Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: truJidtDWTkpAN1XcTvmzqHoRT/zeIfMNk8nKEoFd04=
Subject key identifier: 51:E5:53:63:C3:9D:6A:99:1D:3C:11:CA:5F:33:4F:5A:E3:A6:B6:DC
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019E1D22CBA209B033F455250D3A1E802CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1894
Signing time: Tue 12 May 2026 17:01:20 +0000
Manifest this update: Tue 12 May 2026 17:01:20 +0000
Manifest next update: Wed 13 May 2026 17:01:20 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: EzMYW95vGUkBAU6cad5VHkbirztDWnUlX9O3fwCgbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:cb:a2:09:b0:33:f4:55:25:0d:3a:1e:80:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: May 12 17:01:20 2026 GMT
Not After : May 13 17:01:20 2026 GMT
Subject: CN=51e55363c39d6a991d3c11ca5f334f5ae3a6b6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:33:4c:cf:08:66:71:9c:40:03:a5:c1:de:
91:73:39:47:ab:42:1e:31:7b:78:7e:a2:86:2f:6f:
d1:a4:b9:c7:7b:9d:77:9b:98:a1:3a:40:3f:24:e9:
55:24:04:79:f8:ff:3e:f0:98:e3:62:87:12:04:cc:
ec:73:c2:cb:1a:59:df:1e:77:e7:ca:f9:df:5d:5b:
5d:4b:22:d7:18:28:f2:f1:75:30:c6:04:94:ae:00:
d3:49:c0:92:50:b0:dc:e6:a3:e3:06:0e:31:0f:57:
08:90:b8:28:a7:3c:f8:d3:f5:e7:4b:1f:9f:d8:e7:
4d:85:9d:ac:5b:2e:43:27:07:81:3b:18:fd:ce:54:
ec:93:7b:77:64:e6:e8:31:ba:d3:e3:df:9c:39:9f:
48:fd:ec:63:d4:31:be:65:0e:7b:5f:b8:69:2a:82:
aa:f2:d7:d8:a5:79:c7:4b:38:0c:32:a3:c0:70:dc:
4b:ca:90:e1:4f:b4:73:f8:39:80:45:e7:21:a4:c0:
0b:f9:bf:f7:e1:3f:d7:bf:0f:85:0e:3b:51:5a:e2:
fb:b1:b4:71:14:96:39:5a:04:b3:82:ae:a5:25:75:
f7:19:65:b2:d2:1b:8d:8e:7e:48:98:0c:d7:42:28:
ef:79:1a:cc:dc:f4:5e:42:0f:6f:ee:4a:40:f7:e1:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:53:63:C3:9D:6A:99:1D:3C:11:CA:5F:33:4F:5A:E3:A6:B6:DC
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:54:7c:b9:be:1e:84:b9:23:0e:bd:f1:50:dd:32:69:91:83:
d3:6b:19:f4:d7:26:c0:a6:c8:c3:7b:a9:bf:45:52:e7:ec:24:
31:dc:db:ba:fa:c5:79:07:69:c0:99:bb:02:bb:a8:75:ff:2f:
68:d7:95:11:c8:d7:a1:2e:5e:bf:e0:4c:18:61:5f:10:12:19:
bd:c0:a6:ef:c5:4a:d6:2a:56:80:93:e3:7e:14:7b:e5:7b:60:
1e:c7:8d:43:ad:ca:d9:60:82:fb:92:31:9d:ef:a0:ee:aa:1d:
1c:c8:3a:68:3b:70:9a:7f:c8:59:b3:8f:41:1b:7b:e2:46:24:
39:e9:37:75:24:ba:4e:db:3d:98:fe:ee:89:59:b1:e5:cd:0a:
46:1a:d8:b8:49:0c:7a:6c:77:25:0c:d0:73:63:50:8e:22:7f:
21:8f:24:9d:bc:92:14:de:08:a8:5c:08:d4:76:2f:79:99:0c:
d4:e3:f6:c5:16:ab:2b:74:8a:e6:23:fd:e4:fd:40:26:cd:be:
bd:3d:31:37:90:1b:1f:55:9d:17:7e:4c:c0:5e:c4:80:2c:38:
82:56:25:9a:d6:bc:31:9a:bc:32:2a:7e:00:2f:80:75:31:3c:
5f:03:d8:e5:67:96:2e:ac:8b:fe:38:73:0b:47:53:85:7c:91:
05:7a:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:59 2026 by rpki-client