Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
File: BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft (raw, json)
Hash identifier: Qp/AKOnom8VC9uB8yaoxat2yEpWrDOY0tlQa0ZiBYWw=
Subject key identifier: BD:E9:45:4B:92:05:01:AC:26:7C:25:0C:E3:9A:8F:45:8E:0D:2E:FA
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Certificate issuer: /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial: 019E1CB548D36A8CEC863EFF28E48B2B50AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
Manifest number: 38
Signing time: Tue 12 May 2026 15:01:43 +0000
Manifest this update: Tue 12 May 2026 15:01:43 +0000
Manifest next update: Wed 13 May 2026 15:01:43 +0000
Files and hashes: 1: BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl (hash: NDbAP/1ZRlqN8fPJetoBpJ+yJDErPovJZKSQ1aPvs44=)
2: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (hash: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:48:d3:6a:8c:ec:86:3e:ff:28:e4:8b:2b:50:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
Validity
Not Before: May 12 15:01:43 2026 GMT
Not After : May 13 15:01:43 2026 GMT
Subject: CN=bde9454b920501ac267c250ce39a8f458e0d2efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:12:57:e6:d5:23:26:64:f0:dd:10:ad:2d:
57:e6:03:87:bb:3c:8a:3c:5e:cd:5b:05:43:2c:32:
dc:5d:e7:b9:d0:78:a5:77:15:c1:f1:f8:2d:b9:52:
a3:3b:f7:1d:b1:dc:d8:fe:b2:d9:68:b5:ef:75:5d:
da:ad:d6:1c:dd:60:6c:c0:e8:d8:d2:03:39:02:cb:
ef:d7:c5:eb:7d:ac:2e:3b:c7:a8:ac:a7:6f:df:ab:
57:6f:e2:4b:98:0f:50:3e:8b:b1:3e:c9:fa:aa:83:
82:94:1b:06:13:de:8c:59:de:f4:73:bb:52:6f:dd:
89:dd:d7:6b:e4:18:1a:a4:67:06:d4:e3:9a:5c:84:
26:df:b2:2c:02:25:4c:69:e5:5c:15:1d:a7:8b:fc:
98:d2:90:ac:a4:19:21:b6:1a:b0:f0:6f:4d:de:3b:
d2:aa:90:b5:ce:29:38:0f:2c:6f:4b:f1:f6:51:6f:
88:9a:df:fb:97:05:6d:35:1d:0b:db:8f:fe:f2:65:
14:29:0c:a1:6e:9d:47:3c:88:36:e5:88:68:53:30:
80:88:ae:ea:45:74:bb:6a:c2:4f:c8:81:73:8d:ab:
55:8e:0d:fa:fd:2f:15:43:79:df:56:19:fe:dc:a4:
c0:90:6d:90:87:ac:2b:d7:49:95:07:01:26:51:90:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:45:4B:92:05:01:AC:26:7C:25:0C:E3:9A:8F:45:8E:0D:2E:FA
X509v3 Authority Key Identifier:
keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:58:e8:9b:b8:62:16:27:65:dd:bd:ed:d7:68:e1:e6:8d:fb:
5e:d9:a7:34:1e:06:01:c3:7b:7e:03:3b:79:83:92:16:54:87:
1f:1f:eb:73:32:c3:5c:74:3d:04:89:04:bb:f0:cb:7b:b1:1d:
f9:1c:33:50:a2:6a:04:01:46:48:1a:89:2e:18:45:16:35:49:
2f:57:be:fc:e9:e6:06:38:0d:34:37:04:e2:51:3b:18:f1:3f:
9d:39:d1:18:63:48:6b:a3:48:9f:10:6a:fa:57:41:49:fb:12:
ce:bf:1f:24:82:eb:f1:6b:65:bf:43:54:ae:7f:e2:92:28:f8:
ff:cd:97:bc:4a:98:1b:a6:4e:04:1a:0f:d6:c5:a0:e4:72:83:
9c:ac:fa:43:0f:5c:8c:7c:04:4d:df:7a:68:60:09:41:0b:0d:
0a:98:27:98:b7:f5:e3:a7:53:97:01:79:81:52:66:16:a6:b4:
86:1c:e1:e0:ef:e5:7b:60:0a:d5:bd:17:c7:24:ea:b4:67:79:
14:26:db:6f:49:75:32:8e:de:df:00:7f:48:b1:36:38:dd:e0:
f7:88:a1:ac:6a:5c:fa:79:7f:4a:37:f8:8f:56:0a:4b:09:93:
e3:8e:26:cb:e0:02:fc:ed:2c:e4:f0:02:8b:24:04:42:97:c0:
f7:b2:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:15 2026 by rpki-client