Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: 6rRBeCCazx18EUV5qzkcepzO6Kjpf5PyJV1Yhkk27Bc=
Subject key identifier: 39:A0:6D:8E:C0:5E:A5:59:D5:C8:DD:30:9F:CD:62:86:4A:25:4C:07
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019D992B7E579E54CEB130E21175246FEA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: mUHNqSifGgV18OV3GbIdeVrVs8yJRE9va5v7XHJZs9s=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7e:57:9e:54:ce:b1:30:e2:11:75:24:6f:ea:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=39a06d8ec05ea559d5c8dd309fcd62864a254c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:c3:ba:30:81:97:7d:95:3b:98:be:1a:00:
a0:b4:4b:e0:43:3d:f8:a4:c5:59:a7:fd:24:f7:00:
3c:40:91:d6:6e:a4:ac:cf:69:25:4a:fd:51:1c:55:
97:da:ea:02:d5:cf:13:ce:8d:df:99:70:28:81:18:
90:8f:3c:0e:7a:d6:e7:e7:3f:d1:0f:76:73:de:6e:
0f:79:db:c7:a2:b8:a3:9f:0b:dd:d8:f3:91:8c:ff:
76:a2:f4:14:33:81:33:c1:50:5a:7d:58:61:19:2c:
6c:ea:5f:f4:1c:33:89:ea:f2:bc:1a:f7:ed:e7:fa:
0a:0b:86:06:9f:2a:da:02:c5:de:5d:df:52:f2:02:
bb:a3:ab:48:16:9c:5e:d6:15:a3:be:f1:21:cf:5a:
d4:3b:28:b3:b3:b4:4c:e8:8e:73:ae:8e:6d:49:1e:
b7:02:32:bf:df:93:73:37:89:60:d4:76:67:01:d5:
c8:54:23:52:81:3f:cf:0b:58:c3:44:21:1b:f5:51:
69:57:4a:3d:ed:9c:63:22:d3:5e:9c:82:00:49:af:
e2:ea:5d:d1:92:77:54:83:64:ce:40:2d:58:61:5b:
47:4e:ad:d0:aa:65:73:ea:5e:32:8d:fe:eb:e0:60:
27:17:f7:80:48:a5:ba:c2:53:ca:aa:ef:27:f2:1a:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:6D:8E:C0:5E:A5:59:D5:C8:DD:30:9F:CD:62:86:4A:25:4C:07
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:af:d0:ac:1c:a1:60:c0:ef:a6:8d:60:a6:f0:9a:99:b1:
31:b5:31:94:c9:28:c9:f0:62:06:35:c4:8f:e8:c0:05:0c:d3:
6b:1b:e5:ec:81:d4:59:55:13:42:82:63:fe:2a:ac:41:13:d6:
3f:5f:fb:af:15:c0:54:e6:72:e1:1f:64:b5:ca:38:60:2a:04:
f2:e5:dc:92:b0:fb:bc:0b:4c:85:36:bb:5b:40:36:91:3e:75:
df:27:01:98:f7:15:36:3e:f5:ef:e2:5c:d3:72:85:41:3e:7f:
b6:e4:39:82:e6:c0:57:53:b9:3e:84:c7:46:4e:8c:39:23:93:
03:c3:56:5c:bd:28:c6:dc:66:6d:47:82:fd:62:a1:df:01:cc:
15:5f:b9:6c:a3:0a:7e:55:de:f1:7c:7c:79:11:88:50:a2:bb:
f5:77:e2:65:39:76:b9:bf:b5:3d:41:a0:78:3f:9c:43:95:bf:
9c:f7:f7:1c:dd:04:4b:61:8c:a3:6a:c1:7b:a8:57:72:a5:66:
87:d9:f6:a0:ec:da:d5:2d:db:97:29:b8:83:3c:f0:5d:28:97:
d2:cb:e6:a8:9b:2a:49:7e:bd:9b:56:94:09:d2:bf:59:e6:75:
3e:88:40:7d:a9:0a:68:65:1e:b6:0a:40:d2:a7:50:c4:b4:09:
f7:91:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:52 2026 by rpki-client