Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: l4JG1aZyrDZ1PRkjlCXUAYRorjz7GOQXqxqjieLmI9E=
Subject key identifier: 77:AD:67:C0:81:17:0B:18:AB:A7:AA:EA:2F:98:55:66:C2:43:F2:AC
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019D3866537F0B26F626F486CBE5020CBFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0E90
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: cXMTM6VgU9Zc6vQZD1jMYvCLc4Ulm5tZmHHvi+7Dap8=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:53:7f:0b:26:f6:26:f4:86:cb:e5:02:0c:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=77ad67c081170b18aba7aaea2f985566c243f2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:31:51:b0:a5:cb:0c:b1:fa:e2:1f:bb:e5:
78:0e:bb:b3:39:88:5e:bc:d9:a7:61:cd:06:fb:54:
28:7d:d6:23:12:2b:6d:4f:c3:04:25:69:b4:cd:2c:
8b:a5:83:6d:e9:df:41:d4:f1:13:28:ac:d6:10:83:
68:02:ac:d9:66:76:90:9c:1e:48:75:de:25:2c:aa:
db:43:fb:53:2e:1e:83:4a:1a:58:13:91:4c:02:78:
8e:2b:79:2e:73:04:c1:f2:7e:51:24:d3:b4:ac:79:
52:9b:54:3c:e0:36:d9:2b:32:be:06:b0:54:f2:e9:
ce:42:ed:24:b1:7f:b2:c3:00:4a:4b:2d:cd:d7:76:
11:49:90:19:ac:03:c1:02:93:85:a3:6a:bc:4e:e4:
2f:c2:90:cd:85:39:13:93:80:13:1a:d9:3b:95:55:
b7:d7:17:e0:10:b1:75:91:da:4d:ad:86:45:93:86:
b8:ad:4e:82:26:da:8c:c4:10:02:24:ae:90:61:a3:
46:00:0a:5c:5d:09:b0:c7:3f:39:40:9c:c5:9d:73:
fc:3f:73:a6:c1:9b:8f:4e:3f:8c:cf:63:31:ee:71:
1b:65:87:22:38:e5:51:a8:6e:61:67:44:b5:de:d4:
2f:80:cb:06:8c:9f:e5:58:10:5d:f0:58:be:76:f6:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:67:C0:81:17:0B:18:AB:A7:AA:EA:2F:98:55:66:C2:43:F2:AC
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:5b:69:26:d6:52:8a:8a:66:e4:13:87:1e:72:82:70:dd:
62:4b:da:8d:23:ab:82:2c:6d:3c:fc:ba:28:59:e2:35:8b:4c:
f5:03:4b:48:f6:8a:81:ac:ca:37:d6:65:f1:5e:50:18:da:cc:
a7:c3:22:9e:42:ba:5f:f5:6a:73:bd:b8:fa:45:0f:35:7e:f6:
07:24:6e:89:52:88:9c:cc:1e:51:5d:fc:98:b9:e7:06:00:d7:
a0:6c:7a:e1:eb:26:e8:9c:5e:dd:22:91:15:e7:b6:07:cc:ab:
6b:38:d5:c0:02:e2:01:0d:9b:8c:bd:b2:11:38:5c:f0:28:25:
3d:ca:55:71:0d:2c:66:49:66:34:96:d4:b2:91:22:c2:c8:98:
3e:af:50:23:6d:d8:e0:34:07:03:7e:d1:26:9a:4b:a5:a6:e1:
94:1c:cb:19:15:9d:a9:bc:e4:f3:86:a6:b8:f5:93:40:95:74:
a7:7e:f0:2c:bd:84:c2:a3:db:3a:c7:43:e1:ec:5f:c5:bb:b9:
6e:91:56:aa:6c:d0:d9:1c:6c:2d:36:25:d4:45:12:b3:cf:7f:
31:02:16:8d:15:43:5c:46:00:98:4b:65:e9:b5:5b:c0:51:7b:
31:98:72:bb:1b:27:41:25:9a:68:18:37:02:88:5f:e6:5d:b2:
7a:0b:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:07 2026 by rpki-client