Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: s3LyVszSTe+P7I3JB9T2zi6hzUIegxPmX7QbWVpioAE=
Subject key identifier: 4B:6A:46:92:36:38:67:2F:38:8C:4F:59:4E:04:3F:D4:02:A5:B3:56
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019F1830D557B4AE4D3CE6FAFA6D396146A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1916
Signing time: Tue 30 Jun 2026 11:01:21 +0000
Manifest this update: Tue 30 Jun 2026 11:01:21 +0000
Manifest next update: Wed 01 Jul 2026 11:01:21 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: h/Y1sqCpZ+qKboRHht6dbRi3z4SgNwHVKUaEjiPaU4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:d5:57:b4:ae:4d:3c:e6:fa:fa:6d:39:61:46:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jun 30 11:01:21 2026 GMT
Not After : Jul 1 11:01:21 2026 GMT
Subject: CN=4b6a46923638672f388c4f594e043fd402a5b356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:64:14:99:99:67:66:9e:68:6a:13:fe:5b:
00:ba:06:87:f2:20:1a:ff:0a:bd:62:e9:2a:6f:11:
ed:9b:06:ed:6c:3d:dc:83:19:ef:59:d5:22:30:f8:
16:30:e7:2f:9d:80:ac:68:65:3e:06:4f:9e:68:42:
6c:4b:3e:56:70:00:b9:6f:0b:af:4e:70:cc:04:32:
10:13:b6:1e:05:dd:93:88:f9:6b:95:d8:fb:c1:41:
6d:0e:11:b5:49:1a:1b:cd:ec:5c:49:ba:07:05:fa:
a1:ef:32:4a:c5:f3:b8:77:03:dc:33:40:49:45:10:
00:ce:fe:92:7e:28:ca:e6:17:00:a5:50:0a:62:b3:
be:29:e8:95:6e:13:e2:e0:db:71:da:8a:c7:95:ad:
0a:72:9d:da:9e:b4:6f:76:b1:9c:19:26:43:20:86:
6e:72:fa:c7:20:1f:9f:db:e3:5b:67:7b:c7:f1:85:
01:72:e9:26:1b:d5:47:66:fc:2e:db:cd:80:0f:a7:
68:2a:e4:0a:38:1c:cb:aa:85:14:36:7d:95:9c:bc:
e0:5a:2f:06:2e:2a:46:e3:f5:e8:b3:1c:f3:38:56:
56:c2:62:a7:ac:36:27:b1:2e:c9:f8:c5:6d:4d:cf:
94:78:92:45:7c:e8:29:ee:7c:e0:aa:03:6d:bc:a8:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:46:92:36:38:67:2F:38:8C:4F:59:4E:04:3F:D4:02:A5:B3:56
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b1:b6:eb:31:9e:fc:53:bc:f8:dd:49:32:5c:15:25:8c:80:
2e:da:07:16:d9:1c:de:eb:8b:a6:cd:50:bd:ef:80:cd:9c:a3:
fe:c2:10:d5:8d:bb:5b:dd:98:c8:a2:49:93:36:62:e5:49:c2:
00:17:38:9a:de:99:cf:1f:6a:da:4f:70:a1:0b:23:92:0c:63:
53:c1:ca:70:c2:5f:d2:45:8d:2b:aa:43:e7:03:3b:0c:fe:24:
16:e7:ed:51:28:6f:5f:0d:92:c8:f2:9a:9d:3c:56:40:d6:b4:
8e:92:92:a1:a5:12:d4:01:84:4b:b1:bf:37:55:e4:e4:e6:26:
5d:60:40:95:b2:6d:45:de:0b:32:68:bd:89:30:d0:09:b4:c9:
9b:41:2b:50:6e:07:33:7a:53:39:20:3f:82:f4:cd:6c:fc:86:
6f:3d:16:89:1f:47:88:89:53:2c:00:3e:74:25:e5:8a:7f:13:
a3:7d:8e:a9:8b:98:5f:ed:1e:3f:92:16:c5:b6:6e:92:a7:14:
7b:e6:72:d2:47:92:50:93:fb:f4:6f:cd:58:dc:25:13:ad:70:
1c:d0:b0:62:ce:5d:40:5b:2a:d1:36:ed:6f:a1:a1:19:28:ed:
04:56:20:fd:26:77:de:e3:d6:1f:16:a2:3d:dd:10:3e:63:e0:
86:f9:91:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMNVXtK5NPOb6+m05YUaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWUwNzk5ZjA4YWY4ZmU1MjBmOTQ4MmNkZDA1ZThlYTY1
ZTYxYTgwHhcNMjYwNjMwMTEwMTIxWhcNMjYwNzAxMTEwMTIxWjAzMTEwLwYDVQQD
Eyg0YjZhNDY5MjM2Mzg2NzJmMzg4YzRmNTk0ZTA0M2ZkNDAyYTViMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmtkFJmZZ2aeaGoT/lsAugaH8iAa
/wq9YukqbxHtmwbtbD3cgxnvWdUiMPgWMOcvnYCsaGU+Bk+eaEJsSz5WcAC5bwuv
TnDMBDIQE7YeBd2TiPlrldj7wUFtDhG1SRobzexcSboHBfqh7zJKxfO4dwPcM0BJ
RRAAzv6SfijK5hcApVAKYrO+KeiVbhPi4Ntx2orHla0Kcp3anrRvdrGcGSZDIIZu
cvrHIB+f2+NbZ3vH8YUBcukmG9VHZvwu282AD6doKuQKOBzLqoUUNn2VnLzgWi8G
LipG4/XosxzzOFZWwmKnrDYnsS7J+MVtTc+UeJJFfOgp7nzgqgNtvKiyXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtqRpI2OGcvOIxPWU4EP9QCpbNWMB8GA1UdIwQY
MBaAFAfuB5nwivj+Ug+Ugs3QXo6mXmGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDIt
YTcyMzQ0YjNmZjEwLzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDItYTcyMzQ0YjNmZjEw
LzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLG26zGe
/FO8+N1JMlwVJYyALtoHFtkc3uuLps1Qve+AzZyj/sIQ1Y27W92YyKJJkzZi5UnC
ABc4mt6Zzx9q2k9woQsjkgxjU8HKcMJf0kWNK6pD5wM7DP4kFuftUShvXw2SyPKa
nTxWQNa0jpKSoaUS1AGES7G/N1Xk5OYmXWBAlbJtRd4LMmi9iTDQCbTJm0ErUG4H
M3pTOSA/gvTNbPyGbz0WiR9HiIlTLAA+dCXlin8To32OqYuYX+0eP5IWxbZukqcU
e+Zy0keSUJP79G/NWNwlE61wHNCwYs5dQFsq0Tbtb6GhGSjtBFYg/SZ33uPWHxai
Pd0QPmPghvmR1A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:36 2026 by rpki-client