Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: 5MwP3nh+PpbCmtbeIGmB89P/73G4znniRMZshQQP2FE=
Subject key identifier: DF:E5:89:2A:6A:EF:18:43:73:FA:01:01:F9:01:53:EB:1A:F0:4B:48
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019D37F77D08E5BD62042729561549C5CCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0CF1
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: tx+S5pS3sQM+92RSWdC21KLYUaXc55EvrgazeavCE9o=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7d:08:e5:bd:62:04:27:29:56:15:49:c5:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=dfe5892a6aef184373fa0101f90153eb1af04b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:b9:cd:70:7a:c9:bd:5b:7a:b4:e6:6d:fa:
a7:0b:3a:c9:43:c4:b4:23:98:98:20:5b:42:3f:f4:
26:87:24:94:06:80:03:2c:b9:b5:10:4c:a4:c7:ce:
8e:1d:51:7f:60:5e:c0:67:b0:77:5f:68:7f:0c:10:
80:1e:f0:ca:29:c2:0d:a6:ea:54:45:53:fb:e5:d7:
c5:cf:9c:50:73:bb:a9:17:23:ca:6e:e8:17:36:a0:
6c:78:20:2c:5f:b3:a2:f5:4f:28:d5:5c:f0:17:58:
66:16:84:13:62:00:e9:04:a0:45:3d:14:4a:09:ab:
1e:f9:b9:16:e4:cb:33:8e:c3:31:9a:90:0b:cc:97:
48:e9:92:16:81:2c:1a:28:49:a2:da:56:c8:bc:ef:
91:27:a9:a0:66:9d:fc:c6:0d:e5:5f:4f:87:b7:3c:
00:bc:0d:6c:cc:ec:a7:82:4b:c0:d2:54:f4:e6:75:
3b:66:e9:78:73:f8:e9:4d:72:27:f4:5f:59:3e:c5:
52:3d:d1:b4:60:8d:ea:08:5f:ca:bf:7a:6d:13:1c:
e8:aa:b6:80:69:15:e6:4c:c9:6a:af:d2:44:f0:70:
45:e8:16:2a:36:d6:f3:83:31:ad:51:23:3f:41:6c:
c9:ba:2e:4d:88:b8:e5:1e:50:20:f4:bc:9f:95:94:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:89:2A:6A:EF:18:43:73:FA:01:01:F9:01:53:EB:1A:F0:4B:48
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:21:d7:c5:79:45:88:b3:c3:9a:94:01:0f:02:28:7f:eb:
e4:3d:3f:db:6e:7c:17:d1:db:7a:64:a1:6f:39:5d:94:f3:73:
e6:59:a6:6b:d1:0e:27:d1:b1:e0:3e:3b:02:8b:62:cf:e1:17:
78:42:02:e5:0c:56:68:a1:63:c5:a5:51:f2:e1:58:9f:ce:41:
33:31:09:e7:54:01:42:c3:99:31:93:de:df:21:0f:7c:87:68:
97:5d:3b:60:68:0c:36:3b:6c:1d:b0:0c:d1:23:2e:23:f3:aa:
e7:a5:13:c2:6b:5d:8b:0c:f4:66:c7:e4:2d:df:44:f2:42:34:
67:78:6e:c1:20:64:18:d3:86:4b:91:4a:f8:b4:92:c0:80:c1:
29:9f:ea:4d:de:0e:a1:91:a7:0e:23:41:6b:3f:63:33:16:89:
38:60:8a:fe:32:ee:30:b8:d1:a6:f8:11:ab:51:b3:87:64:7c:
32:a1:7b:a6:58:f7:4e:a1:8f:4b:61:00:e5:ca:c6:76:71:7d:
94:ee:29:b9:4c:69:7c:1c:9d:45:2f:29:8f:85:6f:25:e8:ac:
42:3f:05:dd:3b:31:d1:39:0a:bf:64:61:34:7a:98:6f:24:90:
61:fd:2e:1b:b6:a5:cd:b0:c2:36:9a:3f:e5:d3:23:2a:57:96:
36:e5:dd:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03930I5b1iBCcpVhVJxczEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1
MzViN2EwHhcNMjYwMzI5MDUwMDU5WhcNMjYwMzMwMDUwMDU5WjAzMTEwLwYDVQQD
EyhkZmU1ODkyYTZhZWYxODQzNzNmYTAxMDFmOTAxNTNlYjFhZjA0YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb25zXB6yb1berTmbfqnCzrJQ8S0
I5iYIFtCP/QmhySUBoADLLm1EEykx86OHVF/YF7AZ7B3X2h/DBCAHvDKKcINpupU
RVP75dfFz5xQc7upFyPKbugXNqBseCAsX7Oi9U8o1VzwF1hmFoQTYgDpBKBFPRRK
Case+bkW5MszjsMxmpALzJdI6ZIWgSwaKEmi2lbIvO+RJ6mgZp38xg3lX0+HtzwA
vA1szOyngkvA0lT05nU7Zul4c/jpTXIn9F9ZPsVSPdG0YI3qCF/Kv3ptExzoqraA
aRXmTMlqr9JE8HBF6BYqNtbzgzGtUSM/QWzJui5NiLjlHlAg9LyflZQL/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/liSpq7xhDc/oBAfkBU+sa8EtIMB8GA1UdIwQY
MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt
N2M2NWE4NTJmMDkyLzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky
LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5Uh18V5
RYizw5qUAQ8CKH/r5D0/2258F9HbemShbzldlPNz5lmma9EOJ9Gx4D47Aotiz+EX
eEIC5QxWaKFjxaVR8uFYn85BMzEJ51QBQsOZMZPe3yEPfIdol107YGgMNjtsHbAM
0SMuI/Oq56UTwmtdiwz0ZsfkLd9E8kI0Z3huwSBkGNOGS5FK+LSSwIDBKZ/qTd4O
oZGnDiNBaz9jMxaJOGCK/jLuMLjRpvgRq1Gzh2R8MqF7plj3TqGPS2EA5crGdnF9
lO4puUxpfBydRS8pj4VvJeisQj8F3Tsx0TkKv2RhNHqYbySQYf0uG7alzbDCNpo/
5dMjKleWNuXd7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:55 2026 by rpki-client