Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: 88CM1JKTdhMVtKmAKQOSW2NOQnxHvOgGD+7ruRjYw5o=
Subject key identifier: 50:5F:BA:79:00:78:09:03:81:1A:1D:72:8E:52:C5:5E:9F:CB:5D:C2
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01A13FA7227725E0D544CAE451B73670B2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 13:01:20 +0000
Manifest this update: Thu 15 Oct 2026 13:01:20 +0000
Manifest next update: Fri 16 Oct 2026 13:01:20 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 7dQrGBcyQEavwZjUQlpe1fIGCmqGMkPZ9vOOqF9xMyI=)
2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:22:77:25:e0:d5:44:ca:e4:51:b7:36:70:b2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Oct 15 13:01:20 2026 GMT
Not After : Oct 16 13:01:20 2026 GMT
Subject: CN=505fba7900780903811a1d728e52c55e9fcb5dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:5f:c8:c3:d2:a9:2e:d3:54:d0:04:d8:e8:
9b:09:89:54:73:74:c3:87:d8:12:9e:91:4e:56:ef:
c3:b2:f8:85:49:48:e0:55:83:85:2b:dc:ec:3f:6e:
34:77:fd:5c:0a:7b:37:c8:52:bc:d9:41:1b:c4:1a:
41:94:86:60:9c:ec:6e:b7:52:92:9c:1b:e6:c2:c6:
e5:c6:87:7f:11:a7:8e:f6:db:fe:46:20:39:62:d1:
34:d4:d7:67:e7:09:ee:5d:10:34:8b:2a:0c:4a:2c:
38:41:99:32:8e:04:3f:02:f4:69:44:79:3a:0e:c2:
24:e7:10:df:46:38:0e:60:04:ef:69:e8:f5:62:f6:
66:2e:dc:de:1f:2c:18:e1:e4:fd:44:1b:9a:4f:64:
65:8b:39:e2:ff:9d:87:4b:bb:93:57:26:1e:ea:5b:
92:29:33:c2:22:1e:26:5e:c2:71:13:ba:46:ca:ee:
8e:bb:6d:28:af:ce:1a:ee:af:30:8d:2a:cf:d1:d3:
16:d0:e9:6f:16:f9:07:41:95:a4:69:31:87:b6:cd:
b7:66:bb:88:9c:6a:c9:3b:80:44:e7:f4:34:78:ea:
f2:1b:d6:4d:69:9d:95:e9:0b:a7:f1:1b:e3:82:3d:
3b:dd:50:a3:2a:47:31:83:11:fb:c9:24:ba:d2:12:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:BA:79:00:78:09:03:81:1A:1D:72:8E:52:C5:5E:9F:CB:5D:C2
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:57:45:2e:d3:07:72:ec:33:7a:ea:ed:e2:09:c9:f8:f2:c2:
c1:98:0a:9a:db:a6:f5:c5:10:f5:ef:89:08:d3:7d:d9:ea:94:
8f:d0:df:92:2b:3a:17:9c:81:f8:74:06:12:d3:00:68:8e:0f:
0b:ab:5a:0e:73:61:8e:88:ee:65:2c:27:73:e6:d7:91:1f:85:
94:6d:72:34:fe:1b:35:a0:00:ee:36:53:55:b5:e0:56:64:e7:
99:12:9c:c6:2a:c2:84:16:ef:42:03:47:16:bd:90:37:c4:9e:
70:5f:c4:9d:2b:1f:03:90:a5:49:05:5c:53:8f:60:80:e1:74:
fd:53:ea:ed:00:08:1f:28:c2:dd:89:6f:0c:56:75:92:4a:2c:
dd:36:d9:ae:c5:e5:af:e7:af:b4:b4:ce:b3:86:c5:39:ad:c7:
86:82:07:78:d1:7c:e3:40:12:41:b0:10:bb:5f:12:57:82:23:
1c:56:58:ed:0b:0c:ad:5f:22:64:3f:ad:bd:a6:cd:aa:2e:94:
f7:2c:00:92:b8:fe:f7:4c:5b:61:0d:9a:05:3b:24:1b:aa:67:
cc:5a:2a:c3:a9:d1:60:cf:8e:99:f2:7d:e8:99:a5:30:f5:c8:
70:b0:90:c3:1b:73:ff:81:36:40:17:51:46:26:bd:2e:38:34:
b1:24:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:16 2026 by rpki-client