Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: riJTkPdz0QUXg7mXVhf9yLO3X6if4vhmqAhU+ZLLyzw=
Subject key identifier: 39:BE:62:8A:D1:18:36:AC:40:DD:75:FB:5F:C5:79:34:2D:37:86:A6
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 01A0C4E9E6778DA81774F11F940D05921FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 0C25
Signing time: Mon 21 Sep 2026 17:00:58 +0000
Manifest this update: Mon 21 Sep 2026 17:00:58 +0000
Manifest next update: Tue 22 Sep 2026 17:00:58 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: +zkOk+m4ZtG1odsMyZCcpSPKJvDhc85LlTCMWGmFWHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:e6:77:8d:a8:17:74:f1:1f:94:0d:05:92:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Sep 21 17:00:58 2026 GMT
Not After : Sep 22 17:00:58 2026 GMT
Subject: CN=39be628ad11836ac40dd75fb5fc579342d3786a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:ee:50:aa:e3:91:d6:e5:8c:3d:c6:19:7a:
75:fb:38:68:d6:43:de:a7:1f:84:d0:67:48:d3:74:
44:73:ba:a2:ff:e8:06:f8:91:d6:d1:c8:9c:d2:53:
62:7f:ee:76:a5:32:b4:0a:29:a5:49:cd:78:77:b4:
2c:3a:44:04:42:80:a7:3b:60:3d:50:b0:5f:5b:43:
0c:ec:a3:7e:de:a3:0c:bc:38:65:4c:e4:97:06:b5:
c7:72:6a:d3:59:95:31:2b:8f:58:f9:0e:71:5e:c1:
fc:7e:25:c2:8c:96:e1:bb:06:9c:05:19:d7:ff:5c:
09:7b:71:1c:da:2f:18:36:1d:86:31:d3:e0:da:87:
f6:16:fb:d1:2a:a3:cb:3c:f8:21:18:70:f2:5c:f5:
50:94:7c:f3:73:13:44:69:8a:13:be:1e:04:fa:5c:
e1:34:93:17:94:a1:d8:07:49:df:9c:3f:23:a9:97:
83:5b:1e:d8:e9:46:6d:26:70:8e:e6:42:f1:a2:4b:
88:cd:f5:66:86:12:ea:60:9f:2b:7a:b0:66:b5:d6:
1a:3e:c5:20:39:dd:71:fd:5a:77:04:7c:7d:97:72:
39:b3:33:31:60:61:dd:de:ed:f3:aa:7f:93:d0:69:
3c:23:81:f7:e4:f1:ba:42:8d:c4:e2:d1:ba:06:05:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:62:8A:D1:18:36:AC:40:DD:75:FB:5F:C5:79:34:2D:37:86:A6
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9a:3d:d5:e0:d4:d8:a0:34:93:2d:dd:63:d6:47:db:5f:31:
70:71:85:d1:70:05:f9:d3:c7:6a:d7:fa:66:03:47:92:08:e2:
d5:e9:f0:69:a7:c4:3f:9e:84:31:7e:77:72:64:70:91:75:76:
e7:ca:55:46:74:78:3e:a8:21:33:4a:36:3e:37:44:a1:66:47:
16:cd:99:cd:dd:9a:b5:e5:50:d6:7d:88:1a:cb:c7:fa:0d:a8:
15:84:e9:dd:bc:23:56:c3:b2:b8:4e:f2:11:08:30:56:0d:b2:
36:bd:04:5f:90:a9:c6:72:c9:5d:8c:f7:30:53:66:cc:04:2f:
b6:16:82:79:87:48:03:7c:52:01:11:f4:3a:42:c9:6b:dd:d9:
f1:d0:f7:f1:5e:3d:8d:df:70:25:12:7e:91:38:d3:42:25:70:
67:f7:0c:3e:36:3b:e0:14:7c:09:91:91:a9:ae:d7:48:33:0f:
3e:3e:ee:3c:65:42:8a:60:c7:47:bd:52:26:83:09:be:60:05:
54:85:b6:f7:64:5a:29:fa:a7:e7:77:e9:b0:66:1a:93:bc:98:
8b:c4:ec:c6:fc:9d:3d:34:73:36:c1:c0:29:73:3d:42:35:bd:
39:70:5b:26:9a:42:3c:41:f5:7c:2b:cd:57:f9:64:b3:99:da:
09:e7:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:16:46 2026 by rpki-client