Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
File: BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft (raw, json)
Hash identifier: ms7qjjzVGOqWzI0SzueUoN17vQjE9hq5QBQq1Ihq+ik=
Subject key identifier: 39:0B:21:E9:19:D0:59:E0:C5:21:D9:9D:37:31:B0:82:97:F5:EE:1B
Authority key identifier: BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC
Certificate issuer: /CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
Certificate serial: 7D29117CDC8A409141F1E2202B244695E5E5E9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
Manifest number: 32
Signing time: Sun 15 Mar 2026 16:20:22 +0000
Manifest this update: Sun 15 Mar 2026 16:15:22 +0000
Manifest next update: Mon 16 Mar 2026 17:13:22 +0000
Files and hashes: 1: AS210632.asa (hash: sN0pCNAK88bOqEZOue60hphAl0l1zoCw8mApbiN89qs=)
2: BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl (hash: sQzHrPj4tqFSe3oJB3YE26ZJ0P2ZUXMZTtTBfHL7kbc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 17:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:29:11:7c:dc:8a:40:91:41:f1:e2:20:2b:24:46:95:e5:e5:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5e3ed271c0b05f61bc3a7bc606e2dbc0ed86ac
Validity
Not Before: Mar 15 16:15:22 2026 GMT
Not After : Mar 16 17:13:22 2026 GMT
Subject: CN=390B21E919D059E0C521D99D3731B08297F5EE1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:85:6a:12:2a:2b:bc:02:68:32:92:9c:5f:
47:4d:f0:2e:74:72:bf:e6:f3:df:bd:1a:46:fb:18:
af:3c:3e:20:59:5e:7c:08:be:ac:1a:63:6c:95:b6:
ab:f7:46:9b:82:3c:3a:47:67:58:6e:49:97:ca:9a:
57:9e:60:20:26:84:da:94:d5:c0:6e:74:cf:24:23:
ce:8d:d2:73:ce:5c:b6:6c:1a:20:2a:5d:02:d8:bc:
ff:f4:32:91:2f:e1:a8:84:38:40:06:f3:fb:37:cf:
36:11:82:6c:f4:17:b2:11:70:8d:2e:af:6f:0b:2f:
90:aa:dc:9d:31:d5:cb:b0:20:71:b0:d4:42:65:51:
4f:07:c9:50:0e:b3:87:0a:3a:d2:3e:b1:de:8d:ed:
4a:98:76:f7:a3:30:00:2c:29:d8:92:ff:6a:59:e9:
78:2f:bd:5e:d8:c6:54:fd:60:b5:23:bf:a7:42:4d:
b1:3c:c4:12:0b:ee:5c:8b:f8:c7:b6:27:2b:0e:af:
59:99:28:38:16:91:64:0e:b9:c7:99:18:00:a0:f4:
5c:07:dc:08:de:1e:3f:35:87:ca:eb:79:6f:11:bd:
d4:ba:a1:5e:16:ab:2d:8e:b7:f4:d7:f2:e7:1d:8e:
2c:2a:67:02:c5:51:ee:d8:3c:7f:9f:f8:27:09:95:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:21:E9:19:D0:59:E0:C5:21:D9:9D:37:31:B0:82:97:F5:EE:1B
X509v3 Authority Key Identifier:
keyid:BE:5E:3E:D2:71:C0:B0:5F:61:BC:3A:7B:C6:06:E2:DB:C0:ED:86:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl4-0nHAsF9hvDp7xgbi28Dthqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/0/BE5E3ED271C0B05F61BC3A7BC606E2DBC0ED86AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:76:ca:4b:c3:d0:41:57:95:d6:16:47:82:4c:6b:2a:91:
bd:39:2f:95:c3:c8:5b:a2:01:19:54:c9:6a:c4:8b:fd:62:47:
22:9c:2e:c2:34:75:60:31:7f:46:1d:8a:f7:ae:95:53:08:ab:
e7:57:1e:4d:16:5f:c9:58:3d:2c:de:78:bf:90:5e:af:4d:8a:
f9:ee:7f:83:b4:31:26:31:3f:de:85:dd:1c:83:f7:02:42:e6:
ed:9c:eb:30:d2:72:a2:52:b8:bd:ef:9d:ad:c9:55:ac:c4:50:
ad:6d:5d:f4:27:96:cc:8f:e6:7e:44:5b:1e:57:d4:de:db:e8:
ef:d7:7d:35:b0:84:9c:c6:ab:d2:0e:16:a4:c0:0a:c2:8b:4a:
cc:09:c3:a4:0e:b0:b7:41:08:b5:1a:d2:d8:ef:a9:25:13:4f:
f3:82:f7:c4:50:cf:0e:15:ee:2c:b9:c8:02:ed:ee:3f:36:9e:
43:f8:9f:7a:3a:de:e4:26:61:e5:07:50:ba:5b:5e:9a:a7:28:
9c:6a:f3:de:8a:cb:87:42:56:3e:7a:b0:87:1f:7a:5e:85:56:
6b:c7:b4:e0:e6:bc:d6:32:e9:4a:b7:00:f1:af:1f:01:ba:12:
a0:9a:b3:ac:63:0c:53:ff:25:7b:8b:14:3b:ae:66:1a:9f:65:
88:39:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:16:36 2026 by rpki-client