Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: NUiRvrYIr5G9aUTLooCRdnzr+xVH7ZfHyZ9F9FTAsgg=
Subject key identifier: 3D:A2:5C:16:EB:9A:64:C8:DF:32:EA:9A:F2:06:95:4B:67:27:BA:00
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 019CA78EFAF4EC1E5FB34C44A3F74DC6FD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 11
Signing time: Sun 01 Mar 2026 04:01:31 +0000
Manifest this update: Sun 01 Mar 2026 04:01:31 +0000
Manifest next update: Mon 02 Mar 2026 04:01:31 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: UNeWlycG6s3+w82ZHd6JGN+h2ba1YGZPIkXHkejTIR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:8e:fa:f4:ec:1e:5f:b3:4c:44:a3:f7:4d:c6:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Mar 1 04:01:31 2026 GMT
Not After : Mar 2 04:01:31 2026 GMT
Subject: CN=3da25c16eb9a64c8df32ea9af206954b6727ba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:2b:86:15:ed:48:3c:90:5b:0b:bb:25:bc:
ff:f0:97:e3:df:66:af:47:fe:d4:35:f8:b8:50:78:
72:a9:f6:1c:c0:91:90:a2:6c:18:fd:9b:f6:80:9e:
2f:c8:84:1a:02:c8:0c:86:73:a1:8b:3e:b1:02:6d:
b3:bb:02:ed:a1:d6:61:74:83:33:7b:05:b5:90:b0:
78:98:02:c9:e1:4b:7d:6e:e1:53:fb:b1:4b:10:f6:
68:68:52:50:55:49:84:de:d5:7e:25:a1:03:ed:84:
ff:57:e6:71:88:e8:83:50:a1:ab:fa:ff:f9:21:89:
b7:6f:7f:c3:dc:3c:23:7d:6d:1c:3f:1e:fb:43:d4:
aa:d8:f7:83:97:57:a7:13:36:00:4f:64:4e:e9:57:
88:f9:c9:e1:7b:39:c1:c1:e4:65:4d:b6:5c:8a:c9:
28:f8:44:6d:18:b5:47:02:3f:23:b8:08:4e:9a:d6:
cc:e5:ec:7c:ee:a1:65:84:34:3a:74:e4:13:5b:49:
49:2d:18:3e:5b:77:32:2f:02:36:44:19:6b:d8:40:
ca:bf:54:a3:bf:62:00:c5:d6:9a:35:65:73:23:52:
02:40:52:21:79:8c:05:2d:ad:be:01:d8:04:39:94:
75:82:bd:83:34:f1:b0:1c:57:a2:b7:7c:ba:36:29:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:5C:16:EB:9A:64:C8:DF:32:EA:9A:F2:06:95:4B:67:27:BA:00
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:da:49:f1:e0:34:b2:52:53:04:14:22:f6:21:1f:34:c6:00:
87:6c:37:cc:52:73:1f:af:29:e3:dc:c1:ae:3d:43:1b:35:16:
0d:9a:fc:51:02:75:75:86:5c:44:4e:f4:ba:04:22:2c:10:a0:
c7:b4:b8:b1:3a:d6:33:bf:e1:e2:f7:d7:eb:f3:45:9d:9e:96:
70:b3:ab:87:38:89:84:7e:04:1c:b7:e5:ac:38:18:e0:2f:90:
e8:81:6f:a8:44:f3:78:2b:ab:c8:42:4a:33:19:d4:1b:08:98:
67:b8:60:7f:2f:ed:e4:cc:ec:48:bf:1d:d5:3e:44:2f:c6:e0:
9b:ce:36:b4:20:76:cf:91:9f:16:e3:6b:e0:64:58:f2:6b:47:
bc:a9:df:7a:a9:01:c5:8c:23:6d:6e:e6:ec:47:ef:5d:d1:f8:
bd:90:99:37:8f:29:87:48:1f:9c:2c:2c:28:74:58:75:9c:ca:
1e:66:5e:77:57:8a:f1:51:f2:84:8b:65:9a:c8:da:1e:e5:dd:
e7:d6:bb:cf:ee:6c:6a:42:de:02:43:c7:af:1e:17:de:d8:64:
28:0d:10:f2:f1:54:5f:8d:09:bf:f7:68:fb:5e:5f:fc:a2:90:
6c:5c:f2:cd:b2:a5:a3:0a:ac:1f:cf:ae:a3:e3:02:c4:fc:aa:
50:b5:32:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZynjvr07B5fs0xEo/dNxv1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZWE5NzVmYmIwM2ZjMjVmYjgwNDRiMmRhMzg4MTRjNmFm
MWNmZGUwHhcNMjYwMzAxMDQwMTMxWhcNMjYwMzAyMDQwMTMxWjAzMTEwLwYDVQQD
EygzZGEyNWMxNmViOWE2NGM4ZGYzMmVhOWFmMjA2OTU0YjY3MjdiYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IsrhhXtSDyQWwu7Jbz/8Jfj32av
R/7UNfi4UHhyqfYcwJGQomwY/Zv2gJ4vyIQaAsgMhnOhiz6xAm2zuwLtodZhdIMz
ewW1kLB4mALJ4Ut9buFT+7FLEPZoaFJQVUmE3tV+JaED7YT/V+ZxiOiDUKGr+v/5
IYm3b3/D3DwjfW0cPx77Q9Sq2PeDl1enEzYAT2RO6VeI+cnheznBweRlTbZcisko
+ERtGLVHAj8juAhOmtbM5ex87qFlhDQ6dOQTW0lJLRg+W3cyLwI2RBlr2EDKv1Sj
v2IAxdaaNWVzI1ICQFIheYwFLa2+AdgEOZR1gr2DNPGwHFeit3y6NilmrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2iXBbrmmTI3zLqmvIGlUtnJ7oAMB8GA1UdIwQY
MBaAFG3ql1+7A/wl+4BEsto4gUxq8c/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNDQwMGEtZTFhYi00MjExLWI5M2It
YzUxN2UzMDdlNTY3LzEvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNDQwMGEtZTFhYi00MjExLWI5M2ItYzUxN2UzMDdlNTY3
LzEvYmVxWFg3c0RfQ1g3Z0VTeTJqaUJUR3J4ejk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdpJ8eA0
slJTBBQi9iEfNMYAh2w3zFJzH68p49zBrj1DGzUWDZr8UQJ1dYZcRE70ugQiLBCg
x7S4sTrWM7/h4vfX6/NFnZ6WcLOrhziJhH4EHLflrDgY4C+Q6IFvqETzeCuryEJK
MxnUGwiYZ7hgfy/t5MzsSL8d1T5EL8bgm842tCB2z5GfFuNr4GRY8mtHvKnfeqkB
xYwjbW7m7EfvXdH4vZCZN48ph0gfnCwsKHRYdZzKHmZed1eK8VHyhItlmsjaHuXd
59a7z+5sakLeAkPHrx4X3thkKA0Q8vFUX40Jv/do+15f/KKQbFzyzbKlowqsH8+u
o+MCxPyqULUyHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:27 2026 by rpki-client