Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: rUXeoS/9s19d74bkQ9A2RHp7U9aAhsBIWcRg+lyoKaI=
Subject key identifier: B4:BB:8E:F3:51:33:40:40:DF:D7:7E:0F:60:15:EA:A4:F2:D9:AB:CD
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 01A0C8215C119665093404C99F5E1D4CC037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 08:00:24 +0000
Manifest this update: Tue 22 Sep 2026 08:00:24 +0000
Manifest next update: Wed 23 Sep 2026 08:00:24 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: oTc54XFxHdEMx6KN56DVecJHGUeuzCRToK7MoxgDa4Y=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:5c:11:96:65:09:34:04:c9:9f:5e:1d:4c:c0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Sep 22 08:00:24 2026 GMT
Not After : Sep 23 08:00:24 2026 GMT
Subject: CN=b4bb8ef351334040dfd77e0f6015eaa4f2d9abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:b4:e3:fb:24:14:2c:ca:eb:a7:b8:36:46:
f0:57:0c:ba:fc:b7:4c:52:0a:82:85:4d:3f:ba:28:
cc:92:f7:d6:c1:45:96:07:12:8e:b3:02:5a:dd:8b:
66:5d:58:fb:85:97:64:97:1e:9c:b0:aa:57:b0:7c:
c5:09:95:d0:09:ae:c1:8c:20:04:92:65:51:bd:45:
d1:f8:a9:24:ed:a0:84:ce:54:bb:d2:ab:7d:a4:b5:
aa:34:5a:ef:7c:80:18:09:13:46:d6:99:18:10:ce:
e2:93:30:fb:50:9a:a6:9d:b0:18:d5:24:a4:a3:42:
4d:b2:83:29:13:9f:82:89:98:1d:b9:f2:a5:31:da:
cf:28:86:31:c5:7d:9b:48:3c:72:08:88:d5:63:e1:
9f:76:95:9f:98:96:66:41:43:08:60:f4:45:1a:e5:
65:87:94:58:d2:dd:87:53:44:0a:92:81:0d:3b:39:
cd:3e:d8:9c:e0:0e:31:2b:02:c7:6b:83:3d:6e:b9:
6d:c8:b8:8e:48:a6:f0:6d:f8:90:6d:3c:48:63:cc:
c4:a1:e6:f1:31:61:03:b4:9c:70:9f:1a:e7:df:35:
9c:6d:10:4b:d4:85:32:51:3e:4a:b4:68:b1:3b:75:
b1:e2:b4:aa:e5:be:41:b7:c0:1f:92:6c:b2:3f:34:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:8E:F3:51:33:40:40:DF:D7:7E:0F:60:15:EA:A4:F2:D9:AB:CD
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:82:40:76:70:8a:cd:1e:db:91:d0:31:e4:e2:59:7d:89:59:
ad:c1:fc:99:81:63:23:b6:f4:7e:fe:47:b1:f5:68:bf:38:89:
cc:5b:a0:ac:1d:ad:5b:8f:73:b4:ef:9e:71:d0:4c:9a:f0:6b:
b1:98:6e:61:8b:40:80:9b:cc:07:97:7d:20:55:95:eb:cb:b3:
96:16:fe:8c:21:a6:ed:7c:9c:f7:76:26:4c:b1:6a:b2:c3:cd:
3c:ec:aa:4d:59:b8:71:76:35:43:ce:6c:a1:59:84:17:68:7e:
bf:16:2c:ba:e0:15:ac:e7:94:3d:6c:1f:e7:13:05:a9:36:0c:
4f:e5:6c:ae:ae:d4:a4:3a:8d:2c:0b:2c:5b:e8:5b:b3:a3:d7:
ec:67:0b:07:c8:66:79:0a:c8:34:10:97:a8:41:a7:66:01:66:
8b:00:52:7c:ab:83:5d:1d:fe:9c:84:89:e5:32:e9:79:24:bb:
0e:68:c4:b3:3d:a7:57:d4:61:b9:ed:75:25:98:e8:d3:f7:03:
0f:a6:ba:7c:84:f6:8b:c4:76:b6:a5:ef:b5:8c:1d:01:39:c3:
52:48:77:e6:ef:cd:8a:52:d3:c9:26:80:fe:13:c8:b2:48:65:
17:f5:27:63:df:cd:f4:5d:b3:3f:73:fa:eb:59:1e:62:97:f4:
03:fb:26:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIIVwRlmUJNATJn14dTMA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGIyMmQyNDliNjY2M2Y5ZmEzNGIxNzYyZDI1ZmZkOWZi
M2ZlZDMwHhcNMjYwOTIyMDgwMDI0WhcNMjYwOTIzMDgwMDI0WjAzMTEwLwYDVQQD
EyhiNGJiOGVmMzUxMzM0MDQwZGZkNzdlMGY2MDE1ZWFhNGYyZDlhYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8i04/skFCzK66e4NkbwVwy6/LdM
UgqChU0/uijMkvfWwUWWBxKOswJa3YtmXVj7hZdklx6csKpXsHzFCZXQCa7BjCAE
kmVRvUXR+Kkk7aCEzlS70qt9pLWqNFrvfIAYCRNG1pkYEM7ikzD7UJqmnbAY1SSk
o0JNsoMpE5+CiZgdufKlMdrPKIYxxX2bSDxyCIjVY+GfdpWfmJZmQUMIYPRFGuVl
h5RY0t2HU0QKkoENOznNPtic4A4xKwLHa4M9brltyLiOSKbwbfiQbTxIY8zEoebx
MWEDtJxwnxrn3zWcbRBL1IUyUT5KtGixO3Wx4rSq5b5Bt8AfkmyyPzRr8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS7jvNRM0BA39d+D2AV6qTy2avNMB8GA1UdIwQY
MBaAFARLItJJtmY/n6NLF2LSX/2fs/7TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEt
NjM3M2QzNmNlZWY2LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEtNjM3M2QzNmNlZWY2
LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoJAdnCK
zR7bkdAx5OJZfYlZrcH8mYFjI7b0fv5HsfVovziJzFugrB2tW49ztO+ecdBMmvBr
sZhuYYtAgJvMB5d9IFWV68uzlhb+jCGm7Xyc93YmTLFqssPNPOyqTVm4cXY1Q85s
oVmEF2h+vxYsuuAVrOeUPWwf5xMFqTYMT+Vsrq7UpDqNLAssW+hbs6PX7GcLB8hm
eQrINBCXqEGnZgFmiwBSfKuDXR3+nISJ5TLpeSS7DmjEsz2nV9Rhue11JZjo0/cD
D6a6fIT2i8R2tqXvtYwdATnDUkh35u/NilLTySaA/hPIskhlF/UnY9/N9F2zP3P6
61keYpf0A/sm3A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:15:01 2026 by rpki-client