Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: YFU1WXb1GiIh/3ck00gk+Zv31fEnEe9TtuygciXb+is=
Subject key identifier: 98:4E:EE:53:6E:8B:FE:4D:56:64:F3:AF:D9:23:D2:7E:66:20:5B:A6
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019E3117A551BAB1417918319A36F4AA1461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0D72
Signing time: Sat 16 May 2026 14:01:33 +0000
Manifest this update: Sat 16 May 2026 14:01:33 +0000
Manifest next update: Sun 17 May 2026 14:01:33 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: GbWCS8sRkF/zuYxlNko7YOaXe9YCYZkK9uaVVYBAZi8=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:a5:51:ba:b1:41:79:18:31:9a:36:f4:aa:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 16 14:01:33 2026 GMT
Not After : May 17 14:01:33 2026 GMT
Subject: CN=984eee536e8bfe4d5664f3afd923d27e66205ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:94:7f:c7:4a:7f:d8:18:3e:02:a2:cd:48:
e2:ae:9b:30:52:c8:ba:4e:74:2a:18:ba:37:33:aa:
d9:4e:dd:88:ce:c1:4e:c4:70:d2:1f:40:31:b3:d4:
ce:38:e9:a4:11:3f:75:c8:32:1b:39:91:8c:d7:a3:
b5:d5:36:8c:c7:d3:df:f3:4a:88:d4:90:e5:92:d6:
33:08:27:cd:a9:8c:9f:c7:f8:ff:16:77:cd:97:6c:
08:4d:3c:d0:70:4c:60:dc:ae:d3:fe:de:45:9f:e6:
95:c1:af:32:ae:a3:4c:cc:a3:1e:19:be:22:33:1c:
27:73:89:23:bd:f6:de:98:3f:e3:ff:b2:5e:c1:25:
d5:b5:25:55:d1:f0:55:00:76:f0:78:5f:0e:34:f3:
91:aa:b9:28:18:14:3a:a9:84:30:dc:e3:38:f9:cc:
f3:63:d2:19:71:1a:31:c3:17:1f:91:62:2b:ee:6f:
53:5c:7a:2f:cd:31:bf:18:01:ed:69:d0:f8:eb:d6:
02:22:67:39:23:3e:c8:18:08:9e:14:8c:4c:52:3c:
64:d0:78:b6:9c:e0:22:7c:35:01:79:5a:dd:bf:7d:
ab:34:89:28:d2:d3:d8:2f:78:bb:c0:16:bf:4f:bf:
55:13:ed:b5:7f:2f:20:b7:5f:cd:29:92:f6:51:39:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:EE:53:6E:8B:FE:4D:56:64:F3:AF:D9:23:D2:7E:66:20:5B:A6
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:da:63:b3:b9:f4:01:2f:cc:19:63:12:1a:72:82:da:13:fb:
d2:84:3d:67:53:84:df:55:2e:19:60:70:90:46:60:05:87:2d:
c0:c2:e6:34:d0:c1:97:61:94:c7:98:2d:5b:f5:66:dc:c7:ef:
03:24:24:e9:65:26:68:83:f6:99:86:e2:e8:95:5c:ef:25:88:
30:5e:84:8f:f4:a7:6c:47:bb:c7:6f:6a:22:2d:de:cd:e1:fd:
9c:b0:ac:f5:53:1f:a9:9f:e0:e4:b2:23:51:e4:c6:6d:1e:67:
e9:b0:7c:bd:fb:4c:b9:b0:51:87:a7:0a:89:f5:05:1d:c4:fc:
aa:27:9a:7c:71:18:cd:51:38:b4:ed:4b:5b:31:2b:5f:75:17:
3c:52:42:ab:7e:c5:d6:1f:f4:03:68:f1:39:cc:d2:19:40:7d:
26:d2:ba:9d:24:83:5e:ba:fa:9f:ce:4e:6f:a6:fd:02:27:7d:
b2:26:03:3e:01:0a:b9:35:d2:71:6b:60:52:6f:67:78:0c:79:
da:a6:fd:73:7f:d9:db:cc:fa:bc:90:98:e3:e9:9b:87:af:ba:
95:1b:13:6f:9a:3f:ba:b7:cf:91:55:bc:d3:72:86:d4:8b:e2:
bf:e8:d2:79:c0:75:4b:c9:ba:55:27:62:23:93:18:15:76:cd:
87:e8:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:08 2026 by rpki-client