
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: 2xDCTSJ8wiNV46ujUZ0ZUBsGKHPS89iP1FkkgwypzOs=
Subject key identifier: A0:85:5D:66:6D:2F:2C:D3:D7:F3:32:1F:FD:77:55:5A:F6:E0:AC:41
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 01A13E94A680E26A346EE13432BDC995D5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0C64
Signing time: Thu 15 Oct 2026 08:01:31 +0000
Manifest this update: Thu 15 Oct 2026 08:01:31 +0000
Manifest next update: Fri 16 Oct 2026 08:01:31 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: kWJukGika3Iiqb1i9YNMtj9riIx5UoW+vsKz5l6LYM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:a6:80:e2:6a:34:6e:e1:34:32:bd:c9:95:d5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Oct 15 08:01:31 2026 GMT
Not After : Oct 16 08:01:31 2026 GMT
Subject: CN=a0855d666d2f2cd3d7f3321ffd77555af6e0ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:55:6f:08:00:62:eb:b1:d3:96:f8:bf:e0:
5c:55:48:81:57:e9:92:de:14:0e:b8:20:67:37:dd:
c5:0e:59:1b:4d:38:6e:7a:e3:91:a7:88:cd:c2:ca:
7f:97:4e:be:0f:07:af:38:78:6a:39:e0:22:ba:e8:
25:29:ea:e0:90:7d:3a:ce:87:58:4c:f9:99:a6:c8:
a5:e7:cd:a9:3d:4f:96:72:ae:94:3a:ca:dc:9e:03:
37:29:dd:2f:f4:54:dd:c9:bb:7f:51:f1:cc:a8:66:
f4:aa:0a:64:6c:e6:40:ac:be:d8:5a:c7:db:ef:95:
53:21:01:24:b7:d8:a3:c4:37:96:15:14:d8:65:01:
20:92:b1:3d:66:70:04:19:c0:9b:dc:52:8f:c3:1e:
07:17:55:16:fa:56:e3:25:eb:06:28:7f:20:88:00:
95:05:5e:eb:a4:11:b5:67:99:99:68:94:86:27:c6:
b3:17:e8:bd:a6:7d:f5:2b:fb:c8:ee:75:21:a6:ef:
0a:14:9e:cd:28:41:3e:48:2f:7f:d0:51:e5:82:49:
56:2e:8b:93:10:74:63:34:62:93:f0:e3:22:7c:73:
90:eb:33:cc:aa:54:2f:e3:47:37:b8:2c:2d:31:98:
03:14:5b:b0:32:e7:4f:07:35:16:19:9c:b2:bc:02:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:5D:66:6D:2F:2C:D3:D7:F3:32:1F:FD:77:55:5A:F6:E0:AC:41
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:15:a5:1e:db:a5:60:09:26:06:47:0e:5d:1a:74:c9:2b:
4c:41:b7:2a:6c:4a:5a:3d:f5:a2:ef:74:2f:25:60:c8:72:7a:
68:5b:10:8f:33:2f:27:6e:28:d4:95:67:0e:4f:64:29:74:c8:
5f:75:fd:6c:bc:3e:62:fd:b8:57:2f:15:da:9d:72:0d:f1:51:
db:82:f2:9a:9e:5d:f7:42:45:f5:4d:a4:24:63:3f:93:8b:a9:
08:8e:c6:9e:22:04:3f:dd:d6:06:06:9b:20:01:59:7c:72:5b:
01:8f:63:ce:57:73:92:66:19:c2:89:c5:cc:34:e3:a5:36:60:
6f:0c:79:3b:15:2b:4a:16:b7:d1:c3:c2:3f:dd:b8:84:ea:aa:
90:ec:20:d8:35:56:fe:12:77:e2:1f:5d:72:e7:f4:fb:bf:ed:
2c:38:19:fc:40:aa:76:4e:bb:97:af:44:65:9c:e3:b5:af:3d:
ba:42:fa:b9:b8:c6:00:cc:83:24:cb:e8:c8:5e:f5:40:5b:80:
2d:10:ff:d4:b7:51:47:0e:ed:f6:ee:a1:ab:8b:53:c0:eb:07:
29:81:6a:15:ad:01:13:e6:9e:6a:85:fb:c9:11:d9:b4:41:63:
d8:68:76:f5:67:a9:a0:0f:75:f4:83:00:fb:46:46:9f:52:f3:
f4:d9:da:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lKaA4mo0buE0Mr3JldWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGZiZjdjN2JlZWVmYjE1MjVhMjYxNGQ5Y2Q2M2E0MjY5
ZjlmNGEwHhcNMjYxMDE1MDgwMTMxWhcNMjYxMDE2MDgwMTMxWjAzMTEwLwYDVQQD
EyhhMDg1NWQ2NjZkMmYyY2QzZDdmMzMyMWZmZDc3NTU1YWY2ZTBhYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4tVbwgAYuux05b4v+BcVUiBV+mS
3hQOuCBnN93FDlkbTThueuORp4jNwsp/l06+DwevOHhqOeAiuuglKergkH06zodY
TPmZpsil582pPU+Wcq6UOsrcngM3Kd0v9FTdybt/UfHMqGb0qgpkbOZArL7YWsfb
75VTIQEkt9ijxDeWFRTYZQEgkrE9ZnAEGcCb3FKPwx4HF1UW+lbjJesGKH8giACV
BV7rpBG1Z5mZaJSGJ8azF+i9pn31K/vI7nUhpu8KFJ7NKEE+SC9/0FHlgklWLouT
EHRjNGKT8OMifHOQ6zPMqlQv40c3uCwtMZgDFFuwMudPBzUWGZyyvAJpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCFXWZtLyzT1/MyH/13VVr24KxBMB8GA1UdIwQY
MBaAFARPv3x77u+xUlomFNnNY6Qmn59KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYt
NTEzNjI2OTVkMDg1LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iMjNhOWItNWNkZC00YzQxLWJmMjYtNTEzNjI2OTVkMDg1
LzEvQkUtX2ZIdnU3N0ZTV2lZVTJjMWpwQ2FmbjBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjIVpR7b
pWAJJgZHDl0adMkrTEG3KmxKWj31ou90LyVgyHJ6aFsQjzMvJ24o1JVnDk9kKXTI
X3X9bLw+Yv24Vy8V2p1yDfFR24Lymp5d90JF9U2kJGM/k4upCI7GniIEP93WBgab
IAFZfHJbAY9jzldzkmYZwonFzDTjpTZgbwx5OxUrSha30cPCP924hOqqkOwg2DVW
/hJ34h9dcuf0+7/tLDgZ/ECqdk67l69EZZzjta89ukL6ubjGAMyDJMvoyF71QFuA
LRD/1LdRRw7t9u6hq4tTwOsHKYFqFa0BE+aeaoX7yRHZtEFj2Gh29WepoA919IMA
+0ZGn1Lz9Nna0Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client