Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: Oix6az6KeKLJVN0ZN3KZHZ7yp0N052OoIOLODvbviD4=
Subject key identifier: 7A:48:BA:4C:B2:82:06:17:79:CC:97:BE:A4:D6:12:71:8D:FB:CF:1B
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 01A0CBC7181DD607958918EDB869E1E44F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 01:00:17 +0000
Manifest this update: Wed 23 Sep 2026 01:00:17 +0000
Manifest next update: Thu 24 Sep 2026 01:00:17 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: TvswIe4yqS1xV+Z11FpovuBpBVszZJzzM8+d/zVIZK0=)
2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:18:1d:d6:07:95:89:18:ed:b8:69:e1:e4:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Sep 23 01:00:17 2026 GMT
Not After : Sep 24 01:00:17 2026 GMT
Subject: CN=7a48ba4cb282061779cc97bea4d612718dfbcf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:0b:58:a1:e6:34:f1:95:28:fe:6b:ba:44:
83:1b:57:92:71:48:6f:17:6c:26:b8:97:a9:9c:ca:
f0:aa:03:9e:e8:5f:a9:0b:3e:f1:e5:cc:fd:da:6d:
ee:dc:54:bb:9f:59:d9:9d:15:3d:75:02:7a:bc:4c:
db:84:98:db:55:06:c1:ee:c0:81:5f:af:5c:15:49:
83:07:a1:60:e2:64:f5:8a:6e:e0:83:ad:7f:a4:67:
85:14:25:97:14:15:d1:d4:e1:8d:74:e5:e1:48:03:
95:11:0f:51:87:be:51:58:80:99:1e:82:f6:d2:25:
98:03:1b:a1:58:11:dc:95:85:f0:8c:51:c8:45:8e:
8a:52:e6:70:72:0a:6d:38:8b:12:f3:b6:1c:9f:96:
b6:19:73:68:30:ca:c8:4e:64:00:e2:8b:37:1c:d7:
40:19:25:a2:10:79:0d:cf:aa:b6:ed:0b:01:4b:36:
f2:ff:a2:51:66:78:f8:05:cd:d1:be:23:79:77:ab:
ce:a8:ec:71:03:fd:13:1b:8b:26:f5:ae:1e:a4:4e:
76:55:c2:2e:14:20:78:88:bb:d1:40:f0:71:3e:6a:
59:34:4a:7d:26:8d:7c:1c:df:5c:13:c0:f1:0d:a9:
a6:9e:2e:b6:50:b2:30:5b:d4:99:cb:e1:74:f6:82:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:48:BA:4C:B2:82:06:17:79:CC:97:BE:A4:D6:12:71:8D:FB:CF:1B
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:e2:d8:f3:78:f6:72:52:75:6a:ca:3e:80:5c:91:9d:18:
55:c2:b1:3e:98:98:51:11:7d:ca:65:b9:fd:da:95:2f:2f:00:
e7:ba:27:0f:f9:f7:f4:4a:85:d5:02:58:0d:bb:be:72:80:81:
74:16:c2:36:a2:5a:40:89:18:f2:62:6f:27:5c:7f:3e:e0:04:
ae:8a:3a:bc:64:1a:e6:37:93:d2:80:d7:74:3d:df:50:09:11:
2b:b6:b7:71:c6:bc:91:e4:02:c2:ed:d8:93:92:c1:d0:b3:c5:
58:1b:d8:f6:c2:6f:b2:53:61:39:32:a1:a2:c5:cc:aa:8e:64:
ea:90:31:5e:01:27:cf:fa:31:61:bd:f3:6d:29:ae:14:75:34:
0d:1d:1e:29:4b:f0:b7:8a:5f:d2:2d:e3:0b:3f:42:22:fe:f0:
fe:b9:ba:12:59:8e:34:ba:a8:ca:ef:f4:4a:e7:7a:7c:f9:19:
6b:55:58:cb:c5:02:fc:1f:14:73:eb:eb:01:cb:85:3e:e1:e4:
79:57:7b:4c:a8:78:17:d7:ff:a0:b5:7f:e3:e9:30:9d:d8:ec:
4e:c5:51:50:e9:5f:58:55:f2:8c:c5:0c:f8:3c:07:36:9f:d0:
3d:6e:65:91:45:58:04:ce:7a:29:87:9a:84:0c:b4:47:03:6b:
cd:fa:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:13:50 2026 by rpki-client