Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: eup50Gcl+bNLSYAQIsmV2ogvA/PjBXUp8ev5oMCiWZ8=
Subject key identifier: 63:3A:A1:06:56:76:B4:EF:B7:ED:3F:B3:9C:05:F5:1B:BC:09:C9:9A
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019D9CD0CDF7D5097292B0D3182987FD08F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0EC4
Signing time: Fri 17 Apr 2026 19:00:23 +0000
Manifest this update: Fri 17 Apr 2026 19:00:23 +0000
Manifest next update: Sat 18 Apr 2026 19:00:23 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: 10ark1fY9WNLb5Vd2SFTfOuOBKIHDRs63FRoMMqDakU=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d0:cd:f7:d5:09:72:92:b0:d3:18:29:87:fd:08:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Apr 17 19:00:23 2026 GMT
Not After : Apr 18 19:00:23 2026 GMT
Subject: CN=633aa1065676b4efb7ed3fb39c05f51bbc09c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:cb:84:2c:a3:c4:ef:85:e2:7b:80:76:66:
ed:ed:aa:f5:02:f0:ad:53:4d:a2:d9:6c:40:d4:55:
57:22:4f:a3:52:37:5c:1e:90:66:63:f2:79:f4:f4:
fe:c5:6a:d3:0b:27:d3:7c:e6:78:9d:a3:5a:ef:f6:
48:ca:91:ee:9a:35:5d:bf:45:a5:71:73:5c:6a:00:
7e:9b:8f:c3:c3:87:46:4f:9f:e8:07:e4:e8:98:00:
be:9b:ae:53:bc:e4:af:24:86:14:cd:d3:dd:36:28:
92:6a:41:34:ea:64:a5:cf:26:46:62:b1:7f:08:5f:
16:91:53:e0:3e:de:51:ef:2b:59:1b:96:4e:ad:03:
cb:a3:cd:ac:24:ea:25:a2:99:ee:8c:d7:a7:1e:fb:
e1:6a:ed:39:08:d0:22:7a:2a:52:0e:e1:d3:26:4d:
42:8d:e1:27:82:0f:2c:73:51:c3:ce:ab:fc:e5:f8:
29:27:bc:a4:06:e5:b3:66:39:17:e3:99:79:78:d5:
50:5b:94:79:02:60:38:8b:6b:4d:a1:48:da:28:3b:
bb:7b:67:ac:f5:1d:5e:8e:9e:78:f4:1c:fa:f1:81:
fb:30:48:ca:0a:71:46:27:ed:57:a8:a7:cf:11:f6:
98:15:b9:df:17:7e:0d:be:72:74:37:9c:9d:5f:94:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:A1:06:56:76:B4:EF:B7:ED:3F:B3:9C:05:F5:1B:BC:09:C9:9A
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c3:e0:51:3b:38:e9:9e:96:b9:0f:16:ec:30:f8:44:34:70:
4b:c8:22:2c:a2:d6:39:31:8d:c5:12:b5:51:99:d8:df:f8:28:
31:0d:14:7f:3d:71:ce:3e:83:3a:c9:d6:27:d3:c8:58:ae:10:
7d:3a:05:5c:50:09:69:64:18:a3:7a:ce:10:3a:20:46:45:a0:
e5:74:17:0b:5f:b0:68:c3:16:6b:cc:46:93:ab:06:3c:80:2a:
c9:4b:1b:b6:72:f0:ca:e1:7d:7f:36:43:fa:7c:50:75:6b:4c:
d4:f3:88:4c:60:29:d6:8d:ef:92:6f:90:e1:81:ab:2c:86:71:
f3:24:ec:e5:db:d6:78:1c:05:02:34:26:bc:73:db:4a:e3:c8:
b5:40:7b:4e:7d:5f:57:ac:66:2c:05:a1:3d:0c:ec:d8:91:0c:
74:c7:b4:4b:79:99:cb:4c:2e:15:12:b6:c7:6f:34:d2:49:c7:
8c:43:1a:83:ad:79:ff:1f:03:0c:1a:20:63:7b:6e:ca:28:5e:
1f:5d:b6:b6:b8:be:37:bd:8c:a4:ca:e2:6f:07:56:00:bb:28:
31:6e:a3:ef:e5:6e:6a:78:76:b7:3f:76:4d:cf:37:da:19:eb:
ef:2f:14:92:c7:1e:5d:13:df:42:ce:af:ee:f6:ce:f1:96:3c:
4e:56:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:07:02 2026 by rpki-client