Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: leNLUFfWlRzuleUSwt6HKfAaO79uiCSY+yk3rR+6i0U=
Subject key identifier: E0:62:43:8B:E6:63:0E:BD:9B:00:D0:55:AF:A3:30:EF:56:3D:EF:F3
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019D2CCECE7763D72D1A3EE37B7E4A4F4D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0E8A
Signing time: Fri 27 Mar 2026 01:00:43 +0000
Manifest this update: Fri 27 Mar 2026 01:00:43 +0000
Manifest next update: Sat 28 Mar 2026 01:00:43 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: ZZo1418+GN9EG3WR8JTcthCjZAgdIePx7ufARvHLlzY=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:ce:ce:77:63:d7:2d:1a:3e:e3:7b:7e:4a:4f:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Mar 27 01:00:43 2026 GMT
Not After : Mar 28 01:00:43 2026 GMT
Subject: CN=e062438be6630ebd9b00d055afa330ef563deff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:3c:33:ea:26:2a:20:3d:4b:85:75:b8:cf:
d1:2d:a3:39:c1:e5:f0:d2:02:4f:db:15:67:54:35:
b6:e9:cf:57:9d:62:d3:84:f5:4a:79:a5:6b:5a:3e:
d1:f0:f3:c8:eb:0e:d5:66:56:b5:db:58:81:c8:31:
57:2b:8f:d1:b9:76:57:61:c3:43:9f:f8:4f:e2:e8:
c7:47:da:d5:ea:4b:93:23:9a:8c:00:90:a7:14:9c:
30:4b:b1:bb:6d:0f:93:ef:8d:3a:27:76:39:ee:13:
9f:7c:3b:bf:a8:f3:14:9a:58:e8:95:fa:c0:33:04:
2d:1c:92:82:28:46:0f:10:e1:94:a1:66:24:51:79:
32:60:55:5d:9b:41:17:a0:f8:64:43:cd:80:c5:af:
2e:e6:66:2f:46:73:e8:7c:d8:62:df:d2:27:14:44:
8b:12:d5:85:e4:9c:8e:c0:af:9a:5a:24:3a:30:40:
3c:02:c9:f3:d1:f1:62:4a:33:f3:5c:94:9b:3c:38:
4c:28:fa:2f:2b:e6:cc:89:33:93:ec:0a:07:13:30:
41:48:49:40:c0:e1:4c:08:ef:e3:9a:e2:e0:98:59:
2f:fe:21:89:4c:2f:9e:4e:0d:e4:59:95:b8:d7:94:
80:59:5b:e3:72:ae:23:0f:97:be:2f:96:bf:ec:34:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:43:8B:E6:63:0E:BD:9B:00:D0:55:AF:A3:30:EF:56:3D:EF:F3
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:19:90:01:73:9d:cb:d9:03:ff:0f:f6:4c:25:49:73:60:
a9:ca:98:d5:fe:9b:dc:e9:a4:df:3a:21:c9:20:b7:6c:e6:47:
56:60:0d:58:c7:b6:31:83:f7:80:ad:ad:b6:c3:34:74:7b:6d:
f5:0f:f6:c0:09:aa:02:bd:6b:24:ac:8c:10:b1:e8:3b:76:fc:
68:0d:2f:5b:a6:30:87:0e:d5:3b:80:94:d6:d4:fd:40:e3:3b:
f2:3f:e4:38:b0:fe:ac:a1:ec:fb:43:35:5e:aa:78:2d:6e:61:
49:a6:c2:e7:ee:43:5a:7d:bb:24:b7:e4:8e:9f:8b:2d:ae:00:
cc:93:cb:8f:35:9d:37:6f:af:0c:d7:6a:c2:2e:45:ed:7b:21:
62:04:6c:0f:68:34:fc:a7:1f:e3:6f:cc:e3:8e:cd:7e:d9:a0:
cb:60:24:02:8c:ee:7e:33:a2:1d:bb:3d:02:ea:de:ad:b9:4e:
ea:d7:e5:11:18:4c:8c:a1:6f:f7:2a:1e:c0:64:47:60:cc:7c:
23:54:80:87:1c:43:a1:16:91:a5:e6:9d:93:6a:1d:07:60:9b:
94:ee:ea:09:49:0a:b3:38:00:5e:69:d6:87:ee:f7:7e:93:01:
13:c6:73:b8:88:83:cb:d2:23:4e:4c:c7:88:52:58:8a:31:1f:
3b:d5:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:35:22 2026 by rpki-client