Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: pGmspTVCltvSmA7gqAYGwd7holEGFfTTyoZi3GZ+GBQ=
Subject key identifier: B0:FA:C4:0D:E3:03:59:EA:4E:E3:9B:DD:B2:5B:15:02:F3:41:F0:A5
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019F830C4532B647DEE424FEBDB5382553DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0E21
Signing time: Tue 21 Jul 2026 05:00:47 +0000
Manifest this update: Tue 21 Jul 2026 05:00:47 +0000
Manifest next update: Wed 22 Jul 2026 05:00:47 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: kD1aBDFagtBbPrbDWkcrYhJyiqQQ0OilrNpO8/rMUyA=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0c:45:32:b6:47:de:e4:24:fe:bd:b5:38:25:53:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jul 21 05:00:47 2026 GMT
Not After : Jul 22 05:00:47 2026 GMT
Subject: CN=b0fac40de30359ea4ee39bddb25b1502f341f0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:cb:f6:7f:f6:8c:e9:c0:96:dc:56:b5:02:
29:e4:80:b3:a5:0b:91:35:60:f6:9b:b9:81:54:6b:
9d:01:4b:8d:de:0f:dc:86:0b:8f:d5:bd:66:49:d8:
66:15:64:25:fd:88:6b:ca:b0:d9:26:9c:b6:01:bc:
40:91:b3:10:b7:05:d4:36:b1:c7:c8:82:5e:a2:c0:
2d:f4:df:e2:f6:55:e0:4a:12:6f:b4:2d:11:04:6f:
9d:f6:86:1f:da:fe:d4:a7:9a:d7:44:60:52:64:a9:
b3:dc:56:bb:54:21:df:e5:8b:cd:42:1f:8b:d6:64:
f0:fd:06:5e:25:46:98:a4:b9:53:0f:b2:88:f6:50:
41:df:4c:1d:f3:6d:1c:a6:88:06:3c:7a:66:fc:e4:
94:78:57:5b:fd:37:d1:46:36:a4:10:96:4b:6e:f7:
ee:11:00:0d:72:a5:c7:4a:0e:bc:2f:5a:43:57:64:
e4:7a:40:bf:a9:30:37:38:ee:1d:d4:5c:ed:29:48:
66:d2:24:4c:ac:9c:03:de:36:d5:37:61:ef:a2:b3:
9b:f9:c9:d9:cc:74:74:a4:b7:d6:3c:51:dd:d4:63:
52:dd:d9:14:f4:83:19:4a:90:ac:13:2a:8c:80:9f:
dc:98:91:9a:7e:57:41:e8:fb:4f:94:9b:b4:91:f8:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:C4:0D:E3:03:59:EA:4E:E3:9B:DD:B2:5B:15:02:F3:41:F0:A5
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5c:a6:9b:03:e7:57:64:ef:c0:04:00:58:b6:51:9d:24:e4:
9d:74:7c:48:4d:46:e3:61:0a:81:51:e8:06:5b:47:5f:63:48:
5a:8b:aa:db:47:e9:60:18:71:17:fb:a1:75:b4:11:0b:7d:63:
ff:09:84:bc:7a:45:da:27:46:a7:27:d1:8b:1d:42:f5:e8:94:
af:64:04:a4:a3:c7:ba:f2:e4:28:e5:22:44:7f:a5:9c:9c:87:
19:9e:fd:b0:86:43:03:ac:a8:a9:81:66:07:4e:50:12:18:1d:
78:c5:5d:83:40:1a:6f:56:5a:41:90:dd:e9:5a:fd:4f:90:94:
f7:4d:b1:ae:b1:ef:9b:da:27:a2:ff:58:dc:c2:f8:04:9f:a2:
78:d5:a5:a5:42:b2:ea:80:c3:c7:77:fe:9a:86:52:ca:38:73:
92:f4:e2:cc:6b:b8:08:ef:14:5a:97:cc:31:3d:26:09:55:d3:
ea:1b:d7:16:f4:56:9e:8a:d6:b0:ee:12:28:e2:bd:c6:79:af:
30:63:9f:df:15:d2:d2:a9:ef:b0:05:c6:09:7c:ef:56:4c:4d:
d0:c1:2d:d0:88:f4:37:94:2e:dd:44:0b:4b:29:bb:4a:cd:84:
2b:66:9c:b1:55:51:f0:3a:78:0c:d6:d3:aa:d3:b9:46:0f:63:
b8:7b:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:53:10 2026 by rpki-client