Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: N7O3mx0OID96h+vCz6rGnCNtBrcRsi8FmcfXuAUG4v8=
Subject key identifier: EB:18:0D:9C:C1:A3:5C:08:F1:E3:E1:93:ED:71:92:CD:33:26:1E:06
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 01A0CAB533BFB365B6F93544A9E635EBD3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 19F7
Signing time: Tue 22 Sep 2026 20:01:07 +0000
Manifest this update: Tue 22 Sep 2026 20:01:07 +0000
Manifest next update: Wed 23 Sep 2026 20:01:07 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: vNZ/U9u7SGCrHs/owH7kfUfUFAwuPwoBRqf4UE/Y2kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:33:bf:b3:65:b6:f9:35:44:a9:e6:35:eb:d3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Sep 22 20:01:07 2026 GMT
Not After : Sep 23 20:01:07 2026 GMT
Subject: CN=eb180d9cc1a35c08f1e3e193ed7192cd33261e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:52:29:ce:ab:14:51:8e:86:23:9c:d7:b4:
e4:c7:ba:5d:24:46:bf:67:2d:cd:3e:ca:bb:82:62:
2a:58:6a:33:6c:7f:61:9e:73:b6:c3:83:24:b7:e6:
68:c6:89:28:3f:bf:e8:06:bd:7c:55:b7:f9:67:70:
fb:2b:e8:2b:3a:45:db:0b:cd:9b:1f:dd:2d:42:a1:
2b:41:5e:a7:2b:73:2f:22:04:1f:22:10:97:be:d0:
d3:24:1d:a2:c0:6f:d0:21:22:ba:e6:98:c6:49:95:
1d:44:fb:b7:d9:0f:07:ea:3b:eb:06:43:f0:65:c6:
71:2d:02:46:f8:89:e7:6a:e5:0a:5c:53:45:6f:f4:
e1:98:ca:1e:31:db:44:e1:6b:bc:06:6a:c7:e4:ab:
07:04:e9:64:0d:52:7b:2e:a3:5f:94:1a:99:d9:f5:
66:8a:48:70:5b:e7:97:b1:2a:83:45:b2:f9:42:ff:
39:42:62:de:a8:04:f4:9f:d0:c2:4f:c4:c6:5c:a6:
a3:45:14:41:22:91:e8:ba:3e:19:86:b8:96:b3:60:
ca:e7:b7:6c:5b:cd:4f:4c:5f:ce:68:ce:d5:48:e1:
f7:3b:52:02:c5:f5:03:74:94:e6:9d:dd:08:00:b2:
89:c7:bb:b1:3f:d6:9e:a5:9e:df:3b:2b:31:37:f4:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:0D:9C:C1:A3:5C:08:F1:E3:E1:93:ED:71:92:CD:33:26:1E:06
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:58:1d:e1:27:55:e8:a1:59:97:5a:c4:ba:2d:f5:8b:b3:d4:
da:83:61:88:5b:9c:e8:e7:9e:b8:d9:28:73:38:d6:3f:33:e4:
34:39:4f:ed:8a:c7:02:16:f5:f7:23:40:6b:39:d0:c9:98:7c:
0a:9d:3c:64:2e:27:a4:b0:6f:2c:63:62:fd:3e:8b:bc:a6:f8:
ae:e1:72:8b:64:f9:33:af:2f:01:d5:fc:33:cb:35:af:df:bb:
9d:8d:26:7e:c2:24:36:53:a4:54:07:54:24:54:a9:82:de:9a:
cb:69:4e:db:85:65:54:35:23:d2:63:9f:de:9d:84:7b:36:45:
17:26:16:be:4f:99:5f:2b:0a:db:aa:8e:4c:a1:da:fb:9c:bf:
87:43:85:49:f9:82:a1:55:ab:07:df:94:b8:4f:da:a9:a0:b2:
3b:3c:0f:0c:25:e6:0d:31:c5:24:39:83:e9:91:93:04:dc:12:
f9:87:1f:88:0a:bf:ff:be:fb:d4:9e:65:85:f5:31:82:a8:fd:
78:25:67:d0:d6:4d:fb:02:05:82:b8:58:92:57:c5:7c:7f:39:
be:3c:26:7d:da:2c:c4:dc:3c:75:8f:09:5d:e0:f7:8f:1b:c2:
03:63:49:f4:90:8d:69:f5:a7:79:82:b4:d7:d5:68:b1:71:17:
ab:4d:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:27 2026 by rpki-client