Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: F37eHmfiHAbk3UG0gHsUQjYY3OlmQgTAtiLNpLtJ62U=
Subject key identifier: F7:22:B5:90:FA:8F:C6:D6:85:04:5F:99:B0:A9:D0:E2:AF:5A:E2:49
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 019EC25C371C2B980F45E07065E377FC1B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0F5C
Signing time: Sat 13 Jun 2026 19:01:23 +0000
Manifest this update: Sat 13 Jun 2026 19:01:23 +0000
Manifest next update: Sun 14 Jun 2026 19:01:23 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: Yioc5ReTMCxw6oRX8lWUf9A9zEeGQu942KsxYbqkt0M=)
2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:37:1c:2b:98:0f:45:e0:70:65:e3:77:fc:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jun 13 19:01:23 2026 GMT
Not After : Jun 14 19:01:23 2026 GMT
Subject: CN=f722b590fa8fc6d685045f99b0a9d0e2af5ae249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:e0:54:3a:d7:81:6e:60:8d:60:48:17:89:
46:7c:9f:f2:78:3a:1e:5a:2b:d9:9e:db:fb:67:d0:
fa:90:e0:d3:b6:e9:c4:4f:bd:88:a9:6c:46:61:42:
9a:70:75:d1:73:f6:c0:09:5d:39:71:64:69:56:52:
ce:cf:3a:3b:5d:36:c8:ea:ec:60:c4:c6:3e:83:73:
6f:00:8d:ca:1e:57:28:15:00:6c:f8:c6:19:27:67:
0a:9f:77:a5:32:dd:af:0f:18:32:ea:38:b3:26:96:
bb:81:a4:b1:43:b4:f9:b5:fe:26:2f:b3:cf:a3:4d:
17:44:cf:6d:c9:dc:d7:3c:f4:43:20:6b:06:b8:ab:
3e:af:a6:e1:84:c9:0c:f9:80:bf:89:bc:dd:0b:c4:
a1:03:ee:80:17:07:83:75:5b:1f:62:de:5f:cb:51:
7e:41:c5:68:ef:72:7a:4b:51:28:07:d0:a7:31:86:
b4:70:13:b3:cc:bb:8d:90:dc:8c:55:1c:49:f6:0f:
70:63:6b:5d:03:5c:5f:eb:d5:7a:5a:d3:6b:89:05:
8a:7c:23:08:c3:4c:f1:3d:45:2e:0a:88:be:89:62:
bd:f1:fc:7d:47:e3:e4:1b:44:5c:af:16:f3:f1:e9:
d8:08:c1:c4:d8:61:7f:ef:b9:40:ab:4f:75:dc:c8:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:B5:90:FA:8F:C6:D6:85:04:5F:99:B0:A9:D0:E2:AF:5A:E2:49
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:68:c6:a8:c9:1a:ea:13:61:da:52:a7:17:a6:10:13:83:36:
3d:f2:db:7e:66:db:69:8d:90:cf:00:b9:96:ab:d2:71:9e:39:
67:1f:e0:0e:69:5e:aa:6d:1a:f2:1c:71:52:e5:c9:2c:a7:01:
c5:9e:99:6c:1b:2f:54:ef:0b:53:35:ce:0e:b6:df:c9:29:db:
21:05:89:a9:ca:5a:b9:69:aa:7c:01:92:5b:09:78:fc:aa:14:
66:79:b8:2e:52:73:3e:8b:86:49:2f:51:c5:eb:e7:7c:77:5d:
6b:cd:84:c3:73:ef:57:8a:98:57:11:42:82:9b:dd:eb:92:e1:
16:e3:cc:f3:dd:a9:5c:2b:ed:93:cc:7b:4a:59:7f:d5:ec:0b:
c1:48:d7:bd:74:b5:cc:0c:03:18:e6:dd:a7:aa:df:c2:fd:7b:
55:07:78:ef:60:38:61:9e:b2:8c:0c:ee:85:f0:75:2c:34:c7:
78:63:bf:3f:6f:05:2d:b4:ff:fd:a1:27:62:dc:bf:7b:b0:5a:
e9:81:22:91:89:35:b9:b5:83:3f:d2:43:87:c2:2c:30:a7:cf:
4f:ca:48:38:54:d4:f0:e9:f7:0e:ee:6a:8a:ad:77:c5:7a:28:
a7:00:d8:04:59:df:9b:6f:bb:ec:2d:d7:77:4e:bf:31:85:30:
7f:09:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:15:57 2026 by rpki-client