Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: SZb1iommXivMHGN3P5w3izjmAH/xZS8+dKhc8teMZno=
Subject key identifier: 23:8B:53:28:3A:98:85:C3:B2:6C:9D:33:48:CD:D5:80:9A:29:85:28
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019FA861EB3B91D9536F06A8A0D66DD9D6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 11:00:17 +0000
Manifest this update: Tue 28 Jul 2026 11:00:17 +0000
Manifest next update: Wed 29 Jul 2026 11:00:17 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: dexhoEUaWpbDuzZRY1zGIENGBlD9O7BqS6YvvM6Xa34=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:eb:3b:91:d9:53:6f:06:a8:a0:d6:6d:d9:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jul 28 11:00:17 2026 GMT
Not After : Jul 29 11:00:17 2026 GMT
Subject: CN=238b53283a9885c3b26c9d3348cdd5809a298528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:44:ac:e7:29:b5:2d:5b:09:3b:e9:cf:bc:
60:c5:d7:35:0e:92:df:92:58:7a:09:e7:2c:c7:54:
93:fb:d7:90:e1:65:bf:1f:92:46:a2:e4:65:3e:1e:
67:37:83:fd:d2:f6:45:ce:20:49:28:b5:30:c0:52:
da:a1:9a:c5:21:4a:71:01:75:38:5f:5f:6c:d6:5c:
f0:90:89:9f:3a:c0:dc:4f:20:75:c2:5a:e2:08:8c:
49:19:73:2a:75:8a:28:84:e8:eb:3c:19:06:96:81:
c5:f5:46:80:df:3e:4f:3c:c4:15:6d:bc:94:2d:e3:
1b:1d:89:13:67:ae:5c:5d:7a:86:33:ce:88:8f:5a:
2f:f6:06:5d:81:f0:32:39:a7:b8:55:63:89:1e:71:
1c:ea:6d:87:09:ce:9e:35:73:da:62:7a:78:2b:2c:
61:54:80:b8:a2:48:7e:5b:b2:1e:96:0f:3a:8a:5d:
4e:16:54:3d:3f:0b:3d:f4:bf:a1:74:cc:45:db:db:
c2:86:05:d7:46:5f:f8:da:e7:4c:85:4e:55:c9:d1:
55:82:ac:33:0a:cf:5c:93:11:97:93:2a:e9:e9:3a:
b4:c3:53:b8:ac:3c:c1:95:19:5c:01:53:c7:e2:b9:
bd:4e:e4:88:29:ee:6c:dc:ec:a4:11:be:85:e5:8d:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:53:28:3A:98:85:C3:B2:6C:9D:33:48:CD:D5:80:9A:29:85:28
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:4e:e4:8b:9e:3a:ae:4b:b2:84:e7:4e:37:54:90:a5:8a:
7f:ad:12:e9:e9:a1:c7:9d:82:68:63:75:97:dd:e4:17:8f:07:
a9:22:6f:a4:3f:fb:c5:49:b6:67:ec:66:7b:27:33:97:2e:b9:
2d:76:32:23:ef:d4:77:57:50:70:63:4e:32:d0:41:21:df:53:
08:52:ac:3a:07:ef:e6:7d:10:9c:7e:07:2a:aa:25:ee:4a:dc:
f5:ce:18:5e:11:dc:82:83:95:da:66:07:18:57:fd:9f:3c:7d:
63:a5:ab:ca:ea:55:c8:e4:49:5c:04:7b:a3:ec:11:2e:9c:21:
71:b2:c1:f8:15:84:43:3f:c9:ac:4f:18:4e:cc:48:bc:4e:5c:
6d:6f:de:58:07:34:cf:12:71:cc:0e:d4:53:ca:d9:ac:be:3e:
ef:0b:75:bf:79:26:85:5b:4b:e5:27:e7:5f:b9:e0:c5:24:09:
d8:b3:29:3e:ad:0a:66:d4:61:e4:d6:60:ac:8a:83:8b:b8:ac:
bc:cb:f5:1e:56:c3:25:91:3f:68:c4:6a:b3:60:f9:c5:9a:30:
24:50:bd:8d:3a:86:f9:31:e6:32:fb:98:e0:da:0d:24:8c:24:
c4:6e:b3:1c:e8:13:5d:86:d7:3a:49:95:f1:98:33:2e:6d:1a:
91:07:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:22 2026 by rpki-client