
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: JKA98U0LquobXD0LdFB/Yr/r/+f1DIPqPLmruWLJFUU=
Subject key identifier: 93:2B:63:6A:31:29:A1:E5:21:FE:E1:DB:22:43:7B:BB:1F:D1:36:2F
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 019CAC4721002CDFDB84A983E86B396DA619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0A06
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: fhsyK+tyD9+nkMVbNpghhCT12bjJuOPPLJRmXpoqN/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:21:00:2c:df:db:84:a9:83:e8:6b:39:6d:a6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=932b636a3129a1e521fee1db22437bbb1fd1362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:31:aa:ec:db:a7:d4:30:ba:19:f6:88:dd:
e4:0d:30:2a:0b:81:23:bb:d4:72:96:5c:1f:f5:83:
4c:64:22:c8:99:d4:b9:44:bc:40:f2:8b:b7:44:f9:
de:17:9d:76:b6:51:75:5f:2f:10:81:0c:b9:17:de:
3b:24:d2:8e:a7:76:5b:c0:20:3e:11:02:72:e7:31:
6d:9d:9c:45:a9:17:2c:bc:e3:e6:f4:8a:21:03:ea:
5d:05:21:71:25:9b:f9:bf:dd:1b:98:46:8d:83:e8:
66:4f:cb:e1:71:89:0b:fc:b6:00:b5:41:bc:91:54:
27:ed:8b:54:28:a8:14:42:25:60:7f:32:36:21:88:
57:16:e8:d8:26:ab:37:a8:69:5d:c1:35:b3:92:5a:
15:e3:22:c4:b8:e1:d5:05:c3:39:16:12:44:24:24:
4b:78:91:4d:ba:34:ec:c8:3b:90:b4:07:26:dc:17:
76:99:4d:62:e3:70:3e:36:17:25:9e:dc:56:06:28:
6f:2a:8c:67:27:c2:5e:06:cf:19:ee:57:43:57:60:
56:08:0f:25:7a:fb:31:64:ff:22:10:18:cc:1c:a7:
57:2f:a6:e8:82:28:48:16:0e:3c:e6:47:79:9e:09:
43:c1:15:fc:2f:86:58:80:aa:c5:91:33:b5:2e:05:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:63:6A:31:29:A1:E5:21:FE:E1:DB:22:43:7B:BB:1F:D1:36:2F
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:88:10:f5:9d:b4:91:86:e7:b9:26:42:6e:79:2c:d8:6c:
f8:f2:fd:8e:a9:8d:42:14:c3:43:7c:13:ba:ab:6a:21:2c:a6:
5e:b5:5a:e6:92:25:0b:bf:7c:d7:32:83:a0:5f:21:3d:33:c1:
fa:67:b0:9e:ec:49:9f:e9:c7:2c:c1:48:82:22:5a:e5:f6:71:
4f:cc:16:06:68:4e:d0:f0:08:0c:50:e1:53:1c:85:3e:53:54:
d0:12:78:29:59:8e:21:67:a9:2e:f1:17:ed:26:c9:c8:bb:07:
e5:63:87:3b:ed:05:55:c6:f5:f0:43:d4:e4:36:f8:42:ad:29:
59:e8:7f:87:17:09:a7:3b:8d:1e:6a:f9:a2:b9:a2:65:74:83:
9e:35:4e:6d:aa:1e:b3:29:db:29:92:c2:39:e3:51:c2:af:3c:
d6:2c:53:a0:27:fc:bf:e4:da:34:62:0f:8a:88:f5:c1:61:d5:
d6:79:13:ee:16:7f:81:b7:a5:4a:55:20:c3:32:7a:56:d1:75:
89:1c:fd:68:0b:f3:d7:26:71:3d:a4:f5:50:ef:d8:a2:55:03:
5c:64:4e:78:af:e4:86:5f:82:ce:3c:45:a6:eb:80:73:68:f3:
3c:ce:e5:52:c9:51:ad:5a:19:3a:0b:63:45:34:a9:e2:8b:4a:
7c:68:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:34 2026 by rpki-client