Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File: B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier: XTmzp2TJpIekBT4mun1OfIt3Y5deHzIpKkTnPcyH8xE=
Subject key identifier: 5F:09:AC:60:86:7D:9A:FF:EA:5B:79:DA:2E:95:3A:49:CE:A3:20:B0
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer: /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial: 019E1D90410AE0469E38DC85892FFDEFB23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: dkcu7lkpuKskfKZgqOuK8ynQNxqIHl6ZZDIpub2ECwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:41:0a:e0:46:9e:38:dc:85:89:2f:fd:ef:b2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=5f09ac60867d9affea5b79da2e953a49cea320b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:b1:57:18:f3:1c:aa:77:0e:fa:cc:4e:6a:
44:72:ee:22:d7:91:55:24:f4:c0:e2:fe:33:dd:61:
ae:8d:da:db:c3:91:6f:52:c1:59:5a:36:d8:cb:33:
97:2e:b0:95:3e:97:b9:a3:f8:eb:42:19:5a:6d:64:
5b:86:07:11:67:4d:f7:f4:8d:96:cc:ae:df:09:fd:
bc:e7:79:44:6d:f6:cb:7b:c7:cd:f9:b8:36:1a:b1:
ad:d6:c9:a1:fc:a9:f5:82:c3:85:5e:54:8e:c1:06:
3a:b3:1a:1a:54:6b:15:ab:bd:c3:66:e7:ff:99:dd:
78:ae:00:7d:c7:69:1b:06:1e:1b:fc:81:53:fe:2a:
ce:3e:4a:3a:41:63:c9:dc:27:db:68:46:c6:e3:a3:
36:c0:2e:7f:f4:7d:41:0e:24:7e:ac:0c:84:82:8f:
39:e0:70:aa:0f:37:1c:de:c2:43:7d:82:d9:7e:91:
9f:99:be:ae:e3:0f:8a:cc:e5:2d:9c:d3:b3:89:48:
ac:5b:94:c0:1e:9a:e7:3b:fb:c8:0d:dd:51:42:05:
71:20:7c:26:0e:d4:ab:47:61:a4:f6:1c:55:27:f9:
43:a8:be:d9:07:1d:61:24:14:6e:2d:a2:9d:15:3a:
10:37:ee:ac:63:f9:fb:8b:04:c6:a2:3c:c2:f2:c3:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:AC:60:86:7D:9A:FF:EA:5B:79:DA:2E:95:3A:49:CE:A3:20:B0
X509v3 Authority Key Identifier:
keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:da:d1:ba:1d:9d:98:25:5d:4c:58:1a:c4:46:97:06:b4:
25:65:f7:2c:43:9b:59:56:a3:ed:aa:68:d6:d6:3d:49:5e:37:
a4:1b:c9:83:0a:05:3d:99:5b:2d:fe:4c:16:f0:8a:40:a4:bb:
23:47:48:b7:53:f9:7e:78:89:a1:14:11:4d:34:c2:d7:97:a7:
98:6e:35:41:4f:7f:74:99:ba:15:e5:6e:04:8d:0d:e5:b1:46:
b8:e2:7b:6c:0d:68:16:66:f1:08:d6:74:26:87:d1:5b:b7:98:
1a:3c:04:21:30:a7:5d:89:ce:b4:9d:0c:98:2a:11:99:95:18:
b8:53:d4:e3:16:f4:e2:46:7c:b7:30:51:45:0b:f8:22:63:92:
64:bf:cf:58:1e:8c:3c:93:cc:37:74:ae:a5:57:2e:d8:f3:e6:
82:8b:5d:f1:96:f6:8c:bb:ee:ea:74:c4:58:a9:e3:10:68:c2:
ec:a0:61:ec:3e:7c:80:a9:71:06:56:b9:34:51:01:80:a0:f8:
a7:29:5f:6d:08:4f:ee:5c:8f:bc:1a:4c:0b:72:b6:81:6a:28:
21:49:33:3d:96:40:ed:db:15:f5:2e:f5:da:d0:5c:00:85:a0:
f1:bd:0a:01:7a:68:cb:a3:a7:79:a9:93:40:03:ea:98:f4:ac:
5d:7f:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:19 2026 by rpki-client