Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
File: BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft (raw, json)
Hash identifier: WlJLEhp/8Kp3LxX2ZLPYm9nAqUSgr8fvPPwFPXJXcHk=
Subject key identifier: D2:B4:8E:44:D4:4D:A4:82:7F:63:CE:BD:7B:CC:F0:92:79:E0:64:F8
Authority key identifier: BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC
Certificate issuer: /CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
Certificate serial: 61EA56D7C44AF831462819041ABB69DB1209A4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
Manifest number: 3F
Signing time: Wed 25 Mar 2026 11:25:22 +0000
Manifest this update: Wed 25 Mar 2026 11:20:22 +0000
Manifest next update: Thu 26 Mar 2026 14:10:22 +0000
Files and hashes: 1: AS210632.asa (hash: sN0pCNAK88bOqEZOue60hphAl0l1zoCw8mApbiN89qs=)
2: BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl (hash: 11VbYNT4hSIpaW46y48lVIMRZmerX6qybHCACvidNwg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ea:56:d7:c4:4a:f8:31:46:28:19:04:1a:bb:69:db:12:09:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
Validity
Not Before: Mar 25 11:20:22 2026 GMT
Not After : Mar 26 14:10:22 2026 GMT
Subject: CN=D2B48E44D44DA4827F63CEBD7BCCF09279E064F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:6e:73:80:3d:2a:b3:b6:c2:aa:f8:91:eb:
15:f7:96:69:61:83:78:ca:8b:26:44:ad:2f:d5:54:
b7:c9:4b:ad:86:a7:0d:1e:4e:0a:7a:48:0a:5a:9f:
6c:a9:12:e8:0d:0b:8b:5f:e9:fd:79:08:71:9a:14:
2f:83:a0:74:0d:a5:41:31:34:99:62:ce:bf:62:53:
f1:bf:20:f3:62:11:6a:34:4c:b4:bf:02:95:bb:d4:
d3:1d:f6:84:30:15:b6:d7:f2:7d:b0:af:86:3b:3c:
c7:17:1e:5f:ad:fc:49:b4:ee:37:b8:02:57:cc:7f:
2f:47:a0:0e:23:a6:8b:c0:b2:a7:24:21:0a:ca:c1:
fb:ed:d8:a6:6b:0a:58:10:5d:c7:75:87:6e:ab:f0:
cd:27:68:23:70:6e:e4:af:5e:b8:49:8a:76:66:8f:
67:14:ca:2b:d3:f1:f9:23:df:5e:3c:29:f5:8b:d9:
c9:cc:33:3e:15:88:90:76:cf:92:7e:a4:9c:3a:ce:
18:8c:ad:59:9f:d3:9e:63:42:2e:66:c3:06:24:8e:
ea:de:1c:77:f5:ff:5e:e9:58:ca:40:3e:db:35:dd:
d4:17:c7:de:c7:d9:38:64:92:a6:aa:aa:b1:03:0d:
5f:ec:4e:d4:7e:62:92:f5:16:a9:63:44:ab:0b:01:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:8E:44:D4:4D:A4:82:7F:63:CE:BD:7B:CC:F0:92:79:E0:64:F8
X509v3 Authority Key Identifier:
keyid:BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:64:37:d1:22:db:f8:93:bc:cb:95:72:df:92:72:80:ef:57:
24:00:f6:30:40:74:29:cc:7b:97:ed:2b:5d:5f:88:a5:f5:cb:
7a:5b:ad:ab:b3:cf:e7:fa:49:0b:2b:92:76:17:20:77:0e:e9:
8e:c3:18:6d:f1:27:97:93:ae:a2:c0:eb:6e:02:84:58:89:0f:
cc:a3:8a:a2:ab:0f:16:10:28:44:09:86:1e:8b:03:5e:36:f3:
ad:44:61:51:a3:ed:81:3e:b4:22:a3:03:b8:0c:27:4e:b2:4d:
58:94:5a:d7:03:c2:23:9c:83:b1:05:0c:84:6b:b5:11:0a:23:
7d:90:f6:7b:4e:08:80:19:b6:18:68:50:67:74:12:42:cf:ad:
50:d9:07:86:2f:81:28:fd:12:fe:c9:96:49:2e:48:5a:cf:f3:
0f:e1:aa:e7:e9:85:7b:a2:93:74:f1:1f:cd:37:d5:2f:13:11:
15:11:d5:d0:03:5c:e4:86:11:67:a0:57:e6:c4:5d:60:b6:2f:
e8:2c:17:7b:07:4d:65:dc:35:6f:ab:92:b2:2b:c1:6f:b6:93:
66:30:eb:e3:a0:f1:de:28:9f:c8:ba:52:21:80:c7:29:76:16:
60:f3:73:b0:69:7d:40:bc:f2:54:14:03:13:a3:b7:50:d4:e6:
62:d1:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:35 2026 by rpki-client