Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: qj+rki6okxDws8ssbvuEfiOIQrDJt5XWl1yYPAqwU6w=
Subject key identifier: 2E:64:AB:CA:97:A4:80:8F:5A:C3:E9:E0:1A:E7:E5:A8:71:CB:5A:4B
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01A001015C25B138613A64844198DF34F870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 16:01:01 +0000
Manifest this update: Fri 14 Aug 2026 16:01:01 +0000
Manifest next update: Sat 15 Aug 2026 16:01:01 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 5XhnRJINdy+zE96Ltz7nUsSWJ0+TtA/syMNeKqntO4U=)
2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:5c:25:b1:38:61:3a:64:84:41:98:df:34:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Aug 14 16:01:01 2026 GMT
Not After : Aug 15 16:01:01 2026 GMT
Subject: CN=2e64abca97a4808f5ac3e9e01ae7e5a871cb5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d5:be:18:87:19:57:c2:c7:38:80:a6:0a:ce:
6f:25:f3:f1:61:f0:f5:99:84:ea:f5:65:6d:a3:f3:
ca:dd:54:2d:22:6a:07:70:0e:f9:00:e0:64:6d:e6:
01:3c:42:a6:64:d5:02:a5:49:9b:af:bc:1f:49:27:
ea:c6:f3:91:fc:47:19:a2:24:f7:37:7f:3b:65:65:
b0:5d:43:92:8c:83:87:18:d6:04:76:57:8d:58:b8:
29:9a:c8:05:47:4c:b7:92:c2:7c:83:09:7e:71:fe:
3a:2a:c4:a3:9c:46:fa:30:2b:83:83:eb:9c:1a:d9:
18:39:be:0c:dc:17:f5:ed:b9:2d:67:ed:0d:34:55:
a1:bd:20:a4:9c:14:f4:64:3d:11:97:0c:63:98:e8:
30:8d:46:b0:7c:8b:bd:e1:fc:1d:a8:7b:bb:0c:87:
32:c8:2b:49:32:7d:40:d4:05:71:2a:8e:7f:cf:79:
c2:c8:29:2e:d9:29:85:32:6f:a0:30:4f:aa:f1:15:
86:df:37:c6:e6:04:aa:48:57:33:de:8a:aa:3b:dd:
51:d9:4c:42:39:a2:7a:7f:bd:5b:92:8c:33:6d:cb:
ea:c8:11:86:c2:92:1b:06:3c:8d:49:55:d6:ab:30:
45:d7:e5:fe:c7:eb:98:54:8f:9a:cf:d4:4e:34:aa:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:AB:CA:97:A4:80:8F:5A:C3:E9:E0:1A:E7:E5:A8:71:CB:5A:4B
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d6:fa:52:50:2d:4a:bf:d5:ab:fd:51:a1:5e:87:5a:6f:6e:
c3:22:ad:f0:a6:0c:b1:a4:0e:71:c1:14:7a:fb:74:04:77:ee:
83:c8:26:c8:64:45:f4:74:12:b8:82:51:db:e0:4c:ab:d7:26:
f9:22:0c:4e:0f:20:93:50:d9:58:cc:0d:e8:7b:cf:ac:1f:c7:
e0:ed:d9:19:69:90:00:42:c1:0e:f4:8a:46:95:df:0c:fc:90:
5a:c6:cd:ed:51:48:0b:c0:39:ed:64:ef:a7:f3:ac:03:2d:1d:
c3:c9:b9:da:7e:be:8a:72:ac:47:f6:ce:ba:8a:26:fd:f9:58:
a9:1a:08:32:69:18:1f:9f:2c:bc:d7:cc:27:bd:43:76:b8:bf:
2c:1d:f0:7b:7e:eb:eb:69:c7:fa:1e:9c:98:a9:2d:7a:0a:4a:
2a:4b:0a:c3:a4:36:38:8d:47:6a:12:8e:f9:bd:35:87:20:a6:
28:f5:f1:29:72:12:33:dd:17:44:46:f7:9c:99:81:31:07:76:
94:d4:60:c7:cc:5e:b2:18:59:8a:db:18:d5:b5:af:9a:aa:90:
32:4a:ea:ef:19:2c:09:8d:d5:a7:32:c7:0e:39:e7:2c:b8:70:
75:b5:b6:4d:32:ff:8a:21:b0:49:f9:d1:f9:cd:5a:22:b9:7d:
60:f6:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:35 2026 by rpki-client