Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: n5FbH4pjJdtpsyWqFfBVTASVh5MtwCiP6uSLGeJ+lDM=
Subject key identifier: 6F:C5:66:5E:5A:1F:D4:11:15:46:60:99:75:51:37:CF:BF:EF:17:2D
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019D25F1BE0A3C0B6EE25550C2D4F57FF9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0A45
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: xx9HTlkONyWUo9H6asrLbPXdCFaewRNbC7hmVBLVmgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:be:0a:3c:0b:6e:e2:55:50:c2:d4:f5:7f:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=6fc5665e5a1fd41115466099755137cfbfef172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:28:5d:63:02:19:1b:bf:7e:21:1c:c1:8f:
28:24:9c:78:bd:87:94:6f:54:c4:22:be:31:c7:46:
d0:d7:08:f8:4e:7f:6c:80:7b:3b:01:f9:f2:a7:8d:
a7:54:d0:00:e0:18:fa:b5:e0:01:18:01:b3:40:1e:
fb:aa:9b:04:9d:ca:67:a7:b8:7a:62:df:40:1e:a0:
38:d1:49:22:b6:6b:87:73:54:5c:7d:2a:bd:d5:b3:
8c:0c:e9:aa:aa:4e:1f:0a:14:b7:93:be:92:62:42:
32:05:ea:b2:a3:b3:75:26:76:ac:e4:c7:2a:43:e2:
7f:cd:eb:c8:b1:a2:07:b0:21:31:00:f9:65:4b:1c:
25:7b:09:5e:92:cf:d1:e2:e0:bd:9f:c5:e2:47:a3:
be:41:35:14:90:fa:e5:6e:1e:f1:be:64:30:a0:05:
90:5e:4b:5a:b0:bd:00:10:48:8f:28:87:27:bd:aa:
9c:8c:60:8e:d1:50:46:74:94:00:e2:0f:f1:59:69:
b2:d4:fa:8b:e9:16:57:a2:2d:1c:0c:6b:57:85:36:
64:96:f3:9f:4b:22:61:1a:8c:33:fc:f6:7e:a0:59:
58:2e:6f:49:94:f0:b5:4e:e2:cc:66:bc:ec:d5:97:
90:2c:8b:78:34:84:d2:74:6b:b6:28:57:13:9b:7c:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:66:5E:5A:1F:D4:11:15:46:60:99:75:51:37:CF:BF:EF:17:2D
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ee:e8:af:5e:32:af:05:b8:c3:c4:36:49:52:d1:51:7c:99:
15:fb:b7:45:c8:e1:43:f0:d4:19:23:75:e5:26:e9:d0:12:86:
32:d5:32:37:1d:be:ab:20:ff:ee:f5:db:8e:34:a1:1f:08:1f:
c4:a5:a9:bb:5b:37:cd:bf:1a:0e:a6:c5:ad:a0:c7:3e:8c:a7:
92:20:36:52:ec:80:77:b6:34:e7:2c:e6:db:dd:ef:5c:8c:68:
d4:60:a1:67:06:8e:ef:8c:28:6e:19:c7:f3:58:c8:ea:4b:50:
af:5f:e5:a8:fa:8c:df:15:0e:19:e4:0c:4e:fa:29:bf:d9:46:
2a:67:e4:0d:8e:37:bf:21:ff:74:12:b2:32:3d:be:55:f8:77:
fd:e4:db:7c:cd:a4:26:26:cc:8b:6a:85:19:57:8f:bf:72:15:
e6:9d:75:ea:78:f4:59:4f:ea:41:28:89:41:d2:d7:62:1a:bc:
6e:0f:63:17:34:e6:b6:28:d2:71:69:f8:9d:d8:9b:d5:ad:82:
33:fe:32:c4:bb:f4:48:c1:80:7a:3e:7c:a9:a0:dc:dc:85:ce:
47:45:d6:a2:04:67:09:96:2f:8d:88:5f:2e:77:c4:e2:6d:14:
23:07:55:cf:4d:63:fd:b9:18:8b:95:b5:12:b3:68:e8:3d:a2:
37:0e:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:31 2026 by rpki-client