Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: tSLIxkZ68oPgyj0oWNp3uKGV6JhHhx6+10sJTkSr4po=
Subject key identifier: 70:80:14:62:41:AF:2C:20:EB:13:9E:FA:9B:E1:20:91:58:FF:22:9D
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 01A13E94C0CC35DD3E877DAC8584BE4C144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1A33
Signing time: Thu 15 Oct 2026 08:01:38 +0000
Manifest this update: Thu 15 Oct 2026 08:01:38 +0000
Manifest next update: Fri 16 Oct 2026 08:01:38 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: mRC+p6c7xK9txmoRCO/1/V1SsjgNGCY0uCwEpCJhows=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:c0:cc:35:dd:3e:87:7d:ac:85:84:be:4c:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Oct 15 08:01:38 2026 GMT
Not After : Oct 16 08:01:38 2026 GMT
Subject: CN=7080146241af2c20eb139efa9be1209158ff229d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:9a:38:7f:b3:d8:7c:1a:d0:7a:05:0e:d0:
dd:89:76:a6:14:d5:85:5f:cc:58:33:53:ac:c7:51:
3d:76:99:67:24:0d:d4:82:6d:38:bb:3b:da:19:d7:
3d:05:90:83:08:6c:73:b1:61:30:3a:d9:ba:60:62:
1e:b7:21:9c:30:bf:02:0b:cb:42:c4:ee:e1:7f:ce:
ef:60:76:71:45:08:d3:69:74:7b:76:34:6b:8a:b6:
40:56:8e:10:b8:9b:cb:fd:ad:cf:e4:2c:8b:17:bd:
24:22:6b:4d:e8:27:87:6f:1a:e3:7d:39:4a:d4:e7:
e8:18:fb:58:92:69:cc:b9:e3:10:6d:1a:4c:5d:ab:
36:93:a6:b0:6f:62:41:e8:c2:7f:15:e9:7f:2c:d4:
2d:34:4a:4a:db:36:36:29:b4:98:6c:e9:25:d8:dd:
b2:a7:71:63:fa:bc:7c:df:1d:ec:ee:13:1d:aa:5d:
a1:4a:31:7b:76:a9:57:13:d7:5d:12:a9:c3:10:f9:
2d:ef:87:51:ad:3b:83:3e:f4:2b:91:e2:32:6d:bb:
32:ce:1a:cf:af:f0:f2:ac:9d:0c:20:49:51:82:dd:
f3:e2:c5:25:e7:a2:be:09:bf:64:9a:66:0a:54:26:
2f:1a:c4:d7:e4:37:b6:86:4e:6d:f7:73:fb:a9:12:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:80:14:62:41:AF:2C:20:EB:13:9E:FA:9B:E1:20:91:58:FF:22:9D
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e4:90:79:0b:29:f1:ae:64:17:51:c6:42:9f:34:29:d6:fe:
21:66:b5:57:33:73:f1:9e:ea:80:86:76:26:45:94:ae:92:e3:
07:68:09:ef:52:68:a5:1f:c0:af:41:73:e2:6f:53:05:c5:85:
59:e3:f3:f7:1d:12:21:fc:aa:4c:1d:b3:09:aa:e1:a4:cf:84:
f4:69:ed:58:0a:75:d1:16:24:a6:3e:a9:f3:be:c7:65:68:06:
59:77:15:9e:40:06:5d:ae:b8:50:78:75:61:8c:54:54:5e:10:
f0:20:23:c2:42:6d:21:7c:08:f0:61:5e:9e:62:d5:a4:6a:6c:
95:ee:83:89:96:70:cb:db:bd:9f:36:ba:65:70:a1:17:ca:57:
87:85:6a:13:65:e8:2e:f8:bd:7f:58:ad:f4:80:4f:b9:5a:df:
3e:e6:a1:db:d3:e9:50:d3:2f:07:72:75:40:97:31:27:a7:ff:
83:89:02:8b:bf:46:d1:b8:17:7e:55:b3:3f:40:c9:f0:11:07:
53:05:88:f3:12:df:db:58:d6:bd:e1:64:2b:64:64:27:ad:15:
93:44:65:ed:53:fe:3f:9d:25:d8:d5:2a:29:4a:64:e3:a5:0f:
f0:5a:0c:29:58:fa:f9:ab:f4:a4:a8:45:64:e3:d3:2b:fa:24:
eb:86:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:32:47 2026 by rpki-client