Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: OtQ7jd1iR1IEjItSw+R6PeKkjuLoswBxbO525WGkEcw=
Subject key identifier: 5B:4C:7D:0F:74:DE:BA:85:02:DE:FC:E9:E0:E2:DC:A9:A3:2A:B9:6A
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 019CAD2258C7CCEEA759010049E6642B6FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 07D7
Signing time: Mon 02 Mar 2026 06:00:35 +0000
Manifest this update: Mon 02 Mar 2026 06:00:35 +0000
Manifest next update: Tue 03 Mar 2026 06:00:35 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: fmetHkY8mVkC7zAIauNfWkRFVf/s6zqiW9xZSK4/ztc=)
2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:58:c7:cc:ee:a7:59:01:00:49:e6:64:2b:6f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Mar 2 06:00:35 2026 GMT
Not After : Mar 3 06:00:35 2026 GMT
Subject: CN=5b4c7d0f74deba8502defce9e0e2dca9a32ab96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:67:e6:33:2e:29:66:23:f5:7c:85:1f:cb:
69:ca:7f:98:a7:ef:b7:c2:0e:a0:44:7c:80:30:92:
33:f6:53:c3:3a:70:69:16:c8:11:69:5f:19:f2:dd:
62:9b:7e:25:fe:e5:82:dd:fb:b9:77:a1:cf:bb:ef:
2c:d6:47:0b:3d:2d:97:9a:dc:58:a4:71:c1:e0:2f:
c5:ea:f1:cd:4e:bb:65:9f:a4:d0:d4:cd:97:b1:a8:
8a:6d:78:d9:44:e5:33:13:11:f6:de:c7:6c:67:ac:
c2:ee:0a:f5:81:fd:99:57:4b:94:a4:81:56:c4:7d:
8f:38:ed:19:7a:18:cb:be:de:81:97:aa:f2:f3:9e:
05:9c:6d:5c:6a:f4:a0:a0:cc:b9:23:89:45:ec:be:
e3:8e:1c:a5:72:71:3d:99:53:a3:42:bc:4c:24:98:
2a:e8:5d:8d:b2:d4:f8:46:46:02:71:eb:9a:09:a9:
25:57:a1:3a:73:ad:c5:21:26:33:e7:c7:98:7f:7f:
82:89:8f:9c:b3:37:b0:ef:26:96:7c:7d:81:ff:58:
16:f5:96:1a:7b:d9:cd:2d:68:72:d1:d5:f8:d8:01:
de:46:12:e7:de:01:12:7c:b5:d6:bf:90:45:9e:5d:
ed:1b:29:9b:e4:59:71:5b:42:31:f9:0e:26:4b:fc:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:7D:0F:74:DE:BA:85:02:DE:FC:E9:E0:E2:DC:A9:A3:2A:B9:6A
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fc:5a:65:b3:5f:1b:1f:cb:a6:9f:12:bd:14:28:d5:a1:7c:
de:15:ed:47:4a:0e:52:75:38:ad:c0:83:77:55:bd:95:25:47:
68:16:78:e9:47:c0:9c:b2:99:46:ae:7c:a2:c2:97:7d:f8:6b:
fd:31:28:cd:09:58:b5:32:63:41:d6:04:7b:7c:ab:02:0c:00:
ec:91:e2:e8:73:52:2f:33:f2:7f:95:ff:c5:6a:b9:1a:0d:a5:
49:c7:86:6e:6b:eb:8d:25:b8:fb:72:e6:d2:fb:cf:eb:7f:a9:
9d:e1:df:62:3c:88:3c:4f:c5:a0:fd:4d:12:79:d0:24:9a:79:
f3:54:47:9a:48:b3:5a:24:1a:ce:da:9f:61:dc:d6:b1:1a:19:
a7:da:3d:31:34:eb:2c:86:82:da:a6:bf:7b:76:f0:79:69:c1:
1a:a2:58:0a:21:19:e6:62:be:4c:8f:b4:50:c2:e7:e7:52:9a:
b9:40:c1:f3:76:3d:05:21:82:cf:f3:b3:35:df:da:f3:5f:2c:
71:4f:a3:09:19:99:fd:cb:a6:70:82:24:a8:60:63:60:ed:c6:
b3:91:47:73:23:bc:a3:6c:c5:31:11:4d:29:0b:fb:3e:f1:18:
22:f7:57:f6:3e:c0:f6:74:47:87:bb:93:74:6a:8b:4f:13:f8:
50:db:5a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIljHzO6nWQEASeZkK2+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NDg4OTZhMWM0YWM5ZDgwMWJmMWQ2YjIwYmRlZjU5NzRk
NWI0ZjYwHhcNMjYwMzAyMDYwMDM1WhcNMjYwMzAzMDYwMDM1WjAzMTEwLwYDVQQD
Eyg1YjRjN2QwZjc0ZGViYTg1MDJkZWZjZTllMGUyZGNhOWEzMmFiOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkFn5jMuKWYj9XyFH8tpyn+Yp++3
wg6gRHyAMJIz9lPDOnBpFsgRaV8Z8t1im34l/uWC3fu5d6HPu+8s1kcLPS2XmtxY
pHHB4C/F6vHNTrtln6TQ1M2XsaiKbXjZROUzExH23sdsZ6zC7gr1gf2ZV0uUpIFW
xH2POO0ZehjLvt6Bl6ry854FnG1cavSgoMy5I4lF7L7jjhylcnE9mVOjQrxMJJgq
6F2NstT4RkYCceuaCaklV6E6c63FISYz58eYf3+CiY+cszew7yaWfH2B/1gW9ZYa
e9nNLWhy0dX42AHeRhLn3gESfLXWv5BFnl3tGymb5FlxW0Ix+Q4mS/yUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtMfQ903rqFAt786eDi3KmjKrlqMB8GA1UdIwQY
MBaAFARIiWocSsnYAb8dayC971l01bT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYt
YmNkZDEzNDk1MjkxLzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDQyNmItYWQyNS00NGYxLTk4YWYtYmNkZDEzNDk1Mjkx
LzEvQkVpSmFoeEt5ZGdCdngxcklMM3ZXWFRWdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfxaZbNf
Gx/Lpp8SvRQo1aF83hXtR0oOUnU4rcCDd1W9lSVHaBZ46UfAnLKZRq58osKXffhr
/TEozQlYtTJjQdYEe3yrAgwA7JHi6HNSLzPyf5X/xWq5Gg2lSceGbmvrjSW4+3Lm
0vvP63+pneHfYjyIPE/FoP1NEnnQJJp581RHmkizWiQaztqfYdzWsRoZp9o9MTTr
LIaC2qa/e3bweWnBGqJYCiEZ5mK+TI+0UMLn51KauUDB83Y9BSGCz/OzNd/a818s
cU+jCRmZ/cumcIIkqGBjYO3Gs5FHcyO8o2zFMRFNKQv7PvEYIvdX9j7A9nRHh7uT
dGqLTxP4UNta/Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:46 2026 by rpki-client