Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: IQ4Kv8EEyp1wgoIhqBxYvdCypGvayQ0gUOaWQFWNRog=
Subject key identifier: 99:40:8C:D5:9B:98:06:8A:3C:AB:52:F4:7A:CA:26:19:FC:E0:64:C2
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 01A0010136158AD3BE4160A071E62FE0F9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 1001
Signing time: Fri 14 Aug 2026 16:00:51 +0000
Manifest this update: Fri 14 Aug 2026 16:00:51 +0000
Manifest next update: Sat 15 Aug 2026 16:00:51 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: hLZZshvaYL8q0WsD0UfgLfyfKxibtpV40+XdvOfWvic=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:36:15:8a:d3:be:41:60:a0:71:e6:2f:e0:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Aug 14 16:00:51 2026 GMT
Not After : Aug 15 16:00:51 2026 GMT
Subject: CN=99408cd59b98068a3cab52f47aca2619fce064c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:6e:eb:65:cd:98:d4:f5:e7:fe:5c:63:ec:
81:ab:62:ae:56:e1:b2:4a:38:c5:99:56:d5:1f:94:
d8:2e:2d:6e:63:7e:c2:32:d3:2c:6f:96:d0:2c:72:
9d:a6:11:19:c5:bc:2a:ea:d4:6a:d8:b8:26:7f:fa:
20:df:67:97:eb:ad:61:20:26:d7:5f:e3:61:65:52:
1b:15:2a:ed:e6:a8:71:89:3a:a7:12:d4:68:5a:ed:
cc:f2:a3:7a:87:95:d0:8a:c1:c4:0c:ba:a8:39:0a:
20:a1:1f:6d:f3:f3:28:58:36:1f:d4:6f:26:d1:65:
2a:d7:67:29:3f:05:cd:bc:a6:fd:ec:f4:57:5e:47:
40:51:cc:49:e1:21:e2:5d:1a:16:44:67:b9:de:a3:
67:12:88:e9:7e:6f:8a:0f:d6:b6:63:d5:bc:a9:01:
c2:c3:87:fe:1e:ab:17:fd:3a:bc:f7:ce:e4:7d:91:
4b:55:1e:28:70:ee:6b:49:1a:60:65:ed:d0:7e:80:
83:ba:42:26:ed:15:74:af:dd:19:e6:5f:ac:7f:d5:
2c:82:a1:7d:fe:7a:e4:fd:bb:52:0e:7e:5b:0f:2a:
f8:6d:10:13:34:1c:3a:47:d7:a8:4b:d6:f2:92:b5:
e8:50:98:47:f6:c3:94:02:7b:1c:58:e9:56:9f:f6:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:8C:D5:9B:98:06:8A:3C:AB:52:F4:7A:CA:26:19:FC:E0:64:C2
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:62:de:63:12:4f:16:0d:10:bb:66:46:49:86:1d:26:9f:
d0:f3:20:ec:79:63:35:0d:bf:a7:4c:18:58:ea:32:77:26:cc:
2f:de:14:5a:26:b7:b8:fb:7c:00:df:50:6e:62:d2:51:bf:6c:
d7:aa:40:61:77:79:4d:3a:ce:a8:e5:39:15:b3:b2:45:f9:b8:
39:74:1d:cf:4a:7b:51:72:2e:55:55:5e:04:2d:59:2b:bb:69:
61:56:02:bf:38:d7:8c:77:81:cf:be:2a:34:a6:5e:e2:38:46:
a8:23:b3:0e:2a:4b:f3:38:a5:2b:8a:fb:4e:e6:d5:2e:69:f2:
0c:12:7c:87:c0:4f:98:3f:03:a8:f7:ba:6f:1e:56:8a:58:5d:
75:b1:79:0c:da:e7:e9:b5:be:2b:e7:31:d6:ad:44:50:32:d7:
50:01:7a:0f:ec:07:7c:4a:85:2e:88:b1:42:45:c8:10:8a:ae:
2d:96:be:4d:43:39:87:d9:dc:b6:da:7f:1b:2c:f9:73:93:78:
e6:1e:3e:1a:59:22:c5:bc:36:8a:a4:08:00:71:2c:10:77:42:
f3:b5:a3:b6:69:92:4b:c8:1e:ee:06:21:73:cf:06:99:76:f3:
27:21:ce:21:86:48:67:42:ef:b5:80:9c:bc:d3:a7:bb:f0:c1:
35:ab:b3:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABATYVitO+QWCgceYv4Pm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGQ2NWU3NDI1NGIyNWZlMDBlYjhlYTA2YmI1OGZiZTY4
YWMxOWIwHhcNMjYwODE0MTYwMDUxWhcNMjYwODE1MTYwMDUxWjAzMTEwLwYDVQQD
Eyg5OTQwOGNkNTliOTgwNjhhM2NhYjUyZjQ3YWNhMjYxOWZjZTA2NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr05u62XNmNT15/5cY+yBq2KuVuGy
SjjFmVbVH5TYLi1uY37CMtMsb5bQLHKdphEZxbwq6tRq2Lgmf/og32eX661hICbX
X+NhZVIbFSrt5qhxiTqnEtRoWu3M8qN6h5XQisHEDLqoOQogoR9t8/MoWDYf1G8m
0WUq12cpPwXNvKb97PRXXkdAUcxJ4SHiXRoWRGe53qNnEojpfm+KD9a2Y9W8qQHC
w4f+HqsX/Tq8987kfZFLVR4ocO5rSRpgZe3QfoCDukIm7RV0r90Z5l+sf9UsgqF9
/nrk/btSDn5bDyr4bRATNBw6R9eoS9bykrXoUJhH9sOUAnscWOlWn/aglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlAjNWbmAaKPKtS9HrKJhn84GTCMB8GA1UdIwQY
MBaAFARNZedCVLJf4A646ga7WPvmisGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTIt
NDA0MzhhOTk5NDE0LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMzljNmMtNDVlMS00MTI2LWE0ZTItNDA0MzhhOTk5NDE0
LzEvQkUxbDUwSlVzbF9nRHJqcUJydFktLWFLd1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtxi3mMS
TxYNELtmRkmGHSaf0PMg7HljNQ2/p0wYWOoydybML94UWia3uPt8AN9QbmLSUb9s
16pAYXd5TTrOqOU5FbOyRfm4OXQdz0p7UXIuVVVeBC1ZK7tpYVYCvzjXjHeBz74q
NKZe4jhGqCOzDipL8zilK4r7TubVLmnyDBJ8h8BPmD8DqPe6bx5WilhddbF5DNrn
6bW+K+cx1q1EUDLXUAF6D+wHfEqFLoixQkXIEIquLZa+TUM5h9ncttp/Gyz5c5N4
5h4+Glkixbw2iqQIAHEsEHdC87WjtmmSS8ge7gYhc88GmXbzJyHOIYZIZ0LvtYCc
vNOnu/DBNauzfw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:50 2026 by rpki-client