Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: y8uZC08GGkgIwMwZSwKR+UwuE8erlWVcF+MuvzIuiOs=
Subject key identifier: A6:05:59:46:D8:97:58:9F:FE:E0:12:29:28:20:88:2F:70:F0:CB:99
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019F8FEC9197F5723874CB7A8C3E83B0F9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1954
Signing time: Thu 23 Jul 2026 17:01:13 +0000
Manifest this update: Thu 23 Jul 2026 17:01:13 +0000
Manifest next update: Fri 24 Jul 2026 17:01:13 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: iTD56twnS29Z3m7pRWp+g7egWKISX34UqVaCaVi0DNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:91:97:f5:72:38:74:cb:7a:8c:3e:83:b0:f9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jul 23 17:01:13 2026 GMT
Not After : Jul 24 17:01:13 2026 GMT
Subject: CN=a6055946d897589ffee012292820882f70f0cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:3b:a4:ac:b8:9b:69:a6:31:19:61:f6:af:
c3:26:43:4c:54:18:e2:4f:6b:8d:23:54:be:75:c7:
73:1c:8b:fe:78:32:9d:b7:ee:1a:7f:22:09:cd:78:
c2:43:3c:b5:64:c2:13:32:7c:38:f6:d0:c1:df:61:
0d:4d:39:77:31:77:47:24:f3:ef:5b:f3:d0:b9:8a:
20:d3:47:fa:01:81:80:b9:f9:8a:71:d6:fb:51:18:
65:2d:b1:10:8f:74:02:d0:f2:70:fd:02:bc:b1:1a:
95:ad:51:00:9d:a3:14:fb:35:2a:41:1e:1e:2b:57:
17:34:7c:cb:e1:b6:2f:32:9b:dd:ad:9c:e9:31:26:
1d:d1:cc:bb:ad:4b:3d:e8:ef:25:e5:2a:20:a4:72:
66:d3:30:28:0b:e9:52:7e:4b:db:f9:7f:1e:8b:15:
24:aa:37:1d:da:78:77:74:8d:09:f6:9c:7a:80:33:
f6:c0:4d:08:e4:57:1d:9a:17:d3:19:10:db:d7:0b:
8b:4c:de:80:84:47:2d:7b:f4:39:94:6f:67:9f:c1:
f3:ec:b8:d0:c1:f3:78:70:76:2c:01:a0:63:4a:7d:
10:b9:b5:e9:ff:dc:9b:89:a9:ac:fe:b4:db:15:67:
61:fb:90:38:a0:73:8f:12:e8:17:dd:f7:7a:27:b8:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:59:46:D8:97:58:9F:FE:E0:12:29:28:20:88:2F:70:F0:CB:99
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d0:39:70:2b:47:ee:3c:99:6f:61:c6:6f:9e:f4:d9:c2:13:
39:6b:cb:56:cc:b6:f5:32:4c:12:37:76:7a:1c:bc:71:aa:09:
3d:1a:47:d8:22:48:b4:f3:54:05:3e:a5:ca:3c:d3:1b:26:b0:
bf:89:9a:04:bb:ae:b9:bc:3c:49:e6:27:ca:52:f6:d7:4b:ed:
6c:7a:fb:03:02:32:6a:ee:11:f1:e1:c0:b9:17:15:c8:47:29:
79:72:f3:ac:c4:af:1f:58:b4:e9:84:1a:85:0f:fe:6d:42:00:
e0:14:bc:4c:8d:ac:73:e9:f5:d8:42:e1:38:d2:43:b8:f4:e5:
d2:71:03:89:78:f7:22:2b:cc:91:83:bb:ed:6d:15:05:13:7f:
a6:8c:eb:fa:97:db:cd:47:84:6e:62:78:66:60:7e:71:46:cd:
d6:26:a0:b4:3e:05:3e:9a:32:7a:4c:db:8a:ee:e3:91:04:a2:
83:7f:70:80:b0:88:61:be:2d:ff:4a:1d:01:01:e2:3e:4d:aa:
11:c3:ff:f0:fc:b7:85:26:5a:56:c5:b8:78:50:3c:db:24:74:
4e:6a:79:05:93:bf:15:41:ee:21:1d:f0:6f:a4:8f:8b:2e:0c:
39:74:31:ca:97:6f:91:87:bc:ad:2b:0f:c3:a8:db:58:53:ee:
18:98:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:26 2026 by rpki-client