Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: MAe8tBOQw/TXpKLTcV3kw1F2vkdW004YB0tIrvAy46o=
Subject key identifier: 21:DF:2C:F8:2D:8C:A2:70:DB:99:B0:1A:E2:A9:77:FE:07:47:A0:A7
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019CAF10C23DE10D42B52C54FBE4D2BA4EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 15:00:36 +0000
Manifest this update: Mon 02 Mar 2026 15:00:36 +0000
Manifest next update: Tue 03 Mar 2026 15:00:36 +0000
Files and hashes: 1: M3ksnFn9ABZEMHo2-kOAUSZyghM.roa (hash: rA1mLYU6yePexXwjL8U20OWl2A4N50sVX/gNK6SolB8=)
2: ZXR_15JRahbz7OCWkK3p2ywKJJo.roa (hash: DSH5lii59E1s7PlJcxjxqQZ7ATM0CS2IZreGq0V6Mh4=)
3: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: 5qbF4nK+DMuPC4c/Y823frPcUZqz8AU3t1471pXdT6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:c2:3d:e1:0d:42:b5:2c:54:fb:e4:d2:ba:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Mar 2 15:00:36 2026 GMT
Not After : Mar 3 15:00:36 2026 GMT
Subject: CN=21df2cf82d8ca270db99b01ae2a977fe0747a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:a1:7d:8d:a1:99:db:cd:11:26:d2:19:23:
5f:5a:d4:e9:c5:b3:d0:9b:96:df:e8:bd:73:bb:cf:
bf:4d:32:da:c6:02:01:4a:8f:09:0c:08:8b:5f:72:
41:c4:57:d8:90:e5:bd:d0:3f:91:17:1f:af:38:11:
ca:47:cf:61:25:7d:c3:08:3f:b8:b7:76:cd:44:b1:
57:fe:79:8a:33:54:e5:1b:ff:eb:43:fc:e4:1d:6c:
e8:1e:70:7b:9e:68:1b:f4:bc:10:1b:d3:2c:25:5c:
81:da:64:f3:5e:1a:03:49:89:e5:26:2e:57:5d:56:
eb:d9:15:da:f6:91:81:42:b9:62:f7:6e:7e:ff:b2:
a8:9e:fc:6c:0e:fc:c4:6d:45:7f:bf:b5:2f:83:63:
65:a3:7c:b3:d1:23:b5:89:0f:74:90:91:4b:d4:37:
ee:3b:14:5e:6d:d4:57:bf:bb:47:a3:2f:fa:1d:f4:
b1:08:f9:1c:ad:67:e7:03:7a:d4:e7:c3:31:ff:06:
39:b1:ad:59:0e:36:9b:a3:2e:07:05:66:36:b8:aa:
00:94:96:35:4b:77:81:08:7b:a3:af:3c:4a:9e:2c:
41:92:86:43:00:e2:64:8b:83:53:18:ce:a6:d5:a0:
78:82:c4:b5:15:26:09:1e:5d:19:51:27:69:ac:bf:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:2C:F8:2D:8C:A2:70:DB:99:B0:1A:E2:A9:77:FE:07:47:A0:A7
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a7:0d:d4:b4:17:b2:b6:1a:03:6b:14:96:1a:a2:21:e4:c9:
bc:97:0d:b7:6f:c1:3a:2c:2d:59:40:1c:31:c8:f2:cb:10:b0:
2c:68:15:5c:68:42:f9:ea:9f:d3:3e:64:d0:d0:03:3e:ba:a8:
7b:aa:67:27:3d:02:0a:91:04:db:7f:e8:4a:7e:8f:8b:28:24:
82:70:95:02:c4:ba:0f:6b:95:d4:c2:27:7a:fb:5e:0c:c4:43:
51:c1:d8:f9:8d:74:eb:a0:32:3d:ad:77:ca:f8:6a:6c:05:79:
7e:1e:fe:72:ce:a1:e6:69:3d:ec:1c:d8:e0:58:f5:9a:6c:99:
07:16:0b:47:e4:ae:ad:0a:97:fd:dd:6d:e3:49:1e:18:77:b7:
6f:0e:8f:a5:f1:11:16:10:f1:04:ff:ea:3c:cb:35:d2:ef:d4:
62:cd:57:76:12:70:fa:0d:e0:45:c8:96:a3:d0:a1:f3:da:be:
ff:83:94:3b:16:52:30:c4:ef:4a:e4:e6:07:b5:84:d7:57:ab:
01:3d:02:a8:ea:a7:96:cb:3a:56:f4:8f:11:b5:b0:11:36:49:
00:f7:fe:bf:02:c9:8d:9a:bd:c3:72:09:51:97:34:59:c6:13:
c1:c6:47:54:3e:69:26:ab:27:55:ce:39:41:f7:96:fc:1d:81:
d7:1f:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:55 2026 by rpki-client