Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: 6LdBjiwSwWxibpZHEetZ8XyOF5CbjAt+gFuEzsv/gnM=
Subject key identifier: 64:7A:3D:26:9F:17:EC:A1:32:AF:73:44:89:05:9D:BB:7C:C5:0D:03
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019CAD59F2D036FC0F7ABF6D3730924B1F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0EDF
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: opj1GvREf5OuZQ96P8mdxNRyB/TaWfriKZyRsW3OHR8=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f2:d0:36:fc:0f:7a:bf:6d:37:30:92:4b:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=647a3d269f17eca132af734489059dbb7cc50d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:1d:8d:ac:67:ce:b2:c9:9f:c8:92:0e:fe:
98:ec:68:04:a1:e4:aa:6e:05:5c:1d:d3:de:2a:20:
b5:05:94:b2:45:19:fc:7f:41:de:65:78:90:30:e6:
95:f2:e9:34:54:ad:86:30:01:15:77:d1:f0:79:9e:
32:6b:d8:7a:b6:f2:c3:3d:56:ed:88:18:f9:4d:b0:
89:7f:b6:ec:51:eb:f1:bb:57:58:da:ea:7c:c1:7f:
bc:da:23:71:70:b3:c6:4c:fd:b6:ea:20:b8:a7:91:
6f:f5:ac:2d:a2:5e:1f:7e:f9:91:95:52:15:45:a3:
4e:1f:a6:bd:a1:97:7a:30:b0:5f:ef:10:fd:63:fa:
cc:62:40:d9:12:26:f6:63:f4:0b:46:d8:52:0b:89:
94:1d:ba:a3:d9:1d:ff:ff:4d:3c:ef:b7:1b:14:fe:
76:5b:98:78:74:6c:77:65:ce:de:40:8a:c6:73:fe:
8a:d0:36:66:33:5b:70:ce:29:c1:23:1b:9a:fa:54:
30:d3:68:a0:48:f1:bb:04:1f:37:8c:35:96:41:fc:
9b:68:7a:a1:e9:40:5b:f0:c2:13:ec:3e:19:23:26:
4e:0b:0b:62:cd:54:a4:61:be:cb:66:f6:df:bb:65:
08:e7:76:0d:7b:9c:53:56:e7:3f:5b:ee:b7:bf:d8:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:3D:26:9F:17:EC:A1:32:AF:73:44:89:05:9D:BB:7C:C5:0D:03
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:2f:01:5f:91:00:10:47:09:66:a2:8f:63:f7:fb:87:a5:
4c:70:d3:ea:89:9f:78:1d:68:e7:20:ee:e5:53:05:ff:70:41:
ef:de:75:13:f4:9b:89:1f:5c:14:09:4c:47:09:d9:a6:a0:98:
c7:db:9e:4e:20:d4:4e:d0:f0:7d:71:9d:bb:6c:55:b1:bd:6c:
89:eb:d2:d5:b1:5c:7b:ad:33:50:8c:0c:23:13:89:ff:3d:4e:
5d:d2:33:eb:e3:17:8e:6d:c5:7c:23:f7:e3:d7:75:ad:3d:17:
a8:6e:d8:58:90:66:e9:30:5c:05:0d:09:b9:17:13:d6:22:a3:
7c:04:ac:4f:04:7f:fd:73:f7:02:05:b4:98:0f:f4:36:7c:42:
7d:99:99:3c:22:7f:18:2b:48:12:42:16:ed:84:45:9a:e1:f1:
4c:7a:5b:23:5b:e8:11:ad:e4:18:8e:7f:ef:f5:7e:0e:e5:22:
cd:60:bf:24:1f:c6:1d:fd:1d:09:15:49:78:3b:10:ce:e0:0b:
aa:89:f5:11:ac:29:73:c2:85:48:4a:7b:b6:e6:20:41:d6:7e:
4f:d5:7b:ac:76:0e:e0:c3:40:c8:f3:cb:c3:16:fd:47:e6:28:
d1:d3:57:ec:69:82:34:6d:7d:f7:04:8b:d7:2a:c5:98:e9:49:
a9:6b:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:02 2026 by rpki-client