Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: CN5VAZQyzF80bwlhgyjU56eaHW7MVWfWsRODVWpRu1Y=
Subject key identifier: 63:D1:3A:E8:E6:FC:90:94:10:BB:3C:DB:87:03:20:6B:D2:20:1D:C1
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019EBF5AF38FC04DC4750BAD2FE3AC6D8D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 18E8
Signing time: Sat 13 Jun 2026 05:01:09 +0000
Manifest this update: Sat 13 Jun 2026 05:01:09 +0000
Manifest next update: Sun 14 Jun 2026 05:01:09 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: KcmZkGAGDPAFcIjKZAJoR8ShoXhEviHC9X/y/qIViQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f3:8f:c0:4d:c4:75:0b:ad:2f:e3:ac:6d:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Jun 13 05:01:09 2026 GMT
Not After : Jun 14 05:01:09 2026 GMT
Subject: CN=63d13ae8e6fc909410bb3cdb8703206bd2201dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:4e:d8:ba:18:71:11:8f:90:e6:84:46:10:
48:d0:76:c1:a7:4f:67:e8:57:73:71:4b:8b:a6:c5:
9a:31:63:94:f6:99:f0:c9:e5:11:f6:10:d5:d6:ae:
3d:c6:22:2c:f5:bc:8c:b8:a3:3e:74:cf:3c:d3:ce:
04:29:4e:9c:dc:37:6f:62:73:d8:da:6b:f2:61:63:
8a:6b:49:c9:5f:2b:3d:1a:4e:57:2e:ab:10:19:37:
81:5c:6e:f5:a9:ed:ff:48:53:5b:f2:dd:d6:b6:b3:
d7:8e:db:4c:b4:b2:6d:af:56:5a:c3:72:30:eb:ec:
25:7b:67:86:ae:6b:17:ae:09:99:30:8f:a8:e6:de:
a4:bd:a0:17:bd:07:cf:f3:4f:ee:51:01:6f:f8:38:
01:81:4d:d8:c8:92:15:26:23:28:20:f8:cb:14:97:
93:32:a2:7d:64:eb:da:30:b8:d8:5c:ba:c7:d3:51:
4c:78:81:e5:a6:99:2d:8e:2e:b4:5b:4c:c1:f9:2e:
e1:fd:e9:4c:32:70:1b:74:2e:65:f3:7b:83:69:dd:
99:76:c5:3a:36:bc:40:ca:45:a1:f3:6f:ee:3b:76:
74:58:55:07:48:40:60:4f:57:e2:43:b0:ec:0e:4d:
3b:96:1b:ce:73:06:d8:69:00:07:76:87:99:9e:5f:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:3A:E8:E6:FC:90:94:10:BB:3C:DB:87:03:20:6B:D2:20:1D:C1
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:7e:4c:d0:35:a8:6a:c0:e3:eb:16:3c:af:c7:ab:7f:07:6b:
2d:ae:57:e0:f0:1a:ec:4a:1e:cf:36:48:b8:62:29:23:d8:fd:
61:01:d4:56:c6:5b:8a:aa:88:de:35:4d:0e:1c:7e:32:48:b5:
31:d7:06:89:59:82:49:97:91:ad:8e:e3:31:89:d7:89:d6:78:
f3:23:68:67:1e:25:2e:54:62:4a:3a:65:6b:34:2f:d4:6c:4f:
4a:d2:bc:c5:b7:83:03:48:ac:28:1c:40:44:5d:6d:a0:5a:a9:
97:85:63:ae:d7:e3:d0:e3:09:14:9d:6b:98:01:24:f9:01:cc:
c1:87:58:66:63:e2:d3:69:95:f0:ff:e0:0d:46:1a:95:6f:67:
21:46:a1:93:78:a4:26:c6:05:0c:b8:f1:b2:44:40:7b:72:c7:
7f:53:0f:4b:8a:ce:66:fb:c1:14:62:e7:6f:00:69:c1:82:d0:
00:09:7a:9d:bc:02:e4:a2:8b:1f:73:df:fa:5c:fb:47:0c:2d:
7c:d6:16:52:4c:d7:d3:45:26:32:4a:85:1f:d2:1a:3d:af:4a:
74:c3:ca:db:ca:71:b6:d0:79:04:c4:a3:e8:32:90:24:25:29:
5f:3d:af:c6:ad:4d:15:5c:fe:0c:5e:88:cf:7a:1e:44:43:9c:
0e:79:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:22 2026 by rpki-client