Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: waqVpdy4H2Om6IRU0eRvJyen8eqRI0NtWpPJhZeT2J0=
Subject key identifier: 5E:76:59:BD:A5:9A:FC:CB:47:61:89:A9:F5:16:9A:17:B0:47:C9:58
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 019CAB6AFE35405BEEF88AB48EA76505F56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:00:41 +0000
Manifest this update: Sun 01 Mar 2026 22:00:41 +0000
Manifest next update: Mon 02 Mar 2026 22:00:41 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: 2AJ0o70tjXWswV9RUYv1hDNS+iHD/3O7DIys31UWDZY=)
2: OfBW0MMBYKoL5t19m_08A88rcZg.roa (hash: u1ZLF7MAr32G/X+Xmx4V3foHqEpblcryfz+L5C312U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fe:35:40:5b:ee:f8:8a:b4:8e:a7:65:05:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Mar 1 22:00:41 2026 GMT
Not After : Mar 2 22:00:41 2026 GMT
Subject: CN=5e7659bda59afccb476189a9f5169a17b047c958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:4f:9b:18:23:ff:3d:2b:fc:f8:d3:3c:62:
fb:0b:35:bb:67:bb:4c:ea:4f:d9:a3:ad:23:6a:4c:
dd:e9:d5:db:ba:05:6d:db:e3:33:28:00:c4:ee:38:
89:0f:33:c3:22:a6:d0:07:37:01:6e:ab:a3:71:c6:
c3:7f:7c:77:d7:3f:d7:cc:74:6f:da:95:62:db:f8:
62:82:8a:eb:09:00:7c:35:e4:d5:62:a3:4f:12:86:
fa:77:f2:d3:5d:c4:e0:7e:cf:5e:82:02:34:4e:06:
f6:dd:4e:af:26:e0:9d:cb:48:fa:fd:96:f6:8c:e2:
cd:b0:e2:a0:cf:7c:13:e9:75:16:c2:2e:02:23:36:
d3:cd:71:27:d6:8e:dc:4b:c7:2a:ba:e5:a0:59:91:
b5:92:fa:d3:7e:64:a9:d0:3e:00:d1:21:93:71:89:
7e:70:d2:9b:9e:c6:3e:ae:93:88:ec:39:ce:e8:5d:
df:10:41:8d:3c:00:cb:75:e4:e8:a6:87:c6:99:de:
97:e5:8d:94:37:6c:17:7c:c9:5d:92:ee:e7:0b:ac:
3b:c8:84:26:cd:a5:d0:66:89:1d:b7:28:be:e5:5a:
5e:66:58:75:2d:d8:0f:63:e3:f3:3e:59:ee:21:fa:
85:e0:0d:ec:14:d0:5c:23:53:cc:9e:19:28:df:21:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:76:59:BD:A5:9A:FC:CB:47:61:89:A9:F5:16:9A:17:B0:47:C9:58
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:de:4f:5c:9d:2f:e6:db:97:cc:89:43:ef:1d:d6:89:15:a7:
ad:56:a2:38:4e:0f:df:73:9f:22:f3:77:22:4f:58:d4:ae:49:
e7:13:28:41:53:79:b5:69:44:c8:96:dd:42:0f:e9:11:65:dc:
da:b3:e7:c9:a1:1e:6d:07:1d:49:f4:3e:89:5a:8a:54:3f:08:
4a:7f:ac:6b:0e:5f:3d:3b:5f:f9:69:12:74:7d:1d:21:df:c8:
f5:02:7e:a1:ac:03:62:9e:f1:32:62:c0:7e:d8:5d:57:24:e8:
d1:77:ac:be:09:67:0f:af:58:cb:e8:04:12:9f:d8:92:05:7d:
f2:b5:10:47:1f:14:9b:1b:f6:8c:24:e1:ac:05:51:bc:49:24:
1d:b6:e3:93:c7:db:2e:a1:75:e2:45:92:9b:96:19:85:4b:20:
73:ac:75:f3:4d:b3:9d:67:a9:65:1e:54:3f:69:b3:c7:31:e9:
4b:ea:2c:96:21:ad:1f:bc:0a:2d:ff:0f:d5:99:45:c5:61:b2:
c7:47:b9:72:4b:d3:8e:03:b2:90:f3:7f:f1:36:d5:4d:d5:12:
61:ab:04:f6:50:02:6e:a0:dd:70:4a:f6:bf:3d:d5:f7:de:99:
7f:ef:bf:b3:e5:5e:d2:bf:06:96:52:91:c5:a0:7d:0d:ea:f5:
e6:4e:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:26 2026 by rpki-client