Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: Fp5RwkLk17AD/bv1zQO/jVQJXRFb4Ou9arsFAinvc3U=
Subject key identifier: 99:E8:7A:DA:5F:0D:09:82:88:F0:AA:68:E5:8F:FD:C0:98:3B:EC:2A
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 019D9C9A94DFFF11D8F671456215E637B017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0853
Signing time: Fri 17 Apr 2026 18:01:09 +0000
Manifest this update: Fri 17 Apr 2026 18:01:09 +0000
Manifest next update: Sat 18 Apr 2026 18:01:09 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: Mcm9NywJKYEvsDnXq8rx3AcfxXqUYQN7e4XXzNhbWls=)
2: QMJnhj9eUtot273579TURTBZh0I.roa (hash: +DvyZkkKcp4VyvLUj2MDatf/EjxdGh2Y9geHq22gBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:94:df:ff:11:d8:f6:71:45:62:15:e6:37:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Apr 17 18:01:09 2026 GMT
Not After : Apr 18 18:01:09 2026 GMT
Subject: CN=99e87ada5f0d098288f0aa68e58ffdc0983bec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:b4:b3:26:0d:f7:70:81:ac:e7:a0:a1:24:
f8:31:5b:93:ca:ca:95:ef:37:52:70:4f:f7:29:05:
78:3a:e0:38:58:12:95:b1:02:88:d2:b6:6e:59:15:
12:89:1d:16:4a:85:59:16:b8:e3:66:83:b8:25:cd:
67:a0:0f:89:7c:75:b3:84:b4:38:ba:cc:67:38:ab:
6a:1c:50:98:d1:44:45:cd:c5:9c:1b:51:d7:6e:3e:
6a:34:2a:4f:78:f2:ee:93:ea:49:70:3f:f4:f0:41:
fe:68:8b:40:90:ce:81:1b:af:91:3b:ab:b9:4e:47:
10:7b:66:ee:60:4d:73:88:9d:6b:9f:17:61:3c:b0:
83:58:dd:a8:9e:b4:dc:89:9a:b8:80:4c:02:94:7c:
74:b8:4f:a2:d9:ef:34:f7:e4:3f:bd:24:e4:f0:c8:
f0:42:54:15:ef:9e:e3:ed:ec:13:70:ca:e8:28:46:
7d:3e:f3:78:d8:dc:f4:66:2d:56:92:fe:7e:2a:c1:
3f:a3:a0:53:fe:c7:ca:d2:7b:f5:b0:a7:81:2d:7c:
9f:b2:98:33:c7:93:62:53:91:39:2b:82:7b:2b:7d:
05:90:f0:e1:3a:8a:6d:a0:32:1f:2f:db:3c:dc:63:
1f:ba:ff:0f:b5:70:c3:b5:7e:1f:a9:24:01:75:89:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:7A:DA:5F:0D:09:82:88:F0:AA:68:E5:8F:FD:C0:98:3B:EC:2A
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2c:5c:15:fe:58:55:36:63:ec:62:c0:fb:17:7f:12:3e:9f:
11:f6:34:40:5b:7e:f7:9e:a2:73:00:19:75:5c:6f:67:37:a8:
72:7f:70:14:92:0b:93:62:31:60:55:08:fb:f2:90:45:27:ec:
1f:5e:8c:da:06:10:d3:75:da:25:25:dc:8a:31:5b:20:52:45:
b1:03:79:cd:76:88:21:72:0e:b1:a9:77:48:2c:a3:f8:63:7b:
c6:10:4b:64:bd:da:37:13:84:85:27:70:b4:37:88:75:8b:d3:
16:c6:24:20:c0:5f:53:a2:b5:e3:1a:6d:79:e0:b7:b9:7d:a2:
11:4a:89:31:ac:24:f7:64:0b:26:28:ef:53:b8:16:8d:19:e1:
28:e7:a3:19:ad:e7:b3:36:2f:32:7c:40:23:c3:a7:b6:a4:c7:
7b:77:6a:07:c1:74:83:76:07:7b:9e:3c:f1:d8:00:1d:af:d8:
4f:51:89:64:30:e8:24:24:21:80:c4:42:7b:ee:66:4d:30:b6:
ae:e0:96:e2:a0:eb:e8:a5:8b:42:80:bf:d0:3a:78:31:47:51:
b6:d3:b0:7e:e2:19:b8:78:b6:0b:ea:c8:2b:35:d3:72:05:ce:
bf:df:5a:24:18:0e:b2:b5:d5:60:e7:fb:5c:ef:db:23:7c:eb:
db:1a:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:06 2026 by rpki-client