Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
File: XR-BeSG87Mrq4pwm0iXksxVoUtM.mft (raw, json)
Hash identifier: fzpUhvafPKEqcjhk5E3ZRA2sB3zRa1QfPBCgmGr3HB4=
Subject key identifier: 2E:83:B3:9B:CE:7A:E9:09:86:D3:A0:90:9A:E9:91:50:5D:05:93:E4
Authority key identifier: 5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
Certificate issuer: /CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Certificate serial: 019FAC768B358B70AA266B16B36F13F0130E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:17 +0000
Manifest this update: Wed 29 Jul 2026 06:01:17 +0000
Manifest next update: Thu 30 Jul 2026 06:01:17 +0000
Files and hashes: 1: Vop3TZSO3nBcI2F60b4tEIn4DLs.roa (hash: gyJANqlkc2iAV8vVuY7Y2HUc0B7Q2kdBNBRzQ2uPcTU=)
2: XR-BeSG87Mrq4pwm0iXksxVoUtM.crl (hash: tSXQNkqb/npx+LenAtGyFp7QmaFQLjBsxCyRC/sTk68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:8b:35:8b:70:aa:26:6b:16:b3:6f:13:f0:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Validity
Not Before: Jul 29 06:01:17 2026 GMT
Not After : Jul 30 06:01:17 2026 GMT
Subject: CN=2e83b39bce7ae90986d3a0909ae991505d0593e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:86:a5:c0:7e:54:f5:ea:9e:2f:2c:ce:b4:
7e:d3:71:1a:b7:ec:4d:4c:6a:64:39:c0:1e:33:78:
0b:05:fb:20:c1:47:67:21:19:29:ad:4e:2c:4d:bb:
a8:ff:b3:f6:7e:d7:71:48:20:79:77:94:0f:a3:8e:
98:c8:95:2d:16:ed:65:3c:8d:cf:bb:86:19:8e:42:
4a:81:9e:b2:4e:54:32:1b:79:8e:18:15:2a:34:95:
fd:3f:95:e5:8b:b3:c2:df:da:8e:a2:5a:df:bb:ef:
80:72:b3:cc:e2:ce:45:26:01:f1:ec:2e:5c:6a:9b:
17:0f:48:bc:a9:c7:62:ef:f7:e5:ee:f0:a0:f8:43:
a4:7d:0e:d1:fb:25:6b:83:30:7b:59:1a:d4:60:ff:
c1:02:c9:b6:43:10:1b:8e:37:4a:42:80:e4:eb:0a:
d1:4e:b3:ed:f3:2c:a8:7d:21:88:34:51:10:0c:9c:
67:93:2d:99:9c:de:53:4d:f3:33:e5:b2:98:f6:5c:
d2:57:cb:f8:78:64:17:d9:fd:34:0d:21:c5:2a:42:
28:8d:a3:09:88:8f:cc:35:fe:00:9a:74:e7:b3:39:
98:37:5a:b5:df:52:4c:8f:dd:9c:9e:4b:25:45:eb:
f5:4e:08:e3:9e:d7:ae:73:fa:6d:6b:ee:eb:ba:51:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:B3:9B:CE:7A:E9:09:86:D3:A0:90:9A:E9:91:50:5D:05:93:E4
X509v3 Authority Key Identifier:
keyid:5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e9:bf:e0:97:ea:f4:58:ae:2c:23:ff:4d:d3:c2:66:4a:39:
25:f8:89:6f:76:3a:51:b4:0f:8b:aa:04:51:b0:ac:36:5e:f9:
7b:32:02:ac:6d:88:0f:3d:59:99:c9:22:49:c0:a3:d6:e8:33:
b9:32:4e:c4:6f:9a:93:8c:44:3b:a3:e1:e9:b7:13:ce:b8:4d:
0d:bf:3d:5b:0f:4e:94:42:f9:69:30:92:b6:93:14:01:1f:d3:
ba:6a:d2:1b:6a:7f:41:b5:77:aa:c7:58:50:8c:91:65:48:a8:
4a:a2:90:c2:c8:d4:81:b3:de:73:32:90:61:38:83:85:7e:03:
9a:53:06:27:ff:9c:f1:34:7c:01:15:c8:7d:55:40:06:7c:5f:
51:ff:4c:d8:4d:74:1a:35:ba:a2:1a:df:a7:61:c6:bd:aa:c5:
75:c1:e8:fb:8e:36:66:03:bb:7d:e6:af:82:65:26:b1:ed:26:
6a:0c:88:ca:4b:ff:8a:99:e6:1d:eb:78:1a:8f:bd:b6:a1:36:
0e:9b:3f:14:29:fc:05:cd:49:69:04:40:10:a3:55:33:dc:fc:
01:fb:96:db:38:ed:ea:6a:3d:59:8d:90:a7:d6:9e:7b:32:65:
b5:93:ab:86:24:6f:3b:d4:f4:92:13:ff:85:56:cb:26:f7:a1:
6f:49:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:25:23 2026 by rpki-client