Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: UFOSUXhhflT8q9NY2t4ZalHbMtE/QOlGucOM/7fDXSE=
Subject key identifier: CA:64:D9:D4:2F:27:D1:2A:77:37:B6:3F:5A:DF:A9:E7:C7:9F:57:86
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019FA9075DE463DDCC2AC246EBA3C4B75C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 1961
Signing time: Tue 28 Jul 2026 14:00:59 +0000
Manifest this update: Tue 28 Jul 2026 14:00:59 +0000
Manifest next update: Wed 29 Jul 2026 14:00:59 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: ge9sRb+Elt7SLqco77atWT/Mbe1AtfbI25TTsHMqIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:5d:e4:63:dd:cc:2a:c2:46:eb:a3:c4:b7:5c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jul 28 14:00:59 2026 GMT
Not After : Jul 29 14:00:59 2026 GMT
Subject: CN=ca64d9d42f27d12a7737b63f5adfa9e7c79f5786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:ce:73:3d:cc:98:56:70:56:a1:14:80:31:
f8:83:24:ba:cd:0c:aa:52:f5:77:1d:e8:8c:d9:29:
19:e9:79:3b:5e:80:c1:a6:4b:e5:d9:56:e5:ac:ab:
95:0b:00:59:0a:87:a3:d1:54:9c:e3:92:41:a9:65:
73:ea:1b:96:80:9f:0f:63:d9:96:0f:b1:de:c0:cf:
36:12:7e:d5:23:b3:06:12:bb:c4:4a:e0:18:3d:31:
a6:f8:ae:4d:cf:ab:45:63:f1:d8:c3:93:15:c3:bd:
97:05:3c:d4:aa:a6:48:72:9b:43:5a:ca:5f:90:bb:
84:3b:d0:ff:ca:56:2c:ec:c5:64:f1:11:20:e5:78:
e0:8d:c6:a5:e8:ce:0c:42:46:c7:b3:e9:a0:05:0e:
2d:41:7a:66:f9:85:67:7a:31:91:f3:58:84:b0:ae:
1a:d8:7e:e8:ab:02:43:86:69:55:f5:cc:0d:77:fd:
db:83:14:64:f0:53:a7:1f:33:ab:f6:b7:87:67:f6:
ec:61:0f:d1:70:24:1a:a7:9d:ba:3d:62:e5:3f:51:
26:2f:96:95:cf:0a:3c:d7:3c:cb:4f:62:16:4d:2f:
b0:7d:ba:97:40:7e:e8:68:f5:56:d8:44:db:f8:1b:
74:91:e9:05:ec:63:bb:74:1b:da:bd:7d:d3:16:4e:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:D9:D4:2F:27:D1:2A:77:37:B6:3F:5A:DF:A9:E7:C7:9F:57:86
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7b:30:2c:81:d5:f5:ab:a6:fa:eb:f3:04:50:bb:c1:32:be:
1a:27:a0:0c:d9:e1:dd:6c:09:59:1a:99:95:48:e1:0f:c9:f3:
52:20:b7:f3:d8:0f:23:38:1a:37:25:4c:02:17:15:3f:07:78:
e4:97:5a:8d:05:d7:f2:b3:80:1f:57:79:46:d5:21:02:4a:de:
74:54:fc:1b:6b:24:83:10:27:cb:fc:d1:c7:07:19:83:8a:c1:
2a:25:30:af:b0:d5:92:75:53:cd:50:b7:54:8d:aa:bd:1b:5e:
76:a8:4e:76:c5:d8:7d:a9:51:8d:02:38:17:81:f2:0f:cf:e0:
f4:6b:bc:6e:3e:f9:73:f5:cd:3f:c4:94:5d:d4:ec:03:ad:17:
b3:c9:40:02:9d:e7:39:63:16:4f:89:a6:42:a2:a3:b3:8e:a9:
58:07:22:b1:bf:af:67:ff:ba:ed:24:cd:85:9e:a6:a3:69:23:
29:6b:e9:cb:1c:71:9f:42:f2:7f:f8:fd:dd:f6:a2:b4:d1:f4:
ff:e9:22:85:6f:02:80:ad:1c:a6:dd:06:1d:4d:63:eb:9c:0f:
c5:e0:9f:4f:cc:d4:fc:53:9b:9f:5d:ee:81:cd:46:7c:05:4b:
e1:de:09:c7:fa:ab:b7:47:8f:6e:a5:44:41:7d:5e:4d:6b:41:
68:fd:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:24 2026 by rpki-client