Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: /z4qVCe/uvjSIxbWuUMNYnvIgEFN8tff3A6c7epw9+M=
Subject key identifier: E5:65:37:E2:F8:2B:88:D8:A0:43:9C:BA:DE:2C:74:B4:09:0B:59:36
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 019CA9B35FCE51235CDCB6385D0907E293C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:30 +0000
Manifest this update: Sun 01 Mar 2026 14:00:30 +0000
Manifest next update: Mon 02 Mar 2026 14:00:30 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: vAlttL6zbch01SbLOf+9q0EpI97y0JWb2EJ8j+AQWKM=)
2: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (hash: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:5f:ce:51:23:5c:dc:b6:38:5d:09:07:e2:93:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Mar 1 14:00:30 2026 GMT
Not After : Mar 2 14:00:30 2026 GMT
Subject: CN=e56537e2f82b88d8a0439cbade2c74b4090b5936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:b2:72:1a:0e:e4:1b:57:d8:b2:c5:dd:e1:
b3:b1:27:93:b5:c6:89:0e:71:1c:40:ce:36:fd:61:
fc:f1:4b:77:64:17:c3:ef:e9:9d:55:f5:58:0e:90:
75:27:39:9c:6e:e7:e7:c5:fc:28:99:31:88:d9:e4:
75:52:ca:13:e9:5e:a5:d6:70:12:e3:f9:45:4a:ae:
db:9a:04:46:0f:50:df:b3:55:67:fe:59:63:bf:c6:
1c:03:ab:12:55:a8:8d:1e:59:c5:18:43:1c:8a:3b:
70:63:8a:d9:93:e2:fe:49:7f:c1:ed:b1:c9:33:5c:
52:45:a4:db:11:fb:09:8c:e8:d1:9f:b0:4c:e8:68:
e2:c2:54:ce:42:42:c4:d2:f5:c6:f0:d5:4e:bc:54:
5d:ef:ec:d2:99:11:5e:10:8e:77:d6:e1:08:ff:0b:
81:2e:2b:dd:2f:87:e3:8c:79:01:e5:58:52:10:92:
42:ce:a5:7c:76:3b:c7:0a:ef:b3:bf:18:6f:86:90:
bf:ae:25:38:10:70:c1:0d:cb:5b:e3:40:7a:f9:35:
ca:af:85:2a:01:da:01:35:8c:5b:81:53:dd:b7:86:
da:33:ca:e5:49:22:df:8e:69:66:30:45:b1:4b:26:
16:f5:81:d2:a8:e6:bc:c2:bc:66:b2:3c:4f:c3:42:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:65:37:E2:F8:2B:88:D8:A0:43:9C:BA:DE:2C:74:B4:09:0B:59:36
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:47:76:25:61:f5:dd:34:09:3c:79:2d:09:e6:21:ef:3e:4e:
b8:61:9a:78:75:c8:ff:c3:42:f8:95:90:53:88:07:20:da:4e:
07:e4:3d:45:b0:3b:22:46:f0:c3:25:6e:27:62:b9:eb:89:84:
c0:e0:54:3c:48:8f:7d:cf:09:d3:e6:4c:02:6d:03:d9:f9:09:
31:41:c1:dd:23:96:af:84:5f:60:d2:3f:61:55:34:61:89:d8:
7e:18:75:ad:e9:52:6a:09:25:e7:1f:71:fb:7b:82:89:67:a2:
cc:a4:6e:c8:ce:b6:6e:7e:b1:bf:10:68:1b:35:d0:aa:d3:7f:
06:b3:d1:8c:1f:ba:5c:e0:a7:40:b5:d5:51:e6:74:8e:9d:16:
04:1c:6d:71:9f:5b:31:02:5a:47:67:cb:ec:1f:e5:d6:34:c9:
ee:f5:e6:fa:cd:e7:1f:79:93:7e:33:ee:85:ab:b3:fd:b3:eb:
4e:20:f0:80:f6:13:f0:44:ed:8d:d0:4f:ef:1d:c8:c7:63:8f:
a9:05:82:32:77:40:45:db:52:0d:f5:8f:2a:6c:3f:7b:8b:fa:
40:bb:c9:2e:c0:c8:3f:80:ef:ac:ad:b3:99:a0:5f:42:d9:b0:
b8:0d:92:be:28:84:31:e9:76:34:d4:ac:90:75:d3:f7:e7:41:
b5:1c:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:26 2026 by rpki-client