Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: nH0SaE9PSDxWgW5F53AlCHOZeEhPwD682rBk4wN1F/o=
Subject key identifier: 89:BC:62:1A:F8:14:8E:BE:08:8B:31:B4:B1:E3:28:C9:7E:4E:A2:70
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 019FA906F504A61BD355B6AA76DC58E2FDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 170B
Signing time: Tue 28 Jul 2026 14:00:33 +0000
Manifest this update: Tue 28 Jul 2026 14:00:33 +0000
Manifest next update: Wed 29 Jul 2026 14:00:33 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: sIvZQ+eS/vkDZbXgTH2tG+etzXO4rxUYmhsKNndWP+k=)
2: UdRtC8oWULapblUxKPZMiKoK7Fg.roa (hash: NCRhs0KrgrczrslxIEqi2lQhD/o2DKDw/5BIUZhQTS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:f5:04:a6:1b:d3:55:b6:aa:76:dc:58:e2:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Jul 28 14:00:33 2026 GMT
Not After : Jul 29 14:00:33 2026 GMT
Subject: CN=89bc621af8148ebe088b31b4b1e328c97e4ea270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:43:8b:d5:b3:2a:51:4f:c9:4f:4e:41:44:
5c:84:4b:c0:d9:56:75:04:b3:81:48:41:b0:e1:cf:
93:32:1c:8d:9b:0e:15:89:35:ad:0d:68:ad:83:d0:
ba:cb:e9:56:b8:50:2f:2e:31:49:48:9d:ee:08:97:
bb:fd:4f:e1:04:b4:f1:c6:54:3e:15:b5:8e:14:eb:
d7:2c:53:e2:9b:25:1d:99:4c:63:31:7b:78:23:bf:
59:0d:3c:8b:69:e8:7b:52:68:59:c0:5b:e9:11:e2:
2e:ed:ba:21:91:a6:0a:d8:6c:9f:93:64:b2:b9:c3:
14:6b:06:e9:d2:8a:56:ec:39:4e:38:89:6c:ef:17:
8d:75:c2:d4:20:54:23:a1:a8:38:3e:9f:5b:04:2e:
5d:1a:a6:38:fb:cf:b3:e4:7f:ce:e1:50:9a:45:85:
88:c4:78:b4:59:19:cb:85:9e:a7:5f:50:87:94:1c:
e9:dc:f2:6b:4e:0d:d3:21:45:0e:00:9b:3b:9c:d2:
3f:49:dc:1c:38:32:8e:8d:1a:a3:30:c4:ae:4a:0d:
1a:82:65:37:54:06:18:1e:5c:01:17:fc:29:05:be:
10:34:c1:20:bc:3a:4f:1e:79:16:92:13:b2:a5:3a:
63:b5:ac:7f:5c:0b:88:6c:8f:a6:66:1e:b3:a4:95:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:62:1A:F8:14:8E:BE:08:8B:31:B4:B1:E3:28:C9:7E:4E:A2:70
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:74:d6:79:99:7f:a0:da:56:26:4c:dd:f2:8c:36:d6:a4:b6:
85:42:4d:4b:4d:07:90:8e:36:68:71:c6:63:f8:72:cd:9b:31:
70:29:dd:bf:30:f9:b0:aa:01:21:4b:9b:cf:47:c1:86:db:ee:
24:46:33:75:c1:df:b2:4c:da:1f:86:89:f8:90:4f:6c:d3:e7:
36:6b:f0:37:e7:e9:fe:c5:63:50:2a:15:96:a2:77:85:f3:95:
e9:63:c0:2d:c2:d1:95:00:4f:02:ad:a2:bd:a2:e6:2e:3b:e2:
e9:ac:4f:23:77:b0:1a:d4:2c:18:64:19:a1:94:53:e4:a6:68:
d8:ba:4d:69:6b:c3:dd:f6:2d:dd:ce:c3:6b:6e:a4:7b:87:e1:
f7:24:81:0c:ce:5b:0f:1c:a9:51:3d:26:41:8d:a8:b2:70:24:
d6:4e:e7:fa:38:04:69:04:97:b8:55:58:63:b6:05:e9:4e:60:
c0:46:21:6e:9b:7b:1d:88:84:02:46:e4:b3:dd:34:6d:ef:53:
67:aa:0d:91:67:86:98:eb:3f:f5:6e:23:6e:7b:c7:b0:87:8e:
18:3a:80:a7:96:a8:04:8a:dd:dc:26:46:27:af:67:1a:b4:95:
a2:a5:b0:27:c8:a5:27:80:db:f6:88:ed:4e:6c:a1:67:55:10:
43:cd:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:39 2026 by rpki-client