Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: GnyQN00/P0NqvyWuUJjw5wx/mA8b9PylMmu4z5cuQhU=
Subject key identifier: 58:C0:FD:63:FC:BE:75:19:F5:AA:39:17:E8:24:56:E8:C0:0C:D4:B3
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019D3752896BDBAF6F687B90D62CF1A6BB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 181D
Signing time: Sun 29 Mar 2026 02:00:49 +0000
Manifest this update: Sun 29 Mar 2026 02:00:49 +0000
Manifest next update: Mon 30 Mar 2026 02:00:49 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: DT3FC67yLYx/dbiLOIotSCmHQ7HqjYA6HrU/q27Y1M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:89:6b:db:af:6f:68:7b:90:d6:2c:f1:a6:bb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Mar 29 02:00:49 2026 GMT
Not After : Mar 30 02:00:49 2026 GMT
Subject: CN=58c0fd63fcbe7519f5aa3917e82456e8c00cd4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:9c:8a:78:5a:16:72:f6:2a:1a:1b:47:33:
cf:b5:24:ab:b4:14:28:a1:40:b1:ac:36:40:98:cf:
e9:55:f6:6b:0b:cd:06:32:2c:1a:11:eb:8d:af:78:
89:ef:c4:ed:d2:ea:fc:41:24:80:bb:0f:e4:2b:7f:
ff:3f:f1:75:02:50:da:c8:84:a3:29:68:49:94:9f:
4b:0a:09:6f:c3:26:f9:cf:1a:14:02:09:d9:86:4d:
d2:6a:66:86:5b:fe:0c:ad:2c:70:78:c7:d0:5f:6a:
e6:e2:4e:08:32:40:84:09:3f:47:a3:9e:b7:fd:dc:
dd:ab:a9:01:b9:68:46:ad:5a:7f:18:17:0c:32:11:
2c:ea:05:33:41:3f:95:dd:87:d0:63:ef:cd:b4:fe:
b2:57:28:93:d4:05:b2:b7:c6:14:b9:a5:0e:15:3d:
75:aa:eb:84:cc:b7:e2:0f:bc:03:0f:ca:f5:eb:b3:
0f:25:26:ed:11:97:40:bd:40:8b:75:2e:4c:d0:96:
5d:12:d4:e0:d3:4c:2b:bf:f5:59:75:7a:d1:d4:4a:
4c:c9:09:3c:03:46:f0:08:54:31:eb:4e:6e:ed:58:
93:ae:43:af:e5:4e:4e:00:ff:ba:42:10:4e:ea:50:
fe:68:0c:57:02:48:7b:6b:f6:f1:dd:98:1b:75:77:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:FD:63:FC:BE:75:19:F5:AA:39:17:E8:24:56:E8:C0:0C:D4:B3
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:41:37:a0:2c:ac:2c:2f:f5:0e:fc:24:b1:71:59:ac:6d:
07:21:d4:cc:b3:30:ae:09:5f:39:5f:d5:9a:98:06:45:c7:e5:
ab:c0:e7:b7:54:81:8c:9c:d7:be:5b:57:95:15:3d:31:8e:72:
c3:31:aa:95:42:a6:0b:c0:ed:1b:7c:4e:d4:74:df:5b:77:5c:
f1:1b:7f:1f:9e:76:7d:e2:77:56:b8:89:1a:0f:3b:9f:c6:cb:
a1:f3:75:9d:4a:1b:87:1f:61:3b:7a:75:35:b7:08:83:34:14:
c7:b1:8e:c9:43:90:70:8c:ca:be:de:b7:ec:e9:1c:cb:c6:4f:
62:9d:1d:1c:f9:b3:0f:cf:fc:5e:70:a6:75:64:40:cf:f4:2d:
f6:c3:ca:93:34:9f:f4:78:e7:62:42:d6:1b:27:b4:d3:fb:ba:
6b:a9:ea:b2:ce:cb:ff:cf:13:a8:31:74:ee:e3:71:ff:26:ca:
56:0b:a7:5c:51:f4:47:86:60:4a:4f:55:63:8e:24:29:76:ce:
75:a9:92:62:f9:f4:09:b2:82:aa:09:dd:26:49:61:d8:1c:b3:
3c:45:c9:23:5e:a6:8f:2c:d9:6e:89:d6:b1:44:55:21:ae:71:
bb:21:07:ab:3a:24:ce:33:70:53:9d:f1:6a:8d:14:33:bf:24:
cc:7a:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:39 2026 by rpki-client