Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: 7lIYteHol2yjo4eYti4rLYFcLDg+ZARhpZusomThStA=
Subject key identifier: 29:04:ED:F6:28:A0:F3:63:37:A9:BD:D4:76:BD:2D:04:F4:B1:7F:C6
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 019DA48A9A4486FB094F413451755B487565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 07:00:40 +0000
Manifest this update: Sun 19 Apr 2026 07:00:40 +0000
Manifest next update: Mon 20 Apr 2026 07:00:40 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 4KddgZYjUs5bDtacn7H8G3EEWTT+rxxdTVrsv13/MN4=)
2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:9a:44:86:fb:09:4f:41:34:51:75:5b:48:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Apr 19 07:00:40 2026 GMT
Not After : Apr 20 07:00:40 2026 GMT
Subject: CN=2904edf628a0f36337a9bdd476bd2d04f4b17fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:ba:42:83:2a:86:b8:f1:f7:0c:6d:8b:a6:
3e:9d:9b:7c:9e:39:44:fc:82:f5:8d:17:48:30:ff:
7e:8e:e2:47:8e:ad:76:a9:0c:92:88:d6:e2:77:77:
2a:0f:2d:f9:64:d8:ab:6e:ba:65:88:67:60:70:76:
5d:43:7f:77:b3:fc:c9:81:de:f3:d3:2f:91:45:21:
b3:fd:83:fe:64:ff:65:9c:b0:a0:7d:e4:54:5c:57:
e7:61:7c:2a:22:7a:0e:71:9d:7d:bb:55:3b:28:86:
1f:8e:5e:01:ef:f9:e2:3e:03:3e:f2:d0:80:4b:4c:
c3:cf:59:ca:91:b9:da:eb:dd:eb:b1:cd:d5:7f:b3:
f8:51:52:6f:e2:52:75:cb:01:02:f4:76:35:a1:13:
a5:41:e9:aa:5a:58:2d:7e:36:76:ba:9b:e1:1a:52:
0e:d1:98:1d:f5:0a:d6:9f:8b:54:03:fe:fb:ca:bd:
0b:87:80:61:de:13:39:4f:89:5d:90:7c:0e:1d:99:
53:80:eb:a3:0f:71:c7:1f:97:cc:23:88:82:fb:f4:
72:da:63:71:a4:8e:e7:15:6f:c5:e5:8d:e0:de:16:
55:a1:40:c2:c1:3b:93:d1:44:e4:24:e1:67:23:eb:
b2:f1:66:d0:dd:84:ef:7e:41:83:92:3e:eb:07:80:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:ED:F6:28:A0:F3:63:37:A9:BD:D4:76:BD:2D:04:F4:B1:7F:C6
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f6:6a:f9:f3:d7:4b:0b:a4:64:6c:00:4f:39:90:ba:2b:3d:
6a:d5:9d:79:e8:c6:67:eb:75:c2:f2:4e:a3:82:79:7c:57:fb:
4d:09:74:25:b7:7c:d2:8a:db:48:17:b7:b6:5c:e5:37:bb:a7:
b6:be:fa:49:a8:a2:b8:fe:27:43:6a:f9:cd:67:15:07:15:be:
b5:c3:df:19:68:e6:b4:7f:f4:6d:cc:35:37:46:e7:19:74:d9:
04:8d:42:37:95:3a:bf:12:8e:bf:ba:55:d4:80:6c:d5:9f:56:
14:a9:fe:b5:83:20:ec:3b:47:19:6e:62:c0:b4:f9:51:8d:a2:
0c:ba:92:fb:c5:21:9f:67:a2:60:c5:1e:a2:28:d4:30:b7:49:
4d:6a:ab:84:9b:e3:4c:44:d4:cf:91:fb:02:f7:43:78:50:f7:
c1:84:88:1c:f5:fd:d0:12:9d:fd:d8:34:91:c8:16:27:11:f0:
f0:41:cb:95:66:7d:61:3b:77:86:17:84:25:a7:17:12:c5:9a:
d5:d8:4d:63:4a:ec:2a:47:a5:c0:c3:16:9d:18:11:e2:83:77:
c2:e8:de:fd:55:06:a9:d5:b0:65:46:d1:e5:b0:b1:ab:aa:15:
92:be:1c:13:3c:fe:a0:e9:21:7d:9c:98:15:89:81:3e:e1:bf:
9d:b6:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:25 2026 by rpki-client