Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: dE7mT3WGGPFsD+kcieO63P8HuFpVx5m9H+CdeaOPUQQ=
Subject key identifier: 81:2F:E0:83:2C:65:96:24:98:6F:B7:6A:F5:18:60:2A:3D:FF:E2:C3
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 01A0D26E36BBF150EADFDC41420402E2633F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0C2C
Signing time: Thu 24 Sep 2026 08:00:33 +0000
Manifest this update: Thu 24 Sep 2026 08:00:33 +0000
Manifest next update: Fri 25 Sep 2026 08:00:33 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: jOwaHbAd+q7rTsHQ1ivzFbLaLCQMO4NWFoIHoe4FPtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:36:bb:f1:50:ea:df:dc:41:42:04:02:e2:63:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Sep 24 08:00:33 2026 GMT
Not After : Sep 25 08:00:33 2026 GMT
Subject: CN=812fe0832c659624986fb76af518602a3dffe2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:16:b9:4b:7a:ac:cc:72:0d:ff:81:cf:14:
f3:28:49:36:41:75:a3:40:e5:61:e3:4b:2f:c5:30:
5b:8e:c2:8e:ab:30:dc:37:6e:bc:2f:6f:e7:0b:f5:
e5:dc:91:d7:a2:cc:d0:f0:ab:21:c3:04:09:17:99:
a0:30:a6:d5:98:62:84:dc:92:a7:e6:90:0b:e3:e1:
63:a5:ae:f6:18:00:2f:f3:ea:72:03:ce:24:98:16:
7b:84:7b:d0:8a:04:b2:cb:c4:0f:8b:d5:8c:eb:9d:
49:63:02:44:bf:e9:0e:c5:e8:9a:da:4a:bb:76:01:
91:c0:57:64:fb:7d:aa:be:b6:5d:9c:99:81:1b:49:
9b:b5:37:0d:a6:d6:57:fc:27:1a:4e:cd:e7:eb:a6:
c2:df:4a:ef:27:3a:0d:45:08:d2:1f:1b:3d:2e:42:
e8:06:4a:4d:a8:7c:fc:b8:3a:4d:d7:2c:5a:0c:40:
9b:a7:c3:1c:a0:c8:56:b7:41:5b:53:d2:c9:da:ff:
b2:4e:d5:84:44:3d:92:8d:92:f1:11:d6:5b:76:b9:
66:cd:15:b4:91:d0:3d:d2:41:32:d5:74:f4:cf:ef:
23:eb:ff:fb:e2:66:90:71:93:dd:6f:7e:a2:f3:50:
27:eb:ca:cb:87:c6:00:1f:ce:73:72:51:e7:ab:f4:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:E0:83:2C:65:96:24:98:6F:B7:6A:F5:18:60:2A:3D:FF:E2:C3
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:52:ab:2a:74:a3:59:be:1c:11:89:13:c7:e5:f6:2d:b1:
78:fe:0b:4d:d9:06:ab:5d:72:15:be:68:fa:c8:52:22:57:51:
c2:c9:ba:1c:f2:76:84:14:ef:c6:22:61:64:66:eb:8b:63:e3:
6d:a2:43:27:c1:df:2e:b4:0e:a0:14:eb:ba:a1:8e:7c:64:1f:
37:88:a0:be:05:7e:51:72:23:77:d2:4e:f2:ca:89:37:67:45:
e6:66:93:5a:4d:bd:7f:a8:ed:f2:eb:5b:83:cc:71:38:0a:7a:
a2:e8:ab:cf:69:d3:c6:0d:94:be:69:a9:30:63:f4:d3:97:66:
73:2e:18:7e:00:7a:d5:5b:8d:26:25:a1:96:93:77:4b:ec:e8:
98:cc:ff:b6:6d:af:19:0d:f5:a3:6c:d8:b0:e8:75:81:c2:4a:
9a:8f:2d:7d:d0:4c:8d:79:da:f7:ed:2f:6f:2d:7e:89:69:4a:
ad:9e:2d:be:8a:9f:e5:27:c6:9a:d3:60:97:40:7d:e1:51:85:
82:7c:1a:73:62:49:ae:98:3c:be:ae:59:a3:d0:8c:eb:5c:73:
34:d6:1c:28:46:26:38:43:2f:4c:e6:26:6d:29:62:d4:69:46:
31:57:2d:80:6c:9f:a4:5a:c6:e5:b4:b2:bf:92:33:e1:33:08:
1d:b5:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:00:53 2026 by rpki-client