Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
File: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft (raw, json)
Hash identifier: prJqRasnwkrhMgO1/wipbO//bIX/h7OZ9Et8PcYSQmQ=
Subject key identifier: 9E:F3:92:B6:54:98:99:71:EF:20:21:39:CA:4A:61:03:C7:EE:80:52
Authority key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Certificate issuer: /CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Certificate serial: 1CA2980B1B662AA20D05B1617A4916F0273E1926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
Manifest number: 0F
Signing time: Fri 17 Apr 2026 09:48:41 +0000
Manifest this update: Fri 17 Apr 2026 09:43:41 +0000
Manifest next update: Sat 18 Apr 2026 10:41:41 +0000
Files and hashes: 1: AS11967.asa (hash: 3G71/8YzgM4CTftmey2qsl+DI5Cry2OneqPjAmyn8TM=)
2: BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl (hash: fKDDMR0D89T25bJe68H9eUP8f9LJMUvy1IB9c894vBM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a2:98:0b:1b:66:2a:a2:0d:05:b1:61:7a:49:16:f0:27:3e:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Validity
Not Before: Apr 17 09:43:41 2026 GMT
Not After : Apr 18 10:41:41 2026 GMT
Subject: CN=9EF392B654989971EF202139CA4A6103C7EE8052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:66:7c:31:f6:e1:6d:3e:42:6d:c3:02:f7:
52:47:4d:04:d8:3e:b7:35:b2:bc:ae:3e:08:a0:d4:
c3:0d:d8:1f:d1:c4:5c:f8:45:d0:ce:39:04:88:14:
45:9f:25:c9:78:ed:75:ff:18:47:ec:32:1f:e8:57:
13:a7:63:6c:46:52:9f:42:28:06:71:1e:e3:3a:c9:
06:1c:6a:e4:c1:9e:0a:bb:cc:e5:cb:da:e0:45:c3:
bd:5d:cc:ee:be:1b:3b:4b:93:38:ec:64:8a:1e:e6:
02:8b:99:50:2b:93:d9:0c:67:f1:89:0e:a3:1f:d6:
65:55:dd:2d:f4:42:0a:17:7f:96:96:e5:2e:99:ad:
cf:fa:7f:9d:2f:01:99:31:ae:0a:eb:49:93:54:41:
cf:6c:bd:f1:be:b4:96:ed:f7:c4:5c:f8:7f:a5:4b:
72:27:69:fa:f0:4c:77:89:df:95:9e:bb:05:7f:f9:
f7:ca:f8:b1:0c:be:e9:d2:4c:20:48:ba:9e:b8:29:
02:e0:0a:0f:04:e9:ab:1b:02:25:77:9d:fc:dd:f0:
e5:14:b8:4c:cb:7e:4c:db:de:cc:c1:3c:9b:2a:0d:
5c:d5:57:b4:10:ab:21:fe:01:aa:d0:90:fd:8b:8d:
ef:19:f5:a0:f8:1f:8a:e4:99:ed:18:7c:17:43:d5:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:92:B6:54:98:99:71:EF:20:21:39:CA:4A:61:03:C7:EE:80:52
X509v3 Authority Key Identifier:
keyid:BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:d1:c7:49:1d:29:27:3e:df:8a:a1:84:ba:07:e5:5c:65:
c3:46:04:71:b7:4f:74:87:ee:06:ed:bf:e8:42:4e:75:ca:46:
e9:8d:b0:29:c8:a1:6e:92:f1:58:1c:05:20:1a:4c:7e:b0:d9:
7f:9b:af:0b:e2:c0:46:64:61:c8:86:af:3e:dd:7c:66:7c:08:
d2:80:6e:71:2f:68:68:4b:85:c8:7a:c0:53:d7:08:7e:77:50:
ab:e2:4f:80:7f:8a:91:bc:7b:0e:d2:b0:12:92:c1:20:68:d0:
5d:ee:e7:6f:1f:93:6a:2a:ac:e4:6d:85:ba:2e:b0:41:fb:ad:
ef:f6:dc:8c:d7:14:f8:a8:4e:d7:4d:5c:5d:87:51:fd:1c:9c:
ce:f5:dc:3e:9d:c6:be:07:93:16:1a:53:45:7d:bd:89:46:62:
a9:7b:e1:79:18:3b:17:97:75:0e:8a:aa:76:df:46:6d:ea:d0:
84:93:07:9c:85:16:c9:89:93:22:06:1b:1b:0e:58:18:b4:b0:
95:c5:78:9d:95:ac:65:83:f0:5f:4a:f1:0b:3f:65:41:c3:9c:
65:d6:1c:14:47:6a:02:71:cb:de:23:e6:2d:96:c2:eb:7d:d3:
8c:e1:2f:e5:22:7b:7a:81:40:74:a9:56:12:83:0a:54:96:72:
2e:c3:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:56 2026 by rpki-client