Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: 5vDNGkMVmVHBCrPXXAzYqoJuoYkRG4R0G2GecwMZrSQ=
Subject key identifier: 43:35:A2:7F:36:3C:B0:1A:1A:6F:C9:3F:C5:CF:E4:D9:4F:84:70:0D
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01A1DE031441FAEE9FEF99BED98A3644F0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 07:01:46 +0000
Manifest this update: Sun 15 Nov 2026 07:01:46 +0000
Manifest next update: Mon 16 Nov 2026 07:01:46 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 9lsAVqxODb42B7NRptwMi397X+B4Y0u5V4I8Y+XabhA=)
2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:14:41:fa:ee:9f:ef:99:be:d9:8a:36:44:f0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Nov 15 07:01:46 2026 GMT
Not After : Nov 16 07:01:46 2026 GMT
Subject: CN=4335a27f363cb01a1a6fc93fc5cfe4d94f84700d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:3c:36:83:0b:81:7b:db:8b:9a:ee:ce:12:
19:1e:02:8e:1d:86:fc:26:ca:ee:4e:e5:26:58:f5:
01:c5:95:16:54:8a:c6:06:8b:61:6c:eb:11:cc:49:
cb:be:c2:73:69:3c:e3:1a:fb:62:5b:55:6f:f6:49:
20:85:79:10:be:f1:ce:4a:db:a8:d3:5d:1c:d8:65:
9d:47:f0:8a:7c:e0:00:6b:55:83:47:ee:15:fa:ad:
a6:65:67:fd:f1:49:50:5f:a2:a1:c0:c7:15:4d:46:
fb:6a:32:7d:76:ff:d3:33:c6:bc:4d:04:88:a7:8a:
dd:02:aa:39:9a:22:1e:ad:21:9c:02:f9:e0:91:e9:
dc:e5:d0:a9:61:9c:25:de:a0:14:65:a7:89:67:2b:
40:4d:f5:ed:6c:10:89:e3:da:79:aa:7e:71:33:28:
3e:ef:6d:77:44:a5:08:d5:f4:81:94:45:b6:3c:ef:
18:59:99:2d:d5:4c:15:80:48:46:9e:de:68:b9:60:
78:79:b6:0c:53:b5:7c:58:2d:a0:40:49:62:21:ad:
17:02:5c:fd:35:e2:c2:6e:89:a6:fb:1e:9f:92:af:
99:a3:e1:cf:ef:41:db:e2:6f:aa:1a:98:72:41:58:
a8:d2:b3:41:79:19:31:89:3d:11:df:d1:05:2a:f2:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:A2:7F:36:3C:B0:1A:1A:6F:C9:3F:C5:CF:E4:D9:4F:84:70:0D
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:02:0b:6b:84:e1:b2:a5:c9:40:16:c8:ba:1a:8b:ec:15:30:
db:bb:63:da:0b:8d:01:d2:08:2e:52:58:58:9b:f0:9e:24:78:
6a:73:eb:8d:d5:20:58:6e:b8:96:de:8f:20:05:93:57:73:3f:
2d:60:3b:a9:a8:d4:79:23:fc:15:04:33:37:63:f6:e4:fb:55:
c3:9a:b1:df:f4:ec:96:12:d7:52:8b:43:3c:9d:62:e7:f6:6b:
e7:45:a5:5a:0b:c1:91:d7:44:2b:da:0a:6f:08:61:79:a7:fc:
8c:8c:80:77:13:38:35:73:a3:67:2a:ba:ed:52:e9:5e:39:68:
0a:23:c0:13:de:9f:8c:15:4b:d4:f3:69:20:27:79:51:b7:42:
e3:7d:4b:ae:eb:58:4e:05:1f:1a:6d:c3:6d:82:2b:cc:74:16:
53:ad:73:a4:2b:2b:61:7c:30:bd:13:2b:ce:02:44:91:8a:86:
48:0c:86:14:00:a8:bc:c2:1c:d3:16:3a:1b:64:e8:a7:72:49:
a1:d1:fb:13:66:69:d9:8a:50:ff:00:cb:89:fe:a2:46:f6:2c:
9a:dd:84:b0:89:66:17:08:52:1b:f7:5e:2e:7c:79:34:59:77:
c2:1b:dd:9a:fe:ff:03:61:ad:9c:da:e2:d2:bf:2f:95:a3:04:
60:87:41:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAxRB+u6f75m+2Yo2RPDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZhMzgwOGMyZDI4YzU3N2Y5OTc2YzYxY2QyMjZlMTg4
Njk1ZDgwHhcNMjYxMTE1MDcwMTQ2WhcNMjYxMTE2MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg0MzM1YTI3ZjM2M2NiMDFhMWE2ZmM5M2ZjNWNmZTRkOTRmODQ3MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3s8NoMLgXvbi5ruzhIZHgKOHYb8
JsruTuUmWPUBxZUWVIrGBothbOsRzEnLvsJzaTzjGvtiW1Vv9kkghXkQvvHOStuo
010c2GWdR/CKfOAAa1WDR+4V+q2mZWf98UlQX6KhwMcVTUb7ajJ9dv/TM8a8TQSI
p4rdAqo5miIerSGcAvngkenc5dCpYZwl3qAUZaeJZytATfXtbBCJ49p5qn5xMyg+
7213RKUI1fSBlEW2PO8YWZkt1UwVgEhGnt5ouWB4ebYMU7V8WC2gQEliIa0XAlz9
NeLCbomm+x6fkq+Zo+HP70Hb4m+qGphyQVio0rNBeRkxiT0R39EFKvJeDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM1on82PLAaGm/JP8XP5NlPhHANMB8GA1UdIwQY
MBaAFARPo4CMLSjFd/mXbGHNIm4YhpXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgt
ZDU0NzIyY2NhODQ5LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hOWJlYjAtY2JlNy00NjVlLTgwMDgtZDU0NzIyY2NhODQ5
LzEvQkUtamdJd3RLTVYzLVpkc1ljMGliaGlHbGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwILa4Th
sqXJQBbIuhqL7BUw27tj2guNAdIILlJYWJvwniR4anPrjdUgWG64lt6PIAWTV3M/
LWA7qajUeSP8FQQzN2P25PtVw5qx3/TslhLXUotDPJ1i5/Zr50WlWgvBkddEK9oK
bwhheaf8jIyAdxM4NXOjZyq67VLpXjloCiPAE96fjBVL1PNpICd5UbdC431LrutY
TgUfGm3DbYIrzHQWU61zpCsrYXwwvRMrzgJEkYqGSAyGFACovMIc0xY6G2Top3JJ
odH7E2Zp2YpQ/wDLif6iRvYsmt2EsIlmFwhSG/deLnx5NFl3whvdmv7/A2GtnNri
0r8vlaMEYIdBWA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:20:41 2026 by rpki-client