Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: RXE/Jglr0ZGqPdNNcfvh7zO4UOGDkZNoRilmIMCm148=
Subject key identifier: 38:6E:9D:78:B6:C2:EC:3B:79:0B:E6:47:D5:C0:7A:84:FA:CF:5E:A1
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019D27DFC9160555CE0AD0C157026A39543F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: uleNqzSB/jXkCx2IkO1fkiMgFoyZO5j9lMull3Omj1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c9:16:05:55:ce:0a:d0:c1:57:02:6a:39:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=386e9d78b6c2ec3b790be647d5c07a84facf5ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:d6:1d:30:ff:6a:6e:4a:53:9b:a9:29:4b:
04:63:1f:49:06:4e:5c:d1:59:f7:eb:6c:52:90:d2:
9c:f1:64:6b:74:bd:db:03:d8:77:cd:d1:bf:19:0c:
d5:2f:37:ff:23:4a:ab:1f:1f:a5:30:65:03:63:bc:
9d:f1:44:67:90:c2:a5:be:18:4a:37:41:4c:95:73:
e5:58:25:5a:81:a2:72:aa:fd:11:84:d4:08:03:63:
d8:ba:b5:6e:aa:b6:2d:f1:25:e9:b4:90:5c:02:0e:
ae:ff:c3:66:1a:7d:c3:1c:97:3a:70:69:21:90:96:
ee:b6:ed:e2:02:dd:a4:d9:2d:cb:7f:e6:93:29:ce:
5a:f8:6a:89:63:89:ac:60:19:66:d5:6d:bc:2d:2f:
d1:22:4d:af:0a:79:5f:af:86:ca:94:e7:ef:6f:57:
d5:8a:d9:d2:92:1d:b9:c1:a0:8e:b3:2b:c1:a4:71:
72:de:fe:36:01:86:23:b3:aa:3a:12:0c:88:d7:12:
bc:3c:b6:a4:e6:ba:75:6e:10:ac:63:af:26:b5:4c:
dd:e3:0e:10:fb:ce:79:8e:34:77:af:ab:79:4c:82:
c8:18:4d:b6:f9:c1:c6:eb:39:b1:02:39:73:29:20:
59:0c:25:6a:28:e5:83:ad:37:9a:c5:13:66:4f:ca:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:9D:78:B6:C2:EC:3B:79:0B:E6:47:D5:C0:7A:84:FA:CF:5E:A1
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:76:df:89:37:e7:34:d0:0c:95:b7:0b:30:bb:b8:44:d7:
a3:46:ef:f9:76:7f:d2:64:5c:5e:ef:f5:01:50:4c:4d:1e:a1:
37:97:96:c4:7f:66:29:ea:18:14:f7:57:ba:70:41:3a:ce:94:
d0:44:e2:8a:06:7a:4f:88:fa:e3:69:34:bc:43:0a:76:4c:32:
85:d8:01:92:06:67:9f:2f:61:3e:ed:3e:bc:1f:73:ac:00:8e:
b8:fb:de:09:ef:19:a8:c0:ee:66:d2:16:63:42:65:3f:db:2b:
34:f1:77:4e:9e:9e:09:81:82:60:4b:9a:96:f0:e3:cb:80:2d:
5f:19:c6:a4:74:4c:55:ae:4e:c8:c8:4f:e9:6b:76:d3:81:f7:
0a:5a:a5:c1:60:10:d7:f7:72:92:30:7a:9a:96:d6:b7:6f:28:
bc:41:2d:07:03:6c:fb:2c:81:bf:b5:55:bd:cd:b2:33:88:3a:
43:d6:92:7c:37:3c:ac:0e:db:6f:0b:f1:09:20:1c:e5:40:c6:
aa:2d:80:85:7c:71:66:7e:97:d7:a4:eb:f0:38:77:7d:71:cc:
7d:3c:12:0a:93:78:36:0f:e4:9a:31:7c:93:ee:94:86:8c:db:
81:95:c3:d6:60:fa:90:cc:e9:05:75:ed:28:a8:8c:3f:9c:9b:
3e:9b:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:02 2026 by rpki-client