Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: T5PLbSwR2E1X4iI/1t0qbV66dqTY+gpws/q4FklXejc=
Subject key identifier: D3:96:E2:84:BA:32:C1:E8:BC:D9:9C:BB:9D:B2:C1:A1:EF:81:92:AB
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019F8FEC8884D47FB931EFD153A45119F517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0B85
Signing time: Thu 23 Jul 2026 17:01:10 +0000
Manifest this update: Thu 23 Jul 2026 17:01:10 +0000
Manifest next update: Fri 24 Jul 2026 17:01:10 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: ozCtlu7vnQbXGv6Vq4NQagUl/5KqwOoBtRpr54Lj1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:88:84:d4:7f:b9:31:ef:d1:53:a4:51:19:f5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Jul 23 17:01:10 2026 GMT
Not After : Jul 24 17:01:10 2026 GMT
Subject: CN=d396e284ba32c1e8bcd99cbb9db2c1a1ef8192ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:d2:26:ba:07:0e:25:ab:d6:ca:6d:4c:bc:
5d:dc:8b:12:3c:83:0f:d8:72:b6:6d:21:08:d0:86:
d5:cf:f9:c8:3b:29:e4:b0:bd:c8:05:77:37:24:fb:
e8:24:34:b4:c1:e8:c5:61:2c:9d:22:d9:36:4a:0d:
87:ba:19:91:2a:33:c2:3f:a8:9d:72:bd:eb:86:ec:
30:4b:a5:9f:93:f5:b5:be:bf:73:1d:d9:90:a3:7d:
71:ef:a1:d8:03:b4:98:ec:7c:71:0c:07:44:1f:35:
ee:c8:a5:1a:bf:4c:ee:0e:46:3f:a6:ed:d3:a7:d1:
87:0f:25:94:5f:8f:fe:cb:be:d7:da:a3:68:80:21:
de:c8:1f:fa:bc:ce:0e:bc:7b:dc:1f:96:33:70:5d:
13:96:2a:09:8a:df:83:59:b7:b4:39:44:2b:c6:6f:
fc:c1:fb:68:82:1b:10:ae:22:19:09:d1:fc:f6:91:
fd:e6:ca:7f:33:07:ac:6f:85:7a:c6:26:a9:9b:0c:
d6:d3:15:3e:b3:54:cb:a7:77:d8:17:27:1e:9c:b7:
cc:52:b5:86:d3:b9:00:13:ae:e3:be:4e:ea:4d:c0:
09:1b:dc:64:16:f5:e0:e7:bd:43:ef:03:93:4d:07:
4d:0f:89:1d:57:bf:5f:20:66:2e:08:c4:0e:70:a8:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:E2:84:BA:32:C1:E8:BC:D9:9C:BB:9D:B2:C1:A1:EF:81:92:AB
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:d4:74:56:e8:42:88:41:9d:42:94:b1:87:00:40:45:75:
37:5d:97:ae:4a:07:d0:0c:7a:c6:ec:92:e7:35:47:7b:2d:67:
a3:67:fe:27:78:54:46:63:d0:85:69:12:c0:31:f0:a1:61:4a:
9c:95:72:5f:79:af:b1:08:5d:f1:65:63:3e:81:54:70:54:2b:
73:26:b2:db:b5:a6:88:3b:81:d2:2f:36:d9:9d:92:7e:a5:a6:
3b:d0:22:98:af:be:4d:74:a1:27:c0:37:e6:cb:9c:3c:be:90:
f6:80:91:7a:79:21:bc:b4:88:cc:73:4a:c6:e2:dd:5e:3f:0b:
5f:b3:75:f1:d8:7d:c0:ea:7d:8a:36:2a:d2:34:65:1f:6b:b3:
9f:1f:20:9e:73:fd:9c:3e:f2:3a:9c:8c:de:37:15:6f:64:ff:
19:20:b1:46:7b:1e:b3:36:a9:85:3f:d3:11:c0:74:d8:96:7f:
03:40:5e:84:33:d9:3b:af:52:c5:6c:7e:31:33:1e:99:8e:ab:
13:97:21:60:4b:bb:0b:d8:e1:32:64:83:57:f8:73:5d:c7:9c:
ed:61:12:0a:15:df:91:d3:22:5a:dc:a9:00:53:38:12:6c:09:
b6:2b:fa:d2:c3:69:76:de:50:57:e8:7e:c8:4b:de:32:fb:eb:
e9:7a:ed:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7IiE1H+5Me/RU6RRGfUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5
ZjlmNGEwHhcNMjYwNzIzMTcwMTEwWhcNMjYwNzI0MTcwMTEwWjAzMTEwLwYDVQQD
EyhkMzk2ZTI4NGJhMzJjMWU4YmNkOTljYmI5ZGIyYzFhMWVmODE5MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1/SJroHDiWr1sptTLxd3IsSPIMP
2HK2bSEI0IbVz/nIOynksL3IBXc3JPvoJDS0wejFYSydItk2Sg2HuhmRKjPCP6id
cr3rhuwwS6Wfk/W1vr9zHdmQo31x76HYA7SY7HxxDAdEHzXuyKUav0zuDkY/pu3T
p9GHDyWUX4/+y77X2qNogCHeyB/6vM4OvHvcH5YzcF0TlioJit+DWbe0OUQrxm/8
wftoghsQriIZCdH89pH95sp/Mwesb4V6xiapmwzW0xU+s1TLp3fYFycenLfMUrWG
07kAE67jvk7qTcAJG9xkFvXg571D7wOTTQdND4kdV79fIGYuCMQOcKgI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOW4oS6MsHovNmcu52ywaHvgZKrMB8GA1UdIwQY
MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt
NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1
LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFLUdFbo
QohBnUKUsYcAQEV1N12XrkoH0Ax6xuyS5zVHey1no2f+J3hURmPQhWkSwDHwoWFK
nJVyX3mvsQhd8WVjPoFUcFQrcyay27WmiDuB0i822Z2SfqWmO9AimK++TXShJ8A3
5sucPL6Q9oCRenkhvLSIzHNKxuLdXj8LX7N18dh9wOp9ijYq0jRlH2uznx8gnnP9
nD7yOpyM3jcVb2T/GSCxRnseszaphT/TEcB02JZ/A0BehDPZO69SxWx+MTMemY6r
E5chYEu7C9jhMmSDV/hzXcec7WESChXfkdMiWtypAFM4EmwJtiv60sNpdt5QV+h+
yEveMvvr6XrtFw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:18 2026 by rpki-client