Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: vycIKdhn59tTj5QsSRVMqm9ptxogvKU06VfPFD65DFY=
Subject key identifier: 4B:AB:D6:EB:E4:9D:7F:25:2C:F8:CD:9A:5B:97:38:C8:84:28:6F:5B
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019E202411A685E685E17A2530FFE78EB7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0F08
Signing time: Wed 13 May 2026 07:01:35 +0000
Manifest this update: Wed 13 May 2026 07:01:35 +0000
Manifest next update: Thu 14 May 2026 07:01:35 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: jd8SpckpWJnkeoN4rf0ypdQiw9Gd463kGQij6rT8PCw=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:11:a6:85:e6:85:e1:7a:25:30:ff:e7:8e:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: May 13 07:01:35 2026 GMT
Not After : May 14 07:01:35 2026 GMT
Subject: CN=4babd6ebe49d7f252cf8cd9a5b9738c884286f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:74:a2:06:c5:08:14:03:69:0a:3f:6a:17:
f0:e7:9a:40:46:52:ce:9f:1c:a2:c4:08:9a:36:20:
2f:41:a3:2d:45:d7:5a:6a:75:de:0f:e3:d0:d9:61:
42:9b:f0:c8:89:18:79:90:8e:0b:10:38:c1:3b:aa:
27:48:ed:44:05:a2:dc:e6:d1:ae:af:aa:73:ac:cc:
34:db:39:3f:e5:c0:6c:4b:e4:84:85:79:8b:ec:89:
f5:89:96:48:1a:49:77:3c:81:9e:92:0c:b3:34:9b:
39:96:03:95:e6:4a:ee:a4:61:03:20:8d:9a:89:75:
ae:b9:7b:89:b5:d1:77:32:3a:57:41:63:72:4c:74:
24:7a:0a:6d:e0:28:21:3f:78:70:03:b0:b7:2f:51:
62:ac:ae:86:54:fe:fe:a5:19:a1:e4:9c:71:3c:1c:
da:61:cb:9f:4a:82:1a:9c:c3:73:04:fa:98:47:a6:
0d:10:f9:bf:9c:1d:a4:b7:b0:51:4c:9a:68:a8:84:
68:1c:02:8d:0e:f0:2c:ac:8b:43:8e:97:6d:90:f9:
da:07:ba:1c:1a:ea:73:86:3f:a7:99:6c:49:61:81:
80:bc:c7:2f:e9:1f:ae:c4:52:c2:2a:58:dd:a0:18:
c2:02:1c:44:93:5d:14:cb:f7:89:6c:c1:70:b9:d3:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:D6:EB:E4:9D:7F:25:2C:F8:CD:9A:5B:97:38:C8:84:28:6F:5B
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:83:b3:79:a0:5b:94:7a:1f:bc:ea:02:82:2a:7e:77:dd:37:
2e:b4:28:25:bc:37:b6:b5:a5:e8:3c:20:0f:62:20:ce:ec:9c:
91:70:86:7f:49:34:62:cc:67:13:f6:89:a6:0c:fc:d7:81:e9:
10:55:f8:45:b4:52:15:db:02:3a:fd:35:0d:74:77:5c:59:ca:
81:97:1c:c0:8e:77:0a:2c:1c:a7:73:cf:69:f9:17:fc:8d:ad:
f4:3e:48:30:e3:bc:b1:88:43:75:5c:f2:00:14:e5:85:5b:cc:
7a:53:3f:b1:f1:a3:0c:f9:2c:50:1f:c8:47:6c:9e:44:09:1f:
d2:4d:56:7c:f9:31:a7:22:12:05:2b:3b:55:b0:22:93:e6:fa:
e7:92:4e:f6:b5:fd:1f:99:ac:48:d9:17:59:a1:fa:a3:74:86:
9e:1b:a5:14:17:96:ce:45:62:9c:c1:5c:a3:d5:05:f2:27:8f:
8c:bc:7c:d8:55:d8:47:8d:22:ca:a4:ac:dc:67:19:6c:f3:c9:
77:a3:4a:a3:e3:d4:25:7b:72:0f:6a:0a:36:90:38:74:73:64:
ec:66:7a:a4:d0:28:83:09:e6:96:49:76:7a:fb:fb:4f:fb:4c:
dd:d5:ad:2b:fd:c7:b0:84:d2:80:ef:63:8a:50:00:d6:76:f9:
1a:22:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:23 2026 by rpki-client