Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: RRRwsrT3X1tiFA0sHSzNSsnF2IiUqg1rzRWjez/7Ozg=
Subject key identifier: 95:27:31:43:6F:BE:11:A0:20:43:29:67:4F:76:CB:B9:05:72:90:42
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019D3752D5E8D23152834650E7C8CA54B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0A4E
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: gkbbEVmkyD2WKlGkvWT9AlI4xYZp5qxTWsdhd6AE5jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d5:e8:d2:31:52:83:46:50:e7:c8:ca:54:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=952731436fbe11a0204329674f76cbb905729042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:10:99:ef:d9:44:95:35:d8:9b:3e:b3:83:
bc:8b:60:56:4e:47:b4:27:ab:0f:0a:46:28:7d:43:
cd:49:d5:c1:cb:e4:fc:d0:37:6a:33:e0:57:3c:cb:
ca:e2:7c:c7:08:82:48:56:12:3a:ea:30:59:2b:94:
3e:4f:48:b2:32:d8:dc:c1:bc:70:0f:ee:c4:fc:11:
e6:ce:7d:70:d8:7b:e2:be:05:2b:a2:ff:98:64:96:
81:fc:05:63:f9:7a:8a:df:26:87:82:00:d0:e5:79:
93:1d:d8:3f:28:02:61:dd:9f:8f:32:23:16:8e:34:
64:2a:80:c5:d6:75:78:ad:ca:ca:f1:87:25:03:78:
c1:01:d1:14:81:af:20:3a:97:ef:01:0a:8e:da:a1:
4a:5a:db:ca:6a:53:2e:5b:0e:73:2d:55:ec:c3:4f:
3c:f4:35:7e:d2:8a:36:3b:ae:7f:6b:8c:fe:ce:21:
0a:9e:64:ce:c8:25:24:71:c5:d8:b4:41:2d:3b:00:
d8:cc:ae:82:b4:b8:2d:55:3a:c4:ef:9e:e6:e6:40:
2f:37:93:7f:45:ef:95:44:9c:10:e4:30:91:ec:2a:
c3:c0:7f:18:25:a3:a4:93:9f:b0:00:44:d7:6e:40:
29:83:f6:41:9c:16:ac:88:9a:31:fa:0c:14:ac:1c:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:27:31:43:6F:BE:11:A0:20:43:29:67:4F:76:CB:B9:05:72:90:42
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a1:0a:33:95:59:d9:26:00:5a:d6:11:2c:95:72:29:f4:be:
6d:b8:59:93:e9:d7:e2:96:77:18:33:9a:94:5b:b7:7a:29:17:
bf:65:d2:ff:c8:fb:c7:d3:00:e7:6f:6a:2c:8f:98:b4:14:bd:
cf:31:f7:91:e9:40:41:04:99:c1:80:e6:ca:bc:1b:38:19:cd:
71:2f:10:2d:a8:b1:e5:bd:95:cf:d0:d7:f6:fb:3f:a7:9a:fb:
d4:d6:fc:21:39:08:88:b1:08:44:8a:f9:f3:d9:97:dc:2f:fe:
2a:a8:66:e7:bc:87:00:eb:88:54:e2:83:6b:ae:de:c5:36:b5:
69:36:d7:82:9b:d1:11:73:25:9c:89:05:b0:37:62:9a:93:15:
44:3d:f3:cc:0a:d4:de:3a:07:62:e0:f3:c3:cc:76:5e:c2:22:
40:a1:a0:a3:20:92:33:fd:e0:0b:e6:57:05:99:1d:85:44:88:
42:18:d3:69:99:92:ec:53:17:61:21:35:15:52:fd:3b:f4:07:
77:f9:93:7a:f7:33:30:63:3e:22:17:2f:fb:d8:86:0b:db:28:
dc:63:41:b0:03:33:b9:0d:b7:c7:52:fc:6e:78:20:14:c7:e4:
2c:7f:92:eb:d7:f8:46:50:6b:3b:69:8b:a6:a9:6c:63:1c:8b:
57:8f:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:07 2026 by rpki-client