Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: HUtulNLwDciFtqRLX1lfoPYe3tOhQDuXZMPjEV2KUJ4=
Subject key identifier: D5:71:79:1D:2F:B4:32:C6:97:F8:A6:B4:BD:A3:B9:1D:D0:9B:38:70
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019E3072341F458E1D43428F4D1331C6A7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0ACF
Signing time: Sat 16 May 2026 11:00:51 +0000
Manifest this update: Sat 16 May 2026 11:00:51 +0000
Manifest next update: Sun 17 May 2026 11:00:51 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: r2nnHY+jCMsvQmZUbnhNIlk/H1oLLAw67QAPNUDRvgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:34:1f:45:8e:1d:43:42:8f:4d:13:31:c6:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: May 16 11:00:51 2026 GMT
Not After : May 17 11:00:51 2026 GMT
Subject: CN=d571791d2fb432c697f8a6b4bda3b91dd09b3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:8c:4a:d7:09:86:d0:c4:7b:69:7f:7d:0a:
24:89:0e:29:9c:1e:d1:63:79:cc:81:e8:8a:82:43:
81:97:ca:3f:90:e2:78:56:a6:56:e6:72:2b:ed:f7:
aa:d3:e4:e7:10:95:a3:7f:d5:0c:26:51:82:23:f4:
49:50:33:a0:57:f2:b3:11:a5:82:5f:e5:10:26:35:
9e:a8:94:cd:78:d2:c7:92:f2:0d:02:d0:dd:3b:27:
1e:d5:20:20:c6:22:3f:94:3c:8d:be:cf:7b:ec:64:
ce:4e:e1:fd:1e:6c:cc:a4:a9:9f:28:10:73:ba:2d:
78:29:2c:75:23:bb:f5:c8:ab:16:73:0d:87:58:85:
dc:a2:bc:76:8f:57:51:92:0e:28:68:9b:4a:5c:5a:
db:ce:73:36:f8:6f:96:ec:1a:87:10:0a:e2:38:66:
da:ae:97:1c:26:ae:02:e9:9f:a8:c0:3c:93:3a:49:
9e:18:09:9c:00:61:15:6e:ff:01:ec:87:5b:5a:c3:
b3:df:cd:fe:6a:09:da:2c:5e:6b:10:a6:29:e4:59:
2b:78:7f:b9:51:22:21:9b:d8:71:a1:ac:64:6a:c6:
54:e9:23:b3:c3:8c:e4:2f:8e:5f:a1:67:66:8b:ea:
b0:da:35:44:6e:f9:a8:72:dc:17:f3:bc:35:d0:26:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:79:1D:2F:B4:32:C6:97:F8:A6:B4:BD:A3:B9:1D:D0:9B:38:70
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:a7:31:f2:b4:7f:11:7c:2b:24:91:8f:80:0f:fa:9c:ef:
52:12:fe:60:25:a8:12:00:3a:67:bf:54:ad:25:ef:da:f3:4c:
af:fa:87:c7:2e:25:2d:a6:0d:f2:a1:90:c6:5c:d3:b3:86:8e:
4d:01:66:2e:af:3d:3e:7b:cb:76:49:61:e9:f7:bd:ea:6a:91:
f3:07:5b:10:9d:68:bf:68:d5:c2:e7:89:90:d3:93:55:08:06:
c2:09:45:11:ba:60:56:e1:bb:a8:f0:72:d5:1e:11:5e:bd:d3:
8e:91:e4:11:70:49:94:65:b1:22:fd:97:9d:82:4c:5a:6c:af:
ce:35:c6:b0:e7:21:53:8a:9e:38:ff:3c:77:6e:c6:54:7f:51:
d0:2a:b4:da:d6:c1:77:a6:7e:9a:00:21:e9:78:29:0b:21:65:
36:61:39:08:4c:1d:6f:b0:07:3e:95:60:6e:02:79:2e:2a:2b:
70:b6:b6:d3:bc:7e:e3:f0:57:ba:28:8f:0a:ba:a2:b7:54:8a:
28:02:93:87:ec:42:c7:33:88:0c:c7:1a:37:ed:01:ea:a2:ea:
ea:34:6d:3d:73:c4:65:aa:56:ab:da:f6:52:d5:bd:cb:7f:4c:
4d:9b:7d:d3:92:8f:37:30:a5:ee:a7:90:43:16:18:3a:c4:37:
a1:66:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:41 2026 by rpki-client