43:F2:C8:84:F8:25:8B:6D:8B:F4
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 01A0C2568E2C453D674E3C17223B5B14FA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0D43
Signing time: Mon 21 Sep 2026 05:00:47 +0000
Manifest this update: Mon 21 Sep 2026 05:00:47 +0000
Manifest next update: Tue 22 Sep 2026 05:00:47 +0000
Files and hashes: 1: 7eHaRVW-XDpYbYMS7PM9kVQMrmU.roa (hash: IHRINIPPQysqZwAhYPRCxmedKH/g1vm6KrKFWWCI12A=)
2: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: etbjzFg1DHtXu04cYig2EZPGwUIOFayLvjbvtN+zI4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:8e:2c:45:3d:67:4e:3c:17:22:3b:5b:14:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Sep 21 05:00:47 2026 GMT
Not After : Sep 22 05:00:47 2026 GMT
Subject: CN=9e4150b3f3f74f99cb4c43f2c884f8258b6d8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:42:a8:3f:55:de:cc:07:f7:9b:c6:b1:c3:
61:1d:7f:81:5c:35:03:31:45:e6:65:49:b2:d0:6d:
2e:bb:7b:4c:f9:dd:bf:5b:8b:d1:9d:81:20:db:3f:
0d:36:37:7e:61:2f:cd:7e:db:c1:d9:f8:6e:f9:80:
be:79:5a:20:8d:86:e3:3a:3f:80:ee:c6:fc:7f:e3:
91:60:77:40:b1:44:fc:24:a9:fb:c9:38:09:b7:4f:
65:ed:e0:7b:4a:35:f3:a5:0a:4e:52:cb:ea:58:2b:
e2:31:1a:bd:bc:0f:d6:b7:7b:29:ae:2e:76:70:4c:
92:26:11:6f:14:94:52:86:65:c1:6a:e4:31:b6:35:
a8:05:67:07:07:af:89:54:61:a9:ed:de:4f:28:cc:
e5:f0:71:73:5c:03:1a:d8:f1:f0:5a:d4:13:16:4f:
0c:be:27:bc:15:f4:94:9a:93:5c:c1:2f:85:76:77:
4f:4d:9a:36:81:6a:a4:b5:71:ce:86:bf:96:ec:3e:
4f:26:33:7d:24:f1:bd:7d:cf:36:04:dc:5b:2d:29:
03:b9:30:14:80:ed:98:ae:95:d1:61:06:78:ba:b9:
45:65:72:bd:01:89:c4:cc:42:35:cd:26:eb:44:32:
0b:b8:37:61:02:64:e4:45:6d:ab:4a:3e:63:74:fc:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:50:B3:F3:F7:4F:99:CB:4C:43:F2:C8:84:F8:25:8B:6D:8B:F4
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0f:7c:1f:98:06:53:76:79:63:25:cf:e8:01:f8:dc:f2:ce:
cb:61:3a:88:0a:70:a1:7e:14:cd:2f:e1:df:08:f6:03:7c:18:
63:b4:84:1b:34:7a:22:7b:4a:cb:52:b1:f2:7a:a0:62:da:70:
7d:da:b4:68:27:04:16:40:f6:a7:fd:bf:03:e8:54:b2:30:03:
0b:fa:7f:0a:2e:0a:80:24:25:8e:7d:0c:88:5b:ae:fb:81:70:
45:b6:1a:a2:5f:89:1b:e6:91:d4:95:7e:f1:9a:8a:20:49:f9:
1f:da:d8:e4:38:e2:00:fd:5c:87:ee:43:42:56:d5:49:1a:9a:
39:41:44:3e:66:02:2d:2e:72:fe:02:14:41:c4:f8:c1:9a:9f:
52:88:c1:ac:da:eb:8b:08:58:8d:a8:87:1e:e8:bc:46:db:72:
68:83:e6:3b:c0:e6:4a:a9:f4:7e:f6:c5:07:6a:43:42:86:2f:
e9:e8:ec:08:80:85:e0:1e:ac:7f:d3:4e:9d:bf:7a:89:65:64:
ad:62:90:34:99:8c:ac:1e:5f:26:c0:cd:95:c6:5e:68:c7:87:
2f:e8:11:9a:f0:fd:eb:25:77:a1:98:34:97:ad:c2:1d:10:32:
7f:a3:9e:b5:cf:00:af:bd:c9:11:35:f5:d9:ce:88:47:dd:aa:
d6:3d:db:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVo4sRT1nTjwXIjtbFPo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjYwOTIxMDUwMDQ3WhcNMjYwOTIyMDUwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZTQxNTBiM2YzZjc0Zjk5Y2I0YzQzZjJjODg0ZjgyNThiNmQ4YmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmxCqD9V3swH95vGscNhHX+BXDUD
MUXmZUmy0G0uu3tM+d2/W4vRnYEg2z8NNjd+YS/NftvB2fhu+YC+eVogjYbjOj+A
7sb8f+ORYHdAsUT8JKn7yTgJt09l7eB7SjXzpQpOUsvqWCviMRq9vA/Wt3spri52
cEySJhFvFJRShmXBauQxtjWoBWcHB6+JVGGp7d5PKMzl8HFzXAMa2PHwWtQTFk8M
vie8FfSUmpNcwS+FdndPTZo2gWqktXHOhr+W7D5PJjN9JPG9fc82BNxbLSkDuTAU
gO2YrpXRYQZ4urlFZXK9AYnEzEI1zSbrRDILuDdhAmTkRW2rSj5jdPziqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5BULPz90+Zy0xD8siE+CWLbYv0MB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ98H5gG
U3Z5YyXP6AH43PLOy2E6iApwoX4UzS/h3wj2A3wYY7SEGzR6IntKy1Kx8nqgYtpw
fdq0aCcEFkD2p/2/A+hUsjADC/p/Ci4KgCQljn0MiFuu+4FwRbYaol+JG+aR1JV+
8ZqKIEn5H9rY5DjiAP1ch+5DQlbVSRqaOUFEPmYCLS5y/gIUQcT4wZqfUojBrNrr
iwhYjaiHHui8RttyaIPmO8DmSqn0fvbFB2pDQoYv6ejsCICF4B6sf9NOnb96iWVk
rWKQNJmMrB5fJsDNlcZeaMeHL+gRmvD96yV3oZg0l63CHRAyf6Oetc8Ar73JETX1
2c6IR92q1j3b5g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:26 2026 by rpki-client