Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: GjQiAUYj2ztiHWVg6URGvj3+W5bbKBjNT2yRUfK1Ypc=
Subject key identifier: 24:45:C5:07:EE:28:FB:B0:22:DA:E5:F9:37:99:39:63:B3:F9:BE:C9
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019EC1EE2D95DB3AB8A8282CC7FF70483B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0DBD
Signing time: Sat 13 Jun 2026 17:01:12 +0000
Manifest this update: Sat 13 Jun 2026 17:01:12 +0000
Manifest next update: Sun 14 Jun 2026 17:01:12 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: /ba02l1wPcDrXQdFVOWtQauPAstNrLyDADJMkZOCkpY=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:2d:95:db:3a:b8:a8:28:2c:c7:ff:70:48:3b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jun 13 17:01:12 2026 GMT
Not After : Jun 14 17:01:12 2026 GMT
Subject: CN=2445c507ee28fbb022dae5f937993963b3f9bec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:be:b9:19:42:5d:bd:ac:58:0c:83:72:1e:
91:a5:1a:f8:3a:7a:ab:07:a9:57:e0:90:1e:aa:5e:
07:86:d9:26:fc:14:0c:86:fa:69:8b:a9:a6:f9:ae:
5e:cc:03:21:7d:f7:ab:cb:33:94:f4:42:a1:35:c4:
28:38:04:0e:7a:8b:26:b1:fc:01:50:0e:0b:3a:30:
d5:9b:a2:32:9d:97:a0:07:c4:44:50:45:71:0b:59:
a7:59:bd:78:60:fb:6d:8e:91:9f:57:63:15:f1:64:
8b:8d:09:66:4a:77:79:ce:ed:6d:05:b7:d8:59:61:
37:0b:bd:10:d7:e1:0d:79:1c:90:ae:2e:ae:aa:73:
b4:ad:2a:65:74:f0:a8:1d:3d:50:8a:ea:7e:52:4f:
b3:e3:82:6d:c7:96:a1:45:52:02:20:a1:4d:16:e8:
47:28:35:e9:03:31:8f:3d:55:b8:ce:79:68:45:19:
76:ba:31:9b:23:f6:c0:7d:52:12:e6:c1:b8:62:b3:
c0:c3:d6:06:3a:76:4f:60:84:fa:b7:3f:10:18:33:
c8:88:79:e4:4d:10:89:73:08:70:f7:22:76:68:c7:
92:71:5e:a2:5b:27:6e:d9:0e:fd:8b:a8:04:e8:1d:
3d:0e:72:21:d3:11:a2:de:65:95:8e:e8:27:ae:fc:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:C5:07:EE:28:FB:B0:22:DA:E5:F9:37:99:39:63:B3:F9:BE:C9
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:28:bb:65:eb:bd:55:fd:af:8a:11:d3:d6:05:6e:76:e5:5d:
c5:27:a2:bc:83:00:8f:da:5b:82:7b:66:e6:9f:de:0e:8a:2a:
4c:8b:b3:00:3a:d6:fa:9e:a6:b7:c9:30:04:e2:09:0f:1c:25:
f7:cc:a7:7b:02:78:08:97:45:b2:32:5d:d5:f3:5c:13:1b:fd:
28:ee:89:59:58:03:f4:b0:64:4b:3d:6e:e6:b0:4c:0a:9b:dc:
0a:66:17:23:04:6a:f8:c4:a4:8e:a7:a4:cc:f1:4d:23:43:c2:
6d:65:58:31:46:e1:4e:bb:3f:f9:6b:1f:39:38:70:29:e4:b5:
0e:ca:e9:ff:4e:e6:b8:5a:51:ea:c9:3d:11:57:88:bd:91:07:
e4:29:3e:a9:a3:85:9b:b7:21:aa:a6:c6:d3:1e:ca:db:53:73:
9b:47:03:6b:06:a9:8e:2d:7c:54:40:35:7b:e2:78:22:bf:e2:
c9:61:e2:05:0b:41:ed:63:ad:48:37:1f:f2:65:67:10:d3:71:
25:b7:06:54:7e:91:ec:3e:1b:31:a5:a0:9e:21:bc:11:94:b8:
cf:cc:a9:e9:32:c7:69:8d:82:46:14:d7:11:30:e4:83:ae:54:
95:b5:11:99:7a:f3:27:1c:58:77:60:4e:9e:36:aa:2e:3b:17:
9f:4d:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:44:36 2026 by rpki-client