Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
File: XR-BeSG87Mrq4pwm0iXksxVoUtM.mft (raw, json)
Hash identifier: ZdeZlVpYpHsZTYPF1fWckEWAafeg7ziudvQ1zlTnhyY=
Subject key identifier: 0D:6A:B9:8F:0A:AF:B8:78:E2:C4:EA:56:97:EB:AF:59:55:EC:A8:B8
Authority key identifier: 5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
Certificate issuer: /CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Certificate serial: 01A11B6334CB41501B5FD2E1B833C0E07876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:00:48 +0000
Manifest this update: Thu 08 Oct 2026 12:00:48 +0000
Manifest next update: Fri 09 Oct 2026 12:00:48 +0000
Files and hashes: 1: Vop3TZSO3nBcI2F60b4tEIn4DLs.roa (hash: gyJANqlkc2iAV8vVuY7Y2HUc0B7Q2kdBNBRzQ2uPcTU=)
2: XR-BeSG87Mrq4pwm0iXksxVoUtM.crl (hash: 2pZRhQKCV9Q0Mh1kn33KX0OPwW4RwtNdcO/fRpGRr3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:34:cb:41:50:1b:5f:d2:e1:b8:33:c0:e0:78:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d1f817921bceccaeae29c26d225e4b3156852d3
Validity
Not Before: Oct 8 12:00:48 2026 GMT
Not After : Oct 9 12:00:48 2026 GMT
Subject: CN=0d6ab98f0aafb878e2c4ea5697ebaf5955eca8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:79:1a:2a:c2:08:b4:ae:0f:33:c7:41:80:
22:9b:1e:65:ef:56:2c:52:7f:15:16:c4:a7:21:95:
2a:91:9d:83:fb:3d:a3:d4:38:ef:b4:53:64:8c:59:
0b:9a:6b:c6:55:d2:7c:77:9b:13:56:65:cf:90:d3:
e8:48:ff:2a:cd:cb:78:91:06:8c:73:ea:63:4f:c2:
34:b7:1f:cd:41:c2:5a:14:fc:92:b8:6a:61:17:01:
c8:3a:9b:0f:16:2f:f8:ab:43:de:fa:bb:4c:b7:4a:
14:b1:b7:21:f2:33:b1:67:57:ca:06:85:ee:34:45:
5a:a5:fc:68:4c:2f:4f:c7:b2:b3:8e:42:12:ad:54:
62:45:e5:a7:53:31:81:ce:17:ed:35:97:ae:07:5e:
17:5d:1d:bf:6a:81:5a:f5:ea:68:28:a4:de:4b:74:
8a:83:26:af:06:37:a1:8e:01:a3:8c:81:11:cd:f8:
94:e8:3c:f4:93:36:b4:d9:d2:3e:ff:c8:07:66:fd:
0b:d8:3d:b1:ac:4f:1f:d8:53:be:d5:57:a0:20:f1:
03:e8:b0:f9:fd:02:f3:16:a9:42:d9:44:08:13:e0:
3f:cc:c5:76:b7:4e:d1:e5:3f:6f:ee:7f:78:8a:d5:
a6:3b:66:3d:2b:ea:0a:f1:b0:3e:9a:cc:fa:a4:fe:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:B9:8F:0A:AF:B8:78:E2:C4:EA:56:97:EB:AF:59:55:EC:A8:B8
X509v3 Authority Key Identifier:
keyid:5D:1F:81:79:21:BC:EC:CA:EA:E2:9C:26:D2:25:E4:B3:15:68:52:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XR-BeSG87Mrq4pwm0iXksxVoUtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/XR-BeSG87Mrq4pwm0iXksxVoUtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:98:64:ba:fd:27:8d:9e:ef:e1:af:0e:e9:81:5c:38:59:c4:
b1:56:1e:11:23:fc:f1:2a:20:d0:15:9b:30:5e:6f:ec:08:fe:
5f:80:03:2a:3f:79:fd:51:74:b7:7b:3b:08:cd:9d:b8:a3:dd:
ae:d1:e6:0e:4c:93:a1:5a:54:6f:68:71:ec:c4:c5:68:db:76:
0a:5c:f8:72:6f:e4:e3:83:01:1f:10:cb:f7:e9:81:0b:7a:7f:
c5:c9:ca:0c:07:30:8d:13:cb:6a:df:4b:1c:2b:b2:5c:22:81:
07:8e:3b:83:8c:92:ae:1c:4f:1a:8d:8a:0a:1c:c1:6b:0a:be:
3e:40:1d:55:d8:d6:ba:a2:a8:80:58:f8:33:3e:60:c2:4f:f7:
4e:4b:78:b5:43:79:71:9b:0a:14:e0:ee:60:68:fb:71:73:01:
d2:9f:c3:ff:b5:b5:c9:6f:94:fa:3d:15:56:1a:10:ff:01:46:
be:e3:e1:a4:63:02:80:0a:b0:13:75:02:1a:38:cf:c5:68:4a:
6f:85:3b:9a:c4:1f:b2:d7:b0:73:80:6c:aa:9b:34:e6:36:13:
46:66:31:fc:22:9c:7c:ba:49:8f:51:e8:55:8f:65:4f:85:6b:
5c:c7:6f:4b:4c:5e:20:0c:56:93:3d:9a:94:51:5b:cb:43:8b:
0a:74:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:32:21 2026 by rpki-client