Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: GLl1yUZMuz4FLBFe61vTNQuWHl0+s2E7zFl5ACZsitU=
Subject key identifier: 50:4B:D2:0E:2E:20:8F:6B:A8:15:03:57:91:65:79:E5:F6:F9:3E:4D
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019CACEBF4C5CA10FE0E27A9D1A0C441C5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0CA9
Signing time: Mon 02 Mar 2026 05:01:10 +0000
Manifest this update: Mon 02 Mar 2026 05:01:10 +0000
Manifest next update: Tue 03 Mar 2026 05:01:10 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: pAZHjHxLTHTrguJ6XOKe7Iuyxt9g/3quGg64NWKV1Bg=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f4:c5:ca:10:fe:0e:27:a9:d1:a0:c4:41:c5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Mar 2 05:01:10 2026 GMT
Not After : Mar 3 05:01:10 2026 GMT
Subject: CN=504bd20e2e208f6ba8150357916579e5f6f93e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:0a:07:a6:83:54:5a:f8:22:68:ff:d4:34:
3c:84:bf:d3:f7:9b:c4:b7:f9:a1:9e:fe:be:19:f6:
5b:8d:42:2f:f6:25:b4:5d:0e:4f:88:a4:dc:72:b9:
3a:ad:9c:28:91:ac:67:d2:73:c8:78:9e:5c:a5:5a:
a9:c9:40:c8:ac:8d:1e:2b:88:da:6a:d0:8d:ff:40:
b2:ea:01:14:8c:1c:e2:85:eb:f4:a7:97:83:bf:fc:
36:d8:3f:8a:a1:fc:68:9b:d9:1d:5a:4a:43:e0:b9:
94:d2:bc:d0:9e:80:ee:95:04:88:d6:27:5c:04:84:
0b:2a:38:ae:3c:a3:0b:7b:d7:1e:8b:3b:e0:ca:3b:
12:99:d3:df:65:1a:21:67:3a:53:07:77:34:88:8b:
fd:a5:88:84:52:a0:af:f6:0f:fc:53:6b:69:9c:a2:
b3:94:2c:f9:96:ff:63:cb:9c:49:ce:32:73:75:46:
20:e9:4c:b7:e3:91:42:57:84:14:13:a8:44:8d:7b:
c6:3b:5c:f7:06:77:55:a1:18:d1:50:32:87:2e:d1:
07:85:4c:57:6c:6a:98:d5:b6:a3:46:18:38:cd:78:
8c:4e:3d:b3:e5:dc:38:ba:ed:23:e7:f0:17:79:fa:
39:a7:25:fd:1a:e7:8e:16:82:fe:ae:e9:1d:46:62:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4B:D2:0E:2E:20:8F:6B:A8:15:03:57:91:65:79:E5:F6:F9:3E:4D
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:fa:5e:1d:2c:00:68:3d:7f:d5:f6:d1:ca:3b:50:80:7c:
59:b5:6e:8f:bc:87:ed:d1:46:2f:8a:1b:d2:32:3a:51:d6:2c:
8e:23:a5:ff:61:5f:d3:da:ee:d1:05:45:fe:dd:17:bd:db:e1:
68:61:98:23:f9:cd:50:84:fb:2e:28:5f:c7:e9:5d:f3:9e:01:
4e:41:db:89:52:95:1a:aa:29:bb:8f:c1:53:bd:ea:87:34:ca:
2f:49:e2:b8:d5:e9:6e:85:5b:6e:6a:08:ee:f1:b5:9e:36:5f:
bf:7a:99:3b:7d:34:4b:94:34:e9:d4:96:62:d6:2f:c3:78:82:
34:18:7d:0f:5e:6e:bc:5a:ad:89:93:c9:6f:75:b8:d8:a2:f2:
68:f3:93:8e:1a:87:d3:c7:f1:7a:d2:e1:af:bb:a4:54:5e:69:
db:e2:d4:77:f8:42:3e:ba:f5:45:f2:65:db:01:ab:c7:d7:e4:
24:a2:86:7b:2f:0c:86:91:87:66:85:88:62:c3:c6:d6:63:7d:
7a:9e:81:15:80:8c:c5:f4:dc:cb:42:9f:33:71:92:32:9c:7a:
3f:15:8a:a0:a1:a7:26:a4:b2:7b:d0:fe:43:5f:ec:38:c2:25:
58:cc:f7:b6:cd:31:6a:e7:9b:2b:7e:2f:69:6d:b2:e9:8a:43:
7d:0f:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:00 2026 by rpki-client