Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
File: BEMrQbKmzMlHFxP39wfXac1Mfb8.mft (raw, json)
Hash identifier: wx6gKNkZPW8O1qIRPdqWwCal2zNZrGZpMChBUPqfF5M=
Subject key identifier: 2D:9F:97:42:06:9A:43:51:0D:D2:5E:49:53:BF:F1:DA:FB:BB:E3:25
Authority key identifier: 04:43:2B:41:B2:A6:CC:C9:47:17:13:F7:F7:07:D7:69:CD:4C:7D:BF
Certificate issuer: /CN=04432b41b2a6ccc9471713f7f707d769cd4c7dbf
Certificate serial: 019F909090C78117582501059E5559003308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEMrQbKmzMlHFxP39wfXac1Mfb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
Manifest number: 062A
Signing time: Thu 23 Jul 2026 20:00:21 +0000
Manifest this update: Thu 23 Jul 2026 20:00:21 +0000
Manifest next update: Fri 24 Jul 2026 20:00:21 +0000
Files and hashes: 1: BEMrQbKmzMlHFxP39wfXac1Mfb8.crl (hash: fP5lFaZQqbc2WA/uk/KOV5zk/wSGhCXndHO5yQKZTUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEMrQbKmzMlHFxP39wfXac1Mfb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:90:c7:81:17:58:25:01:05:9e:55:59:00:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04432b41b2a6ccc9471713f7f707d769cd4c7dbf
Validity
Not Before: Jul 23 20:00:21 2026 GMT
Not After : Jul 24 20:00:21 2026 GMT
Subject: CN=2d9f9742069a43510dd25e4953bff1dafbbbe325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:82:c1:cd:4f:aa:dc:7b:77:76:f9:b5:f5:
21:ba:b9:f0:5c:94:67:8d:77:ab:58:e5:1b:db:b5:
3d:4d:13:84:3f:48:0a:e4:03:a1:88:13:c2:36:06:
0f:9c:20:6a:a6:f8:c9:72:b8:5a:2b:90:e4:4f:6d:
7a:87:b9:08:1a:f8:46:d6:ac:de:ae:1a:8d:5c:5e:
27:01:8e:18:8c:11:ba:00:76:71:59:2a:80:b0:30:
3b:94:a4:42:01:c9:ce:2b:a4:61:53:30:b1:94:4b:
de:aa:b8:fb:06:f3:b2:78:da:c2:03:64:de:0b:40:
bc:34:1c:77:46:9d:94:66:55:c5:db:5e:33:ad:b7:
88:79:6c:94:32:33:fc:ca:e1:71:d1:91:0e:d7:53:
3e:2f:d6:39:d0:62:b6:d9:f7:32:12:7d:b1:36:29:
a6:9d:0e:af:2b:0e:83:8f:11:98:07:db:c8:82:5c:
73:ca:23:86:7c:6b:23:20:ab:6c:29:a4:2b:6c:46:
e8:85:74:9c:60:24:08:d1:65:6b:c7:c5:c2:36:e6:
23:b6:e2:19:81:9f:eb:91:7f:2b:2e:8e:cc:3b:3b:
52:a9:e8:c3:36:70:d1:0c:6d:24:77:16:49:db:db:
84:35:8e:05:ed:64:4f:61:ea:6b:70:62:cd:eb:7c:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:97:42:06:9A:43:51:0D:D2:5E:49:53:BF:F1:DA:FB:BB:E3:25
X509v3 Authority Key Identifier:
keyid:04:43:2B:41:B2:A6:CC:C9:47:17:13:F7:F7:07:D7:69:CD:4C:7D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEMrQbKmzMlHFxP39wfXac1Mfb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:aa:46:36:3e:df:45:f1:c6:d2:38:44:f9:0d:d6:e1:91:ee:
91:05:11:60:10:07:a3:f3:85:90:c5:0b:3d:e5:2a:58:58:07:
c7:f9:16:c6:4c:98:d0:2d:4e:29:04:62:5c:dc:1c:0b:0f:92:
09:d7:d0:e5:41:a9:1a:17:de:8e:d0:d1:59:34:d0:47:b1:f3:
8f:e0:86:6a:c2:6b:2d:db:a0:8b:ca:47:11:d1:a0:f5:37:d7:
52:5e:93:83:92:cc:23:13:0a:de:d4:12:23:5d:56:a2:88:f5:
a2:a1:8b:1a:80:86:e0:56:af:a1:57:42:7d:8e:1b:23:a2:6a:
1f:45:80:44:cd:be:15:9b:19:bf:ad:b9:67:b3:08:77:2d:e7:
35:34:85:50:79:47:7c:56:bb:0d:73:1f:16:73:27:e8:9c:d1:
a7:f0:37:f3:26:56:29:ab:45:77:b8:01:23:80:fe:5b:09:ce:
0c:19:a2:4f:61:17:69:0a:ce:5c:ad:42:0d:91:d9:af:30:03:
8f:2c:74:38:4a:da:b1:73:81:9c:c0:53:91:86:ca:8f:3d:8d:
d9:78:a7:78:97:64:a1:94:8d:b8:af:c1:21:7f:e6:2e:56:6d:
31:92:fa:b0:22:8b:7e:cb:51:a0:e8:47:bf:aa:4f:b2:2d:b6:
41:ee:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:16 2026 by rpki-client