Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: p+zKPq5Sq7BWVLeGbgE1fXnN00UmRieuYVbBlG9sYiw=
Subject key identifier: E7:1C:BC:FC:8A:40:BB:3B:B2:25:86:04:84:CE:B4:77:84:8C:AF:8A
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019D98F4089C87C50C597E39A83157A2F66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0F59
Signing time: Fri 17 Apr 2026 01:00:22 +0000
Manifest this update: Fri 17 Apr 2026 01:00:22 +0000
Manifest next update: Sat 18 Apr 2026 01:00:22 +0000
Files and hashes: 1: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: w1wssTUI3JELZFGx05JQaVnERXfld+eAxj+8yrvxJjo=)
2: FQbQpzaAKq9rKC_SewyrSeIQCtk.roa (hash: rvOII/NOR6mF8u3iTAXMVmAI2T4hVS6cu1p/+OlBiFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:08:9c:87:c5:0c:59:7e:39:a8:31:57:a2:f6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Apr 17 01:00:22 2026 GMT
Not After : Apr 18 01:00:22 2026 GMT
Subject: CN=e71cbcfc8a40bb3bb225860484ceb477848caf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:23:ac:f9:ec:15:4c:85:c3:32:55:07:bb:
ca:41:ff:2d:0d:73:0c:1e:58:0f:81:7d:35:e6:55:
4e:24:06:6a:78:d3:d6:71:5f:7f:0a:31:92:ff:7d:
46:73:fe:28:51:32:dd:08:c4:6d:e9:7d:75:74:bb:
00:5e:44:0a:ad:8f:87:36:4e:36:e2:11:55:69:ca:
7b:f4:85:0d:b7:88:63:06:de:c4:5c:f2:09:37:d9:
4c:bf:05:3e:b0:c7:4d:17:d3:6f:82:0e:0d:10:cb:
99:08:e3:ee:8a:54:f0:42:36:6a:17:36:90:cb:e2:
5d:31:72:71:85:45:42:df:62:15:74:31:2a:52:d5:
b0:be:5a:3f:32:47:1d:ec:89:b1:4f:17:90:11:2c:
b7:a3:fe:80:70:3b:ed:56:e7:e8:56:bb:7a:a8:a0:
a3:c9:55:64:e0:42:d7:79:3a:61:e3:66:4b:02:50:
98:09:6b:3e:aa:7f:69:65:55:b0:b7:62:55:50:d4:
ed:17:81:09:32:e6:54:f4:33:f3:8c:20:1a:86:ae:
d8:59:b4:21:61:11:5e:dd:27:3b:6c:e4:56:e6:71:
05:70:70:40:70:30:47:e6:fd:b2:39:b5:db:a7:f8:
5d:73:36:05:25:c3:b6:5a:0a:81:b0:5b:d7:4b:5d:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:BC:FC:8A:40:BB:3B:B2:25:86:04:84:CE:B4:77:84:8C:AF:8A
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:7f:9a:c5:80:97:65:f2:c7:76:e0:6d:43:1e:04:4e:55:
3c:ee:3c:aa:bd:a9:ab:65:b0:88:00:34:ac:17:e0:b4:3f:99:
75:24:92:38:1b:1d:e3:80:b1:02:c8:2f:36:a6:80:94:a3:1e:
b9:bd:4e:b8:80:2b:c4:23:f3:dc:33:d0:8d:e7:c8:b5:ec:20:
2b:7b:48:af:65:39:9e:0c:e1:16:a4:3d:37:4f:55:97:79:92:
9e:76:a0:4e:b5:6d:45:0e:e9:ad:b1:cf:11:1c:f9:09:dc:fe:
aa:c8:5d:66:29:8a:d6:22:ca:de:89:d9:01:43:3a:10:66:c0:
9f:8e:a0:c5:7d:d5:fc:92:3b:41:9b:93:51:0a:8a:7b:20:2a:
69:63:52:9a:da:c2:ba:08:2f:24:98:98:95:e4:a2:dc:53:d0:
1c:6d:1e:4a:c5:1d:51:59:57:c3:10:02:15:20:f7:0f:72:d1:
0d:8d:6d:ba:6a:76:1d:de:c9:ee:af:a8:ff:9d:60:51:f9:07:
ec:6f:27:ee:e5:82:d1:6e:43:fb:e9:f9:8c:40:1a:72:c2:b9:
94:be:47:87:37:a8:f7:80:73:9b:6d:89:25:97:52:82:bb:4c:
a8:5a:02:3e:73:bb:f1:7b:e7:af:1b:54:e1:aa:b4:6d:20:10:
11:30:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:30 2026 by rpki-client