Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
File: BEMrQbKmzMlHFxP39wfXac1Mfb8.mft (raw, json)
Hash identifier: ko973NH5LL9unl2sQIj/o85UMI1FR8MQkcBtolQL6fk=
Subject key identifier: 19:97:92:E2:F7:D9:8C:9B:3C:DC:13:21:37:9D:49:28:B5:5B:C9:FB
Authority key identifier: 04:43:2B:41:B2:A6:CC:C9:47:17:13:F7:F7:07:D7:69:CD:4C:7D:BF
Certificate issuer: /CN=04432b41b2a6ccc9471713f7f707d769cd4c7dbf
Certificate serial: 01A0CD47EBC9CD5FF4CF04AE72B4359FC65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEMrQbKmzMlHFxP39wfXac1Mfb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
Manifest number: 06CE
Signing time: Wed 23 Sep 2026 08:00:37 +0000
Manifest this update: Wed 23 Sep 2026 08:00:37 +0000
Manifest next update: Thu 24 Sep 2026 08:00:37 +0000
Files and hashes: 1: BEMrQbKmzMlHFxP39wfXac1Mfb8.crl (hash: b51qGzjxt5y2b4B9I/HZhx0Ztp+w4GXGrFCOU5PpUZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEMrQbKmzMlHFxP39wfXac1Mfb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:eb:c9:cd:5f:f4:cf:04:ae:72:b4:35:9f:c6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04432b41b2a6ccc9471713f7f707d769cd4c7dbf
Validity
Not Before: Sep 23 08:00:37 2026 GMT
Not After : Sep 24 08:00:37 2026 GMT
Subject: CN=199792e2f7d98c9b3cdc1321379d4928b55bc9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:56:a1:29:22:b9:2b:0c:d8:a2:5e:38:4e:
14:5d:1d:91:7f:6d:36:1f:37:56:4f:24:72:7e:76:
41:8c:e7:ee:4d:1d:d7:2e:5c:41:1d:57:f6:55:11:
e1:c5:95:66:13:c4:41:5d:85:9d:86:5d:b4:4d:d6:
1f:f4:03:07:fd:c6:ff:ee:68:70:c3:0b:45:e9:48:
64:63:e8:0d:d8:7a:43:5f:b4:2b:5c:94:66:9f:5c:
6c:f5:12:b2:d1:d2:1c:b7:25:d1:fa:f3:8e:ff:14:
92:34:e8:1f:fb:49:d4:75:88:9d:cc:ac:9f:bd:5f:
21:b4:66:6d:b3:2b:21:dd:1f:d1:48:e6:a9:87:d2:
91:dd:06:de:64:b5:92:42:b4:61:66:ec:39:aa:93:
e4:2a:06:4d:61:54:83:f2:9d:38:f3:3d:b6:9c:5f:
91:01:9f:e1:da:df:df:e2:e1:27:16:79:db:ab:fe:
58:5e:6d:dc:ad:ce:0c:06:0f:2e:d7:4f:cc:61:9d:
46:88:97:4a:18:8e:c1:13:2b:d3:01:21:6a:94:ae:
8a:93:7c:bd:89:f2:eb:1e:bb:ea:e5:e7:e2:04:15:
19:8c:6c:ab:4f:ed:59:e6:f0:89:80:7b:a6:fa:f6:
77:d0:dc:1f:c8:31:f0:0f:f3:eb:03:88:bd:0b:1b:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:92:E2:F7:D9:8C:9B:3C:DC:13:21:37:9D:49:28:B5:5B:C9:FB
X509v3 Authority Key Identifier:
keyid:04:43:2B:41:B2:A6:CC:C9:47:17:13:F7:F7:07:D7:69:CD:4C:7D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEMrQbKmzMlHFxP39wfXac1Mfb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/72a3de-76c6-4ddb-a4b8-6591d4e7f41f/1/BEMrQbKmzMlHFxP39wfXac1Mfb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fe:26:49:ee:02:b1:92:71:c8:60:8d:56:d2:c2:6c:ce:25:
dc:50:d0:88:ea:57:0d:15:10:5c:b4:60:22:c5:4c:ea:21:11:
de:5e:24:cd:be:3c:29:00:33:c6:a0:23:49:2c:fc:a8:cd:94:
e2:90:64:22:f0:b1:98:c9:57:cd:ca:ea:2e:2f:36:ad:83:47:
35:d1:7e:41:c1:be:8f:03:5d:f6:b2:7d:4c:ad:b2:54:0d:b5:
4c:b2:55:c8:c7:53:a5:3f:bd:a9:3a:1e:46:f4:99:db:59:d7:
1c:0e:a1:31:83:06:f1:53:9a:7f:0b:9e:35:21:72:87:5f:4d:
17:f5:3b:42:3c:c3:b4:9b:92:01:21:a3:ef:77:c1:05:7b:d4:
c0:65:21:75:bc:fe:eb:db:e6:5e:f4:98:10:34:48:3c:84:aa:
c2:b6:01:90:f6:f7:63:85:2e:b5:2d:ef:2e:40:3b:12:d4:1e:
ee:94:6d:93:8d:45:bd:bb:c6:41:3e:7d:55:aa:28:63:84:59:
bd:c6:a4:ce:57:9c:14:c2:bf:d5:fd:1b:d1:44:24:67:7d:4e:
8d:56:01:9d:56:87:e0:06:37:92:fd:0a:0f:09:da:c0:09:76:
0a:53:ea:1b:9a:a5:19:cf:dd:77:35:56:0f:54:02:29:bf:63:
03:39:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:50:22 2026 by rpki-client