Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: 6mh3dxR6sQ6K30jvYEifR/cNMrnUno9k9AxUFtfbqOQ=
Subject key identifier: D5:E5:8E:3B:64:E0:96:6C:47:51:66:6B:FC:55:86:79:6E:97:4A:D9
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01A13D4A19968DD10EA68B605E03CF60B34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0F06
Signing time: Thu 15 Oct 2026 02:00:28 +0000
Manifest this update: Thu 15 Oct 2026 02:00:28 +0000
Manifest next update: Fri 16 Oct 2026 02:00:28 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: ORg0i8oRRNIvkaoFak2wSIg2pzForJh4L5YHEHHwF7w=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:19:96:8d:d1:0e:a6:8b:60:5e:03:cf:60:b3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Oct 15 02:00:28 2026 GMT
Not After : Oct 16 02:00:28 2026 GMT
Subject: CN=d5e58e3b64e0966c4751666bfc5586796e974ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:63:fc:c2:ed:3c:93:6a:cc:0d:2f:2d:49:
ad:d8:9d:08:1c:5c:43:2e:3d:88:d9:3c:7e:cf:76:
0f:7f:03:fc:b5:a1:48:89:fa:a0:b1:b4:e0:4d:84:
ea:fb:a8:82:6b:0d:30:0b:0b:a0:5c:ee:31:35:f9:
0a:65:43:09:3e:f4:0b:b7:cd:6c:5e:75:b7:df:9e:
24:db:3e:89:3a:32:e8:77:12:c0:81:62:ee:c9:81:
be:07:f2:78:ca:b8:c3:e1:9c:16:4a:b4:dc:4a:b4:
f0:3f:97:78:d8:0a:e2:78:13:35:96:d7:c6:f9:8b:
e8:ba:05:fa:02:25:69:97:e7:ca:16:f4:9f:f2:20:
55:23:3e:bd:73:e7:7c:e7:37:d5:cd:d4:b5:21:e7:
83:98:0c:35:af:b3:94:3b:81:b0:3d:cf:9b:67:d5:
8f:53:16:e4:0a:ae:d7:2d:63:dc:a3:68:19:fd:14:
44:f6:41:8b:20:e5:e9:83:be:50:e2:8e:35:36:a7:
77:68:db:4e:0c:52:63:dc:a2:9a:e5:cf:ed:d4:8b:
45:57:2d:01:9f:3d:fe:36:d4:6b:70:77:37:21:a7:
0c:5a:9b:e9:b8:2e:3e:08:d9:a5:6d:29:ea:94:ab:
bf:08:3c:8f:70:ad:c8:95:a1:ad:fa:c7:9d:3d:57:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:8E:3B:64:E0:96:6C:47:51:66:6B:FC:55:86:79:6E:97:4A:D9
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2d:42:a9:46:39:c9:7d:03:98:f5:6e:f1:b3:cf:1c:8d:6d:
2e:b6:96:8c:7c:c0:81:d6:e7:f1:20:df:6c:f7:8e:3a:70:fc:
3a:d6:77:97:08:71:ee:a5:8b:90:36:99:21:6f:48:61:b6:93:
15:5c:09:87:0d:e3:60:9a:85:64:39:c2:0b:f6:60:26:b0:e9:
23:03:3b:ec:40:59:d0:08:c3:c0:53:b1:3b:e4:8c:bb:62:a9:
4c:17:13:01:f1:bd:97:d7:13:60:27:53:ab:41:33:a4:a4:cd:
12:8c:91:b5:b6:26:55:38:54:ea:ff:01:6f:b4:a3:e3:74:37:
c0:df:45:ea:fa:09:98:33:5a:33:4a:fe:cc:b6:5c:ad:aa:7e:
08:a8:9c:68:cc:70:4b:9d:18:01:9d:51:b6:23:4d:6f:f0:10:
28:e6:ae:19:71:fc:96:93:e5:8d:84:16:85:d1:05:50:dd:99:
e0:6d:91:ec:ee:40:7b:77:ca:3c:9b:63:e5:e4:cf:e4:a7:32:
5a:ea:6d:9b:d2:32:e0:b5:ce:e9:7c:f3:0e:1d:4e:38:cb:e7:
75:b1:dd:45:c6:5f:96:29:79:ab:e5:c0:95:f4:09:21:b6:ec:
24:4a:32:d3:93:28:05:7b:69:54:44:ea:55:42:f3:3f:f7:04:
2e:b6:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:26:18 2026 by rpki-client