Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: gtGNFJqs8+lMDq5G0g+CGoYpyYY9a6+QmwmxXD9KrR4=
Subject key identifier: 44:BF:F5:EF:7B:21:E0:C0:AC:00:28:DF:38:59:53:10:9A:B9:0F:88
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01A06CB9455BD9048A6F3F85C11F39D399E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0E9A
Signing time: Fri 04 Sep 2026 14:01:16 +0000
Manifest this update: Fri 04 Sep 2026 14:01:16 +0000
Manifest next update: Sat 05 Sep 2026 14:01:16 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: 5T6TWKecn897sZ+5s26OuyIcE7LU8U/rWiyEGkujsbU=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b9:45:5b:d9:04:8a:6f:3f:85:c1:1f:39:d3:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Sep 4 14:01:16 2026 GMT
Not After : Sep 5 14:01:16 2026 GMT
Subject: CN=44bff5ef7b21e0c0ac0028df385953109ab90f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:cc:f1:9f:5c:d3:cc:86:b1:ea:42:8b:e5:
81:29:f8:b2:d2:39:f2:5e:93:2d:83:b9:12:43:a5:
9f:0e:ef:72:71:9b:25:f8:4d:01:ff:b3:29:95:ce:
9c:df:95:63:8f:dd:48:53:0d:e3:da:1e:b3:a0:1e:
ae:f3:ce:95:31:58:07:6b:48:77:95:50:a5:41:29:
f4:e3:17:3c:86:ca:c7:11:35:7d:44:ed:34:7c:26:
13:03:91:6a:87:92:cf:a1:3e:a1:9f:ca:89:41:84:
19:87:fc:88:b6:9b:ef:1a:a4:f6:f5:d0:4a:57:e4:
1c:bb:96:2d:1d:c5:fc:cc:5c:68:eb:71:83:98:7e:
fd:33:2c:b6:74:0a:70:70:94:a2:65:2f:69:3d:38:
fc:b2:79:cd:ca:70:ce:d8:ea:96:63:c7:98:f5:f3:
c3:08:4a:04:3c:79:a5:8b:4f:39:87:76:6b:88:17:
cc:29:bd:74:20:7a:fd:f3:2a:83:cb:c4:8b:8b:57:
bf:0e:ea:70:c3:d9:fd:98:2f:49:93:6b:73:3d:66:
3f:ab:e4:5c:07:42:2f:38:3c:e8:09:f8:3f:26:28:
56:16:c2:17:19:7a:7c:78:a4:7a:b1:fc:f5:ea:5e:
44:3e:2e:91:79:9f:6e:38:f7:92:13:fd:be:6a:4b:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:F5:EF:7B:21:E0:C0:AC:00:28:DF:38:59:53:10:9A:B9:0F:88
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:32:7a:39:f8:bd:3c:21:13:7e:98:00:56:81:3e:aa:8e:e9:
da:46:b2:32:04:6f:52:e3:51:d8:cf:b4:d5:d9:8d:f3:9f:a7:
28:8f:91:07:17:b4:e2:b8:33:06:8d:45:41:06:71:d4:3a:19:
21:1a:28:82:16:37:62:a9:3c:53:4f:6e:01:d7:3d:ae:3e:e9:
43:03:93:5b:5d:8d:b5:cd:03:fe:f6:e1:15:d5:0e:4c:0d:03:
a9:a4:31:ac:5e:8a:c3:a7:d2:d2:98:62:3a:ab:1e:e0:f5:4f:
cf:18:a0:54:8c:f8:b2:03:3c:3b:6f:18:45:2e:d9:aa:ac:5a:
87:2c:b6:6f:24:f5:8d:0c:35:23:75:01:4e:d4:27:16:39:a1:
a0:90:2c:06:0f:6b:aa:b2:73:ce:53:d8:95:ae:ec:44:c9:ef:
d7:cc:78:99:11:d7:57:f7:ee:5b:b2:16:fe:66:a4:20:d8:eb:
91:de:f8:19:7a:aa:8f:4e:eb:75:97:4b:1b:4b:b9:cf:70:92:
f9:2d:ac:5f:c8:d7:b5:c9:cc:13:a1:f8:35:7f:ce:00:9a:b1:
9a:d5:0f:40:e6:4d:12:36:5c:c8:e1:66:f4:fd:11:92:91:84:
68:26:ea:02:0f:a6:ea:54:17:10:db:56:a1:57:4d:75:7f:d7:
3a:dc:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:14:24 2026 by rpki-client