Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: CGIRYH3IYXj+UzlIbBc7bfwPDo+E5SSWTHjTb6BhAMA=
Subject key identifier: 08:49:F7:73:29:AD:74:0C:E9:18:6B:09:55:EE:F7:A9:DA:A2:C7:0E
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019E3072510EF028AFF0550AC69C2775F25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 189E
Signing time: Sat 16 May 2026 11:00:58 +0000
Manifest this update: Sat 16 May 2026 11:00:58 +0000
Manifest next update: Sun 17 May 2026 11:00:58 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: zaR5VAf1a/IwjjRWDg4ZuJTgSZcS+zRLVQ02AVCCWuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:51:0e:f0:28:af:f0:55:0a:c6:9c:27:75:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: May 16 11:00:58 2026 GMT
Not After : May 17 11:00:58 2026 GMT
Subject: CN=0849f77329ad740ce9186b0955eef7a9daa2c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:e3:0f:a1:c2:da:f7:c6:e0:83:15:df:e9:
f9:33:ca:cf:6a:1a:af:7a:4a:9b:e1:67:13:1e:21:
e2:0e:e6:77:fb:8e:d7:c3:c7:d8:72:63:f3:6d:a8:
44:b0:3a:04:fb:7c:5e:4a:f5:73:8a:b5:86:e5:ff:
cd:2e:bf:5e:eb:e6:81:eb:a3:1b:0d:d7:c1:51:15:
71:9c:34:d6:83:b1:f2:54:9f:3b:bd:a9:fc:5e:e8:
2f:08:4f:af:48:a2:8b:64:a7:1a:e8:e1:d0:51:ab:
d1:d3:4b:a7:20:10:ea:5a:a4:f3:f2:41:74:70:b4:
aa:87:b8:8a:52:22:41:21:05:aa:9d:1e:49:9e:70:
11:53:33:3c:ca:13:5a:f9:2d:56:9f:26:ea:78:0d:
35:ff:bb:0d:fe:ee:43:39:1c:13:97:61:70:59:55:
cf:f8:88:63:5e:e7:e4:3d:8c:cc:b9:8d:b0:0d:d9:
d5:fe:97:ae:57:6e:6b:d7:5b:1b:a6:c5:a8:5f:34:
68:f2:7a:93:42:3e:ec:f1:b7:18:4a:02:4c:8c:38:
db:31:6a:f0:d2:6b:33:7d:9b:08:5b:e1:c5:fb:c2:
96:93:36:73:f9:1f:2a:1e:42:f4:f2:c3:24:94:8b:
5d:41:97:2e:8f:55:a3:75:91:87:74:4d:45:54:8f:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:F7:73:29:AD:74:0C:E9:18:6B:09:55:EE:F7:A9:DA:A2:C7:0E
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:33:57:6d:b6:f9:d9:71:18:7d:c1:0c:60:25:ed:5d:bb:cb:
c9:fa:50:30:b6:ad:da:a3:7c:7f:05:c1:d0:56:b7:06:94:64:
79:95:5c:61:1f:c2:e1:0f:0d:52:29:8d:40:a1:a7:1f:da:97:
f1:29:61:d4:b3:c6:8f:f4:af:83:b8:15:e7:a8:04:b8:cf:b0:
c2:78:e3:0f:8b:e2:79:d6:50:2c:03:d9:16:56:cf:f0:0e:be:
01:ae:c7:21:b6:d6:91:79:9b:0e:d4:86:68:29:2d:65:a5:fc:
22:93:ff:96:51:23:fa:8f:4b:b2:28:84:1d:8b:6a:53:e8:e1:
b5:d9:02:d8:37:ef:4e:67:ff:14:d6:9d:ca:2a:fb:3d:df:b1:
9b:df:ca:a6:80:ae:bd:a6:79:fa:8f:c3:c7:91:6e:45:1a:3c:
7f:c6:47:95:45:ad:d8:71:8d:51:42:b0:62:01:2c:1d:05:9e:
82:6c:1d:68:3a:2a:69:8c:01:78:4a:2a:2c:2f:65:32:0c:1a:
c4:6b:71:b2:ec:0f:ef:e6:7a:1f:89:8c:9a:c5:21:c5:21:cb:
21:34:ee:3d:1f:af:75:62:24:e6:c1:7f:cb:30:f4:15:f4:08:
7a:15:2a:6c:93:26:fb:ef:12:e6:1b:6b:06:7c:fe:a5:d4:e2:
1f:28:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:27 2026 by rpki-client