Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: movWy/jSoY1HJN4fqbo97pqTAQ1CI/bJeG8rvAgbaCs=
Subject key identifier: BC:F9:3A:BB:B6:A2:5F:21:1E:35:28:7A:A4:A6:3D:8D:8F:CB:C7:B6
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 01A0C4E97ED4691D35AF024CD891207770B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 19F4
Signing time: Mon 21 Sep 2026 17:00:31 +0000
Manifest this update: Mon 21 Sep 2026 17:00:31 +0000
Manifest next update: Tue 22 Sep 2026 17:00:31 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: iEVmhWDGT7s/fj0ejymRS2JQOYl+BfWdKVxgdWIuCSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:7e:d4:69:1d:35:af:02:4c:d8:91:20:77:70:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Sep 21 17:00:31 2026 GMT
Not After : Sep 22 17:00:31 2026 GMT
Subject: CN=bcf93abbb6a25f211e35287aa4a63d8d8fcbc7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:90:04:ce:c9:96:dc:b3:ed:7e:47:f0:c0:
e6:ab:18:8d:ca:fc:a6:e1:a4:df:2d:b8:e4:9d:34:
86:0b:17:f2:3d:b4:cd:fc:ad:fb:40:84:d1:83:a9:
93:ec:3a:37:b5:c3:a1:c1:1d:2a:5f:fc:e4:a3:42:
3e:58:79:c5:73:b1:ff:b0:19:be:d7:c7:73:82:03:
a1:b0:93:e0:d1:76:d4:bb:97:04:e4:14:8f:0a:22:
5d:3e:eb:1e:ce:84:36:f3:d7:c3:df:72:17:c2:e5:
10:69:80:d4:fe:f9:e8:57:f5:36:c3:44:ac:ab:14:
7e:60:3d:4e:3c:38:ea:9e:66:f9:6c:0f:cb:f0:e1:
31:26:a9:c7:32:eb:6c:f8:93:6d:d2:95:dc:33:c2:
ca:cd:90:2d:87:5d:6d:67:16:34:c4:b9:92:06:6f:
41:ab:05:4d:19:8a:4f:47:18:70:9d:87:f5:09:7e:
1e:93:51:f6:7e:1b:f9:c4:dd:8a:06:ea:a6:b5:3c:
a5:6d:d4:25:79:63:f2:a1:9e:95:49:a0:8a:d7:f7:
b5:3d:a3:f4:b0:a4:6a:55:64:56:c2:a8:c1:49:37:
35:d2:9c:4b:fd:e0:c6:1f:91:3f:f6:4d:3a:57:82:
5a:b4:0c:7e:c8:b2:00:32:8c:06:00:4b:94:8f:d5:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:3A:BB:B6:A2:5F:21:1E:35:28:7A:A4:A6:3D:8D:8F:CB:C7:B6
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:25:c9:5f:38:e9:27:d9:2f:b7:2a:97:92:e8:e8:d7:75:
7d:b5:4f:36:86:9c:12:4d:84:20:a0:a6:d8:15:74:b7:ac:6a:
70:9a:83:ad:25:f3:ad:84:e1:52:fe:80:3b:29:b6:f9:c2:31:
66:d5:5c:c7:08:5b:fe:37:1a:5d:fa:c2:d8:72:67:cd:c3:88:
9a:1e:ac:55:24:7c:30:dc:6e:d3:38:dc:46:b9:03:a5:0c:83:
4c:5c:0a:b7:ab:50:1e:32:08:33:36:07:4f:8e:08:bc:02:a7:
9a:2a:68:a3:55:03:d2:c2:99:f1:56:f1:e9:5f:0a:c5:8a:ed:
41:30:7e:a1:59:a7:a6:3e:2e:c9:1d:63:80:8e:2b:e1:c9:7b:
99:04:fc:0b:65:8f:13:b5:05:cb:d8:48:c8:4b:46:ef:20:1f:
e1:72:b7:f5:e3:9c:e9:90:b3:90:7d:bd:12:c1:37:53:5f:49:
72:0f:e8:38:6a:e6:88:df:ff:13:21:be:c3:ab:da:61:67:4e:
66:6f:32:d7:e2:cb:b5:4a:5f:c0:db:7a:9f:c4:b1:87:ea:df:
cb:c1:c4:a1:9d:74:f0:4d:e3:f6:91:95:de:ff:b8:24:54:62:
bf:7f:84:f0:37:c9:a5:42:ad:d8:10:38:51:ca:43:a3:af:94:
eb:4a:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:51:12 2026 by rpki-client