Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
File: beqXX7sD_CX7gESy2jiBTGrxz94.mft (raw, json)
Hash identifier: SX/tvRHTGgsSvckHwkiELmIkfG1zVKeVvholF006+J4=
Subject key identifier: 75:3C:D1:89:D5:20:48:3D:6A:0A:E7:B5:9D:FD:EF:0F:77:30:90:4A
Authority key identifier: 6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
Certificate issuer: /CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Certificate serial: 01A0C40DAB266D4DC16E6FA1DA3666A2E23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
Manifest number: 0232
Signing time: Mon 21 Sep 2026 13:00:25 +0000
Manifest this update: Mon 21 Sep 2026 13:00:25 +0000
Manifest next update: Tue 22 Sep 2026 13:00:25 +0000
Files and hashes: 1: 5sqjFXgO0w1QuB_d-Lsne6SbaQo.asa (hash: sUoa1O1fHzMIIDGTvBZh3jRmmmJXXfvDL83fAYtkpi4=)
2: beqXX7sD_CX7gESy2jiBTGrxz94.crl (hash: 6gJcDxlhbzlhf0qOHnaQfku0u8g88sriWFnPLWKYAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:ab:26:6d:4d:c1:6e:6f:a1:da:36:66:a2:e2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea975fbb03fc25fb8044b2da38814c6af1cfde
Validity
Not Before: Sep 21 13:00:25 2026 GMT
Not After : Sep 22 13:00:25 2026 GMT
Subject: CN=753cd189d520483d6a0ae7b59dfdef0f7730904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:62:43:3a:9c:18:37:84:b7:d3:fb:92:79:
5b:49:e9:69:df:3c:4c:43:55:38:29:6d:a1:a7:1d:
bb:2d:ec:07:6d:25:93:db:1f:6a:78:5e:72:ec:3d:
8a:8a:a1:39:e3:e3:73:d4:34:ed:33:75:72:ce:2c:
8f:90:7d:fc:27:98:0a:e6:af:44:a3:cd:1a:f3:f9:
0f:f8:95:d1:4b:14:09:28:e2:49:90:86:d3:85:ef:
d4:58:dc:c3:6b:b7:e6:1c:b8:60:80:18:23:bf:84:
1d:79:b2:5f:8a:09:99:29:18:de:ae:87:ac:0b:48:
31:c6:34:9f:7e:18:68:d4:d9:90:6b:04:14:68:01:
96:ba:26:f0:f7:3a:1e:19:3f:30:23:eb:42:3c:21:
2a:71:ca:d1:23:01:79:86:62:d7:40:d6:a7:c6:1c:
3d:d1:00:6d:61:e0:1d:88:76:59:ab:b2:74:f2:ea:
bc:50:3c:43:05:66:7d:ef:ad:42:32:f2:ee:7a:89:
fd:b4:6f:72:d1:ba:4b:1d:a0:4f:90:12:03:86:96:
cf:4d:e9:29:ff:56:09:80:f3:63:42:83:36:2f:bd:
46:09:ed:d2:9c:46:80:17:ee:df:29:07:70:86:aa:
c8:9d:b6:9a:df:1a:e3:21:28:11:a0:d3:ae:a8:f3:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:D1:89:D5:20:48:3D:6A:0A:E7:B5:9D:FD:EF:0F:77:30:90:4A
X509v3 Authority Key Identifier:
keyid:6D:EA:97:5F:BB:03:FC:25:FB:80:44:B2:DA:38:81:4C:6A:F1:CF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqXX7sD_CX7gESy2jiBTGrxz94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a4400a-e1ab-4211-b93b-c517e307e567/1/beqXX7sD_CX7gESy2jiBTGrxz94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:31:e7:c8:74:95:d5:2f:48:b6:3f:1b:1d:62:c7:3e:db:e4:
7d:75:dc:b2:47:d8:fc:e3:1b:a5:61:71:ef:b8:11:d6:3a:95:
9f:d7:6c:66:cc:55:2b:bc:9c:42:df:ba:df:1d:a8:d2:f7:17:
c7:78:27:89:3e:6e:50:ca:a0:87:07:25:f0:6b:c2:f9:b6:e0:
cc:f2:9d:19:15:13:2f:0d:27:1c:03:44:03:77:2a:bb:60:3d:
0d:ec:29:25:93:de:3e:73:a5:5f:b0:64:8d:f5:58:3d:b5:e3:
37:64:9a:3b:5b:dd:29:8a:4d:81:aa:35:6e:c5:43:28:5e:8b:
c0:ec:9e:cf:30:ea:6b:06:35:4b:d8:7c:8b:5d:0b:b1:ef:f8:
43:66:e1:a1:2f:0e:68:df:bd:6e:2b:ea:c3:75:27:dd:76:0d:
a3:a6:d2:c7:1d:d2:f3:e2:b8:ee:7d:38:f2:19:3e:75:43:43:
22:5f:90:28:27:93:c7:71:24:c2:3c:c5:af:40:be:c8:1f:92:
f6:56:a6:fb:b9:d1:e4:43:d0:d2:53:c6:4f:cc:b3:30:28:3d:
39:56:48:19:15:1b:70:e4:ae:ad:f0:d8:15:de:eb:a8:fe:ba:
97:b9:21:71:e9:30:f2:39:8d:d8:5b:88:05:ca:ed:47:99:eb:
dc:75:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:59 2026 by rpki-client