Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: ODGxESTe9Pfv6GrIs9TWrzkxzzTSzQU/8UEZZMh6RdY=
Subject key identifier: 74:B1:4F:1F:5F:10:19:64:15:01:AC:6D:84:4A:38:B4:69:58:85:D2
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01A17EF3AC5636AA15C0E70EB0395E144D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0F28
Signing time: Tue 27 Oct 2026 20:01:00 +0000
Manifest this update: Tue 27 Oct 2026 20:01:00 +0000
Manifest next update: Wed 28 Oct 2026 20:01:00 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: sfcATe9M7ZCpGaKTcDCKjOfl4J8vyHOGuvbY0gaDQOo=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:ac:56:36:aa:15:c0:e7:0e:b0:39:5e:14:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Oct 27 20:01:00 2026 GMT
Not After : Oct 28 20:01:00 2026 GMT
Subject: CN=74b14f1f5f1019641501ac6d844a38b4695885d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:bd:4b:7e:ed:7f:5f:76:1d:14:a1:db:3f:
e9:14:ed:48:79:db:17:ac:c1:44:9b:e2:c2:1a:14:
92:11:81:eb:96:59:9b:71:e4:d9:4b:2b:df:7f:b7:
6e:80:f2:ec:5b:9e:cf:f3:50:40:cb:ba:05:e1:67:
d0:87:f8:fe:ab:9b:78:b5:aa:25:a1:7b:66:c6:15:
d1:86:89:ee:6b:d7:4f:8b:bb:b5:fd:38:00:ea:f8:
9e:a6:83:0f:8e:96:af:9d:8f:0d:ce:ee:f2:bb:3b:
49:6a:5e:d9:84:b8:c8:cc:c9:6f:85:c4:19:9d:08:
05:6a:7f:a0:7d:63:8e:47:f5:c6:e2:86:c7:54:b4:
db:62:d0:00:6c:ef:df:c6:fc:ad:bf:73:e3:dc:0a:
2e:93:69:58:bf:e5:05:d0:c5:66:bd:43:e4:41:d6:
77:08:ab:43:d3:63:cb:72:76:db:4b:2a:3b:23:e7:
2f:3f:d7:07:0c:1a:ed:07:d4:53:f9:02:e7:a9:94:
d7:1e:c7:14:1d:ac:2a:31:a4:6e:27:16:08:59:97:
34:a5:fc:1d:da:cd:af:f0:20:7c:a7:af:0e:d4:1b:
f9:21:b6:53:50:9d:35:38:ec:97:16:b5:b0:1b:5a:
df:cd:12:da:54:e1:61:85:2d:bf:83:ba:43:40:a5:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:4F:1F:5F:10:19:64:15:01:AC:6D:84:4A:38:B4:69:58:85:D2
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:4e:fe:26:8d:43:71:28:cc:3e:be:18:a1:e4:92:1b:a5:
0c:85:2a:8c:8c:af:d8:01:3d:a7:46:7f:23:1c:06:5f:f2:0f:
dd:24:a1:9f:01:f2:da:81:f0:c3:c2:e6:36:69:37:d3:57:3e:
e0:d4:3b:d9:2c:cd:e8:a2:e0:93:b8:20:b2:05:6e:24:47:3a:
ac:70:09:61:11:25:df:f0:89:5e:01:2a:4b:e8:f1:2e:f7:aa:
29:52:03:d7:e1:0e:ff:7c:28:46:79:60:ca:cf:6e:b8:dc:2e:
eb:35:d8:32:ed:71:a8:ce:9a:75:78:bf:8a:ae:61:58:c9:a8:
9b:69:92:01:04:34:88:2d:76:e8:bd:d8:b3:24:9f:d7:c9:38:
d3:db:de:c7:32:a8:5f:6d:41:9c:c3:94:00:ec:5b:0a:fb:28:
90:21:2c:65:11:93:82:86:08:5c:d9:53:0f:5d:5c:99:50:e5:
f3:6b:13:4a:00:9f:eb:9a:a4:fd:8c:ba:62:b0:23:6a:4f:ec:
27:8b:0c:5e:92:a9:f4:3b:fa:07:d1:65:7b:08:17:4a:aa:14:
c7:01:1b:07:7c:b9:89:56:92:8a:3e:01:c8:65:99:c2:96:b5:
91:3d:27:6f:26:9f:45:0f:4f:20:26:80:d3:b1:6d:6c:81:cc:
0d:ad:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:26:41 2026 by rpki-client