Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
File: BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft (raw, json)
Hash identifier: sD4izQPW7o0+G4az1UFBVJkhW5OSn4X8ItpcF//OrSU=
Subject key identifier: 51:62:BE:F9:FB:43:01:3C:5B:C8:DE:50:F6:7C:8F:7A:53:71:54:C1
Authority key identifier: 04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
Certificate issuer: /CN=04448d904f77c70cd9ee12336625d4851accb604
Certificate serial: 019DCD869F794F89837FFFE857E62B2635F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
Manifest number: 0F
Signing time: Mon 27 Apr 2026 06:00:44 +0000
Manifest this update: Mon 27 Apr 2026 06:00:44 +0000
Manifest next update: Tue 28 Apr 2026 06:00:44 +0000
Files and hashes: 1: BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl (hash: g01BDFvlENB11qy4wnjroYpjzNgQTLFk44TbSO5yGk0=)
2: w7lsYz9XoKaXPHhmbi8S3F4BFig.roa (hash: Vh0EEDXpeUyKU+H3tbgpmBhfgd6M7hNmqdp0iRnIzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:9f:79:4f:89:83:7f:ff:e8:57:e6:2b:26:35:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04448d904f77c70cd9ee12336625d4851accb604
Validity
Not Before: Apr 27 06:00:44 2026 GMT
Not After : Apr 28 06:00:44 2026 GMT
Subject: CN=5162bef9fb43013c5bc8de50f67c8f7a537154c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:f1:7c:e0:13:02:bf:45:28:0a:73:1d:77:
46:e9:9c:96:7a:fc:dd:fa:af:b4:f4:78:20:77:95:
64:9e:02:f3:43:c9:e8:d4:a4:9b:b6:0b:d1:29:9e:
32:04:06:86:cd:d4:d0:a5:88:e7:f7:59:40:f0:c3:
98:a0:b8:3b:46:1b:89:78:64:cf:ba:68:97:88:e3:
9b:61:ce:8b:ee:9f:d4:ff:5f:05:24:36:68:76:f2:
ce:b5:ed:ff:6f:ea:00:e6:13:61:74:37:1f:88:08:
d9:c0:c6:20:cb:66:e0:32:a9:2a:b9:3e:e9:b3:4a:
6c:09:b9:f2:3e:d7:9b:9e:e5:d4:53:59:02:cd:b0:
a5:41:dd:54:04:13:dd:10:07:71:1a:4c:fc:b0:52:
0e:c3:a2:09:41:77:7d:a1:0d:e8:3b:e9:57:a4:a5:
0e:5a:5a:59:13:f0:76:1a:16:d3:02:95:02:0b:a5:
51:44:8d:1d:e4:aa:2e:e3:17:b5:bb:f0:cf:50:4f:
f0:73:2e:12:d0:67:45:5f:89:b7:83:ef:03:77:4b:
83:4d:c8:c0:bc:d3:a9:1e:ca:cd:b0:48:5c:c9:b7:
0b:d8:da:eb:4a:19:26:23:bd:0d:ad:ec:88:87:e6:
63:bb:5c:e0:5d:6f:a3:82:55:d1:a7:c1:ae:c5:fc:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:BE:F9:FB:43:01:3C:5B:C8:DE:50:F6:7C:8F:7A:53:71:54:C1
X509v3 Authority Key Identifier:
keyid:04:44:8D:90:4F:77:C7:0C:D9:EE:12:33:66:25:D4:85:1A:CC:B6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BESNkE93xwzZ7hIzZiXUhRrMtgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44a522-3a34-4804-8c32-45644cd5d829/1/BESNkE93xwzZ7hIzZiXUhRrMtgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:c7:ef:c7:d4:ed:c5:eb:ba:3d:22:12:f4:61:4f:1a:37:
94:c2:f3:3e:28:84:03:6b:54:e2:59:f8:6b:32:e9:45:cf:e7:
9c:c6:70:d2:52:09:1c:0d:f2:3b:21:e0:4a:18:75:b7:4d:ef:
f1:d9:a8:9d:d3:c9:c4:e1:79:9f:f0:49:6f:b4:a9:e8:7a:0a:
28:6b:1d:83:c3:9a:30:10:f4:d9:75:10:0f:9f:8d:68:c1:74:
2d:88:27:37:20:b4:3c:7e:ff:6b:d8:9a:61:a9:ba:3b:9c:88:
e3:15:3f:2a:0c:1e:96:ff:0e:51:03:86:a1:b1:92:a4:76:76:
0d:b7:84:15:0b:a6:fb:74:9a:81:4b:08:ce:8c:f2:f6:fd:47:
ba:7b:2c:af:17:73:54:d2:04:a8:29:0e:a6:b4:6d:c4:19:4d:
c8:0b:be:4b:4f:e1:17:5c:ac:f9:05:d6:ac:74:2c:a8:98:bc:
f7:d1:e3:bc:57:21:89:8c:07:9f:fb:b2:22:3f:c3:b5:07:fb:
bd:42:c7:46:19:7a:20:29:87:5f:0b:fe:fd:26:be:67:09:33:
e2:ca:e9:06:07:c9:60:4c:be:cf:5c:b9:6f:c7:77:f1:dc:a4:
70:9c:1a:b0:93:b7:4f:a7:c7:9c:28:3b:52:f0:3e:4b:b4:dc:
3d:1a:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:24:13 2026 by rpki-client