Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: PmP8pbcaUinzcmPljsc4drNis2YNjU3GmZg3HnUuBCw=
Subject key identifier: 7B:98:02:45:88:26:EA:BE:64:C3:A0:9E:86:C6:88:F1:2B:9D:A9:A1
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019D9C63A73CBA4B750FA118E208D856CF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0D25
Signing time: Fri 17 Apr 2026 17:01:09 +0000
Manifest this update: Fri 17 Apr 2026 17:01:09 +0000
Manifest next update: Sat 18 Apr 2026 17:01:09 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: 2/9nyIsVZo3raPP+UD2t7Hx1RY7nDNepdC1zElDKl9s=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:a7:3c:ba:4b:75:0f:a1:18:e2:08:d8:56:cf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Apr 17 17:01:09 2026 GMT
Not After : Apr 18 17:01:09 2026 GMT
Subject: CN=7b9802458826eabe64c3a09e86c688f12b9da9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:44:b0:ce:7a:16:2b:b3:a2:da:fc:91:55:
44:a0:83:fe:58:a0:42:55:cd:71:d8:3a:a0:6a:00:
88:f3:a7:57:ce:dc:20:3e:c3:a5:27:74:ce:55:03:
4a:10:73:cf:69:ac:54:4a:66:0e:b0:30:ef:69:b6:
76:3c:ae:07:47:c2:6a:72:2b:80:39:89:48:22:a9:
fc:6c:f2:50:3f:80:51:23:85:dc:9a:d8:74:30:85:
c7:02:c0:e7:02:9a:7c:70:82:45:eb:86:50:33:b0:
11:94:70:5c:50:9b:a7:43:4d:58:fe:6f:f2:d8:20:
b0:59:5a:ed:00:23:96:79:e7:db:47:a2:a8:79:75:
5e:bd:f9:4e:4a:bf:2d:21:59:98:84:85:40:8b:e7:
6d:54:bc:f6:bd:c0:ef:9f:1c:8d:54:c5:10:43:7a:
5d:da:d8:98:c4:75:0f:ae:d4:74:be:86:8f:f4:74:
6f:83:54:94:3f:1c:93:fe:56:cd:f1:ad:74:c1:c8:
f4:9b:93:47:f1:1b:0e:5c:d0:22:92:ac:80:f9:dd:
65:80:2e:f2:b8:4c:b5:8f:9f:81:6f:13:77:d3:18:
58:bf:fa:fa:7c:35:8c:1f:0f:1b:df:2d:5a:14:15:
fc:87:04:bd:fe:a0:a1:fc:e7:bc:5c:0f:c6:22:e6:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:02:45:88:26:EA:BE:64:C3:A0:9E:86:C6:88:F1:2B:9D:A9:A1
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:fd:fe:0b:8c:7c:68:f2:cd:d6:64:f0:77:54:66:00:5d:
da:a7:f6:ee:bd:34:69:03:a7:9d:c3:b2:8c:00:33:14:4b:1f:
6e:0c:83:8b:4b:30:f9:7c:ef:f5:37:55:3e:0a:82:61:d0:99:
65:75:18:70:05:a3:cb:c2:9d:91:cd:a3:a3:b2:82:67:da:68:
32:77:cc:df:ee:08:08:56:09:2c:56:d2:9a:03:31:75:2a:06:
aa:70:90:07:01:dd:76:70:e3:ae:39:f1:66:5c:c2:1d:eb:79:
ed:5d:03:7b:5d:90:0b:3f:e3:c3:5d:03:06:10:ec:1c:a1:45:
b8:3e:0b:30:e0:0a:44:f8:90:9e:89:98:0d:16:04:59:e5:34:
75:9d:8c:a8:6e:31:2e:75:11:0c:f8:b7:cf:74:87:55:ce:f8:
d1:3f:39:c7:74:d2:73:1d:a6:48:e0:3b:06:ad:c5:5b:38:e8:
34:5d:18:c7:1e:0a:10:a5:ec:61:52:6c:81:c7:44:f9:97:0c:
2f:f1:b3:82:0a:31:4a:cf:4a:b7:6f:75:2d:1f:44:22:27:f6:
c1:04:02:2c:10:a9:5b:e3:4d:04:9e:c6:69:76:58:d2:b3:5c:
64:84:0f:b1:79:fd:98:17:78:ef:ce:dd:3b:60:4e:71:92:47:
88:14:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:59 2026 by rpki-client