Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: Ct8cK0goLw6ay1idL7F0jfUTGvlAmsiJNLm9oe1GtE4=
Subject key identifier: 85:7F:53:86:AC:BA:A7:21:2D:D9:56:02:98:16:F9:76:05:C4:CB:48
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 01A001DCEDE82A560EA750082B0115293620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 198F
Signing time: Fri 14 Aug 2026 20:00:51 +0000
Manifest this update: Fri 14 Aug 2026 20:00:51 +0000
Manifest next update: Sat 15 Aug 2026 20:00:51 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: vJ0ILQTDWZmA0yMPWefJjZXq4vaX0lD10J3D4T5+RAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:ed:e8:2a:56:0e:a7:50:08:2b:01:15:29:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Aug 14 20:00:51 2026 GMT
Not After : Aug 15 20:00:51 2026 GMT
Subject: CN=857f5386acbaa7212dd956029816f97605c4cb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:dc:ae:c5:53:2d:da:91:90:74:b8:6f:7c:
ae:45:0f:f3:19:af:57:a8:fb:6a:58:71:7b:a6:e5:
9c:b4:61:98:85:50:8f:15:c3:32:59:2f:d6:40:e8:
a3:28:c7:89:bf:c2:a5:22:f0:29:f2:7e:c5:8e:a6:
7b:47:8f:06:80:e7:fd:40:02:87:14:d4:66:22:f8:
a5:27:a1:e9:35:aa:90:ed:ed:36:be:e7:92:c8:5e:
84:82:3b:37:da:71:64:db:5c:16:d1:c2:08:4a:f6:
b3:e7:2c:64:59:e9:10:ed:72:7f:2f:da:b5:f4:b2:
fe:5b:d1:0d:e4:18:eb:d9:9e:e7:ab:cb:e7:1a:41:
0c:44:6b:d3:57:8f:aa:08:db:0b:79:91:a9:8a:b7:
5c:d1:19:92:ae:f3:ab:5a:ac:fa:f1:f3:0a:21:2b:
46:bf:49:d3:95:42:f7:04:f0:e4:e1:fe:e2:fa:2f:
90:a7:8d:43:76:26:ed:93:63:ac:92:ac:25:02:c1:
ae:61:57:46:af:cb:4d:4e:33:a1:b5:3a:ec:15:d4:
1a:0a:d5:f0:0b:57:21:29:d4:20:98:86:66:df:1f:
1f:24:41:a3:b7:4a:b6:16:15:0a:52:18:fd:97:be:
2f:50:3b:bb:05:a8:7a:2e:df:73:b7:15:e4:eb:19:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7F:53:86:AC:BA:A7:21:2D:D9:56:02:98:16:F9:76:05:C4:CB:48
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:87:48:bd:cc:f9:1f:b4:53:6e:cb:c8:8e:69:22:fe:2b:c3:
62:e6:ec:e2:73:02:20:d8:ab:67:27:05:ef:f4:16:01:50:2e:
d3:5a:41:58:ee:88:85:67:55:9e:32:dd:22:ee:1f:63:e5:89:
ba:94:bc:83:26:ef:f6:48:70:2e:7f:b2:20:c3:f8:8f:01:87:
47:35:bd:08:6c:27:11:44:54:6b:80:cf:3e:67:7a:3e:d2:2a:
4e:e8:86:c0:0a:3a:01:19:39:31:a3:c4:a0:71:3e:8c:54:9b:
96:23:58:e5:68:5d:b8:37:1a:fb:16:25:a7:81:4a:5e:d9:e5:
6b:cf:25:86:27:75:ed:c6:91:cd:e0:37:f5:4d:62:62:e7:07:
c0:5b:2c:8c:92:d1:80:d0:ea:60:d7:2d:64:3c:7f:aa:1e:90:
ea:01:9e:f2:5e:03:35:ee:3f:cd:8d:c7:50:9f:05:20:37:89:
7c:d4:66:3d:3d:e7:cc:4d:23:f2:e3:bd:61:c6:46:4c:a3:8d:
0b:2a:02:51:0e:85:fb:d1:69:bc:9d:b9:c1:53:96:5f:c9:b0:
89:d2:57:c7:af:45:3b:53:21:a0:85:2e:96:03:75:11:0d:0c:
ba:d8:22:3d:e4:72:41:98:9d:08:a8:69:3d:5d:98:16:1e:74:
ea:42:d9:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3O3oKlYOp1AIKwEVKTYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWUwNzk5ZjA4YWY4ZmU1MjBmOTQ4MmNkZDA1ZThlYTY1
ZTYxYTgwHhcNMjYwODE0MjAwMDUxWhcNMjYwODE1MjAwMDUxWjAzMTEwLwYDVQQD
Eyg4NTdmNTM4NmFjYmFhNzIxMmRkOTU2MDI5ODE2Zjk3NjA1YzRjYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrcrsVTLdqRkHS4b3yuRQ/zGa9X
qPtqWHF7puWctGGYhVCPFcMyWS/WQOijKMeJv8KlIvAp8n7FjqZ7R48GgOf9QAKH
FNRmIvilJ6HpNaqQ7e02vueSyF6Egjs32nFk21wW0cIISvaz5yxkWekQ7XJ/L9q1
9LL+W9EN5Bjr2Z7nq8vnGkEMRGvTV4+qCNsLeZGpirdc0RmSrvOrWqz68fMKIStG
v0nTlUL3BPDk4f7i+i+Qp41Ddibtk2OskqwlAsGuYVdGr8tNTjOhtTrsFdQaCtXw
C1chKdQgmIZm3x8fJEGjt0q2FhUKUhj9l74vUDu7Bah6Lt9ztxXk6xkEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV/U4asuqchLdlWApgW+XYFxMtIMB8GA1UdIwQY
MBaAFAfuB5nwivj+Ug+Ugs3QXo6mXmGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDIt
YTcyMzQ0YjNmZjEwLzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDItYTcyMzQ0YjNmZjEw
LzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIdIvcz5
H7RTbsvIjmki/ivDYubs4nMCINirZycF7/QWAVAu01pBWO6IhWdVnjLdIu4fY+WJ
upS8gybv9khwLn+yIMP4jwGHRzW9CGwnEURUa4DPPmd6PtIqTuiGwAo6ARk5MaPE
oHE+jFSbliNY5WhduDca+xYlp4FKXtnla88lhid17caRzeA39U1iYucHwFssjJLR
gNDqYNctZDx/qh6Q6gGe8l4DNe4/zY3HUJ8FIDeJfNRmPT3nzE0j8uO9YcZGTKON
CyoCUQ6F+9FpvJ25wVOWX8mwidJXx69FO1MhoIUulgN1EQ0MutgiPeRyQZidCKhp
PV2YFh506kLZMg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:56 2026 by rpki-client