Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: bdbmfQJbAkklZAi/jpTQFxPqpw77xLGkZyuW2XPrjlY=
Subject key identifier: 90:0D:5F:28:DC:C8:64:2C:C0:75:8A:25:57:37:60:D8:BB:B8:F5:EF
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019CAD5A1EC7E0AFFC84796DFAB79458E50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0E48
Signing time: Mon 02 Mar 2026 07:01:30 +0000
Manifest this update: Mon 02 Mar 2026 07:01:30 +0000
Manifest next update: Tue 03 Mar 2026 07:01:30 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: psXIm4cCXSzMT6inJaJH1UPXiKSL0X6RWvgDYsisicw=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:1e:c7:e0:af:fc:84:79:6d:fa:b7:94:58:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Mar 2 07:01:30 2026 GMT
Not After : Mar 3 07:01:30 2026 GMT
Subject: CN=900d5f28dcc8642cc0758a25573760d8bbb8f5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:8b:f0:db:a1:5d:34:60:43:3b:a2:75:d8:
41:0e:a0:c3:9c:38:47:38:41:fc:e6:aa:fa:0e:06:
49:7d:d6:9e:b4:cd:b0:10:4c:ea:aa:4f:9f:1d:7d:
f6:f9:15:7f:e4:fa:41:8e:f2:db:25:5f:c5:2d:b8:
ad:0b:b7:ef:27:11:c2:5a:5a:52:9a:48:1e:a7:f9:
b8:06:68:79:df:3a:9b:1f:c3:af:27:87:65:47:dc:
03:1f:52:85:10:58:72:72:e6:7e:a4:98:f4:74:a5:
f2:b8:f2:49:00:80:2f:1a:6f:b3:ff:bb:44:0f:24:
e8:70:c9:9b:8d:b4:44:13:b4:fa:41:15:d3:f3:19:
ca:c5:74:f9:55:89:69:26:50:8c:7d:df:03:39:81:
97:fc:3f:d7:27:a2:2a:cf:12:75:2e:a2:44:a4:80:
74:d0:c0:95:2b:05:42:2e:70:e4:8d:41:8c:2c:bf:
c7:3a:e4:ba:88:26:f7:6c:63:ba:c3:cc:dd:ac:fe:
20:2d:85:3e:77:3e:fd:e7:a8:ae:22:d1:e3:c5:ca:
45:04:de:3a:47:51:33:bc:d1:1d:2d:97:fc:88:79:
be:65:c7:cb:b2:5a:26:03:77:15:3d:56:bb:d8:08:
5e:84:de:97:ce:8e:72:a4:1d:80:3d:00:b6:5c:49:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:5F:28:DC:C8:64:2C:C0:75:8A:25:57:37:60:D8:BB:B8:F5:EF
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dd:a3:ea:c6:49:ba:31:58:f5:75:fe:6c:0e:9c:e1:59:0f:
7f:40:12:0a:8a:bc:65:73:85:26:bd:df:b8:96:41:75:d5:de:
ec:cb:2c:c0:e1:da:a1:5f:c7:6c:c2:0d:43:79:6b:7d:45:9f:
17:94:e0:e1:52:a3:62:8f:9a:15:c1:7d:92:d7:a3:f7:17:cf:
92:3c:13:74:5e:ce:1f:54:21:33:ea:b3:e9:d5:10:e7:09:da:
21:23:6d:dd:03:b3:67:d3:ec:c8:78:66:8d:17:cb:f0:0c:99:
71:91:56:20:cd:75:95:0f:4b:1b:a4:f4:12:f4:31:8d:06:57:
19:f0:9f:e7:fe:57:dd:ba:d9:da:0b:f3:f0:a3:8c:24:63:ed:
5c:8a:b4:fe:26:72:71:eb:d1:13:87:f7:51:f4:3e:7d:2e:78:
c4:84:1b:57:55:02:a3:36:dc:dc:0d:3e:3a:ab:3a:6d:69:2c:
5f:74:d7:a0:bc:98:20:6c:86:6c:bf:4e:f2:1a:7b:84:71:58:
fb:df:40:2f:da:32:ce:65:13:7d:67:d0:5e:73:83:4c:cb:e5:
20:82:50:1e:4b:93:21:67:18:a2:51:29:60:a2:65:2f:25:09:
14:56:75:cd:90:bc:0f:47:8a:04:28:2b:05:9d:97:1e:92:7f:
8d:03:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:52 2026 by rpki-client