Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: PiqSyV/XtpCTrCJXFSZn/hdeIemGLgR5JGp5+uoa8Vk=
Subject key identifier: 61:E7:8F:4D:84:D1:91:FC:46:17:22:41:B7:AC:A3:28:1F:32:9D:CC
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019D99D0AAE3C67090545DD7B27ADE91A6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0A81
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: K7bRz3z9d27JzuEXlo0D2VlLtEqXS4sMvc2VpLYt0Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:aa:e3:c6:70:90:54:5d:d7:b2:7a:de:91:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=61e78f4d84d191fc46172241b7aca3281f329dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:45:d5:f2:76:e7:ce:3e:5b:8b:d6:59:70:
c0:b2:ae:53:67:97:55:5d:44:1d:de:dc:57:49:04:
f4:22:d6:41:85:df:a8:a0:1a:60:6d:a8:fd:0a:3a:
98:86:e6:bf:ca:0c:ad:02:04:61:be:ab:cd:2a:1d:
e0:bc:6b:8a:01:29:8f:14:44:26:20:4a:61:9e:0b:
63:ce:6e:a3:7d:b4:6e:d8:1f:35:82:d3:b0:0f:9d:
96:30:18:57:3c:f0:35:75:f1:e6:5d:05:32:36:b4:
ae:6e:6e:f1:9b:2f:94:25:4e:7c:bd:7b:2b:66:61:
97:5c:f3:f7:5a:12:bb:8f:e0:c4:bd:bc:90:5c:1d:
05:27:ce:9e:ba:9b:83:8f:87:de:f9:04:3c:73:03:
3c:63:cd:86:d4:d7:ab:5d:a6:48:42:6b:75:5a:ce:
bd:6b:8e:65:5c:40:96:bf:ba:df:14:0d:b3:89:18:
53:60:cc:c5:3a:5b:f3:de:7d:1c:58:e1:aa:c5:65:
ee:75:fb:54:50:61:4d:35:72:2a:a2:51:97:e5:48:
5a:ce:9f:cd:f2:fa:ee:8b:68:a2:cd:4e:bf:30:6a:
2c:c0:0f:bc:9c:07:28:d6:97:37:16:7f:cf:33:2f:
5b:ac:10:b0:50:2c:2b:e3:26:ca:29:c7:7a:aa:67:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:8F:4D:84:D1:91:FC:46:17:22:41:B7:AC:A3:28:1F:32:9D:CC
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:dc:70:04:9c:54:41:a5:16:ed:c4:ee:c8:62:3b:ea:84:
c1:41:75:60:c2:24:03:83:57:b1:02:65:ae:7b:7e:75:79:ed:
ab:13:6c:ba:5c:57:1f:e8:c6:62:08:46:83:da:a5:38:8e:62:
33:0c:b8:92:e9:c2:d8:cf:b9:94:6d:95:9a:a9:cd:38:ad:bc:
1c:ae:69:c7:a4:ae:0d:2c:db:b2:d6:e7:34:69:d4:dd:40:53:
02:b2:50:00:8d:15:1a:3b:8e:c5:4c:9a:a1:6a:78:91:bc:3d:
5d:dc:ec:d4:f8:e3:1f:9e:03:a0:ec:a9:05:92:a2:52:93:60:
d9:a9:7a:2f:81:dd:0b:f9:65:e7:db:85:1d:53:9b:c5:98:c8:
59:91:66:d0:89:92:89:da:28:7a:40:f7:0d:70:c6:20:de:40:
17:40:60:03:0b:05:e1:f6:78:f1:1c:50:a5:96:f7:88:1e:55:
aa:46:60:46:98:58:03:3a:bf:f2:6d:b7:d2:5b:16:2c:e6:70:
b9:e7:17:d3:f1:78:6d:91:a5:53:9d:64:b0:35:a1:97:7e:3d:
bd:f8:0b:46:2d:ff:cb:7a:f5:b8:43:7e:e8:2b:8f:e9:23:83:
82:56:cc:5c:f5:90:62:10:af:00:a2:ef:62:c9:42:20:5b:b4:
60:67:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:21 2026 by rpki-client