Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: IzISW6hV6pYiZyt2+3GrtD04x1qCsekX7HxapKTtKZE=
Subject key identifier: E7:B5:66:E3:0A:F3:42:A3:37:13:A0:63:D8:A4:1B:F4:6B:3E:0B:C1
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019F927F33E820C5BE1E0EB73AA6D84F1FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0E29
Signing time: Fri 24 Jul 2026 05:00:37 +0000
Manifest this update: Fri 24 Jul 2026 05:00:37 +0000
Manifest next update: Sat 25 Jul 2026 05:00:37 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: ULmQO+WZQBMnlyG/SJhjBiqnikWnq4aq65DuMxb/Zdc=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:33:e8:20:c5:be:1e:0e:b7:3a:a6:d8:4f:1f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Jul 24 05:00:37 2026 GMT
Not After : Jul 25 05:00:37 2026 GMT
Subject: CN=e7b566e30af342a33713a063d8a41bf46b3e0bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:91:18:fb:60:d5:35:02:7d:ee:db:07:81:
e2:a6:ee:75:7e:7e:4d:c1:0c:62:a7:17:e2:e8:c6:
a1:90:d7:a5:f8:72:c6:7d:80:26:0e:fe:ea:fa:2c:
1d:8e:b2:4d:46:50:56:84:69:23:50:fb:73:61:87:
e7:57:78:c4:00:20:21:49:ef:57:9b:a1:57:98:01:
3b:48:0c:06:5c:dc:2e:de:a9:44:91:fb:f0:9a:42:
a6:2e:21:e0:7f:f7:fa:52:e6:7d:d8:01:1e:d2:c9:
7a:2f:bc:0c:e3:fd:59:3f:78:fb:8b:b7:9b:78:0b:
8d:01:7b:31:4b:e4:9b:89:ea:74:96:76:a0:d1:f2:
b8:c1:23:8d:3b:58:0e:98:f9:7a:74:39:b8:28:c0:
1b:6b:47:33:e9:af:f2:9a:27:56:ef:f8:bb:59:64:
ce:b2:bb:45:9d:15:9e:e2:5c:d7:11:98:18:32:2a:
0c:29:4d:72:82:a7:79:36:60:39:27:23:47:68:f0:
b5:47:c9:e0:ee:6a:f7:97:b0:2e:aa:3b:17:55:6c:
ad:e8:45:d4:62:9f:d3:12:2f:83:ee:70:28:7c:2d:
02:a8:ac:d7:30:85:ec:9d:18:9f:34:2a:dc:61:bc:
22:91:73:01:15:4f:b9:3e:e1:32:1d:30:1e:05:92:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:66:E3:0A:F3:42:A3:37:13:A0:63:D8:A4:1B:F4:6B:3E:0B:C1
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:e9:18:23:4b:5d:9b:68:05:6e:61:10:c5:3a:d2:4e:e8:
7f:cf:c8:95:0d:36:8b:19:82:a0:9a:f5:5c:a6:a3:f5:56:74:
36:62:38:4f:35:03:8b:bd:e3:d2:a5:29:d2:57:fd:f5:f5:35:
df:0d:b1:b7:00:6f:1a:65:32:33:5c:89:86:22:3b:b4:ec:34:
4e:03:61:cc:d6:21:94:91:d4:9e:99:55:09:e4:70:09:02:11:
ef:00:94:59:7c:94:f9:a4:0a:cf:a6:db:c4:5a:b8:15:38:b4:
8a:a5:40:1f:f4:de:8a:43:3d:77:99:d5:b2:f3:f2:af:59:ae:
7b:89:5a:10:d7:e4:b4:0a:6d:19:b5:ad:65:fe:b8:81:f7:a3:
30:1d:3f:3c:0f:fb:c7:32:51:6e:fe:5b:a2:7a:37:23:1a:71:
cc:1d:fd:c4:89:8e:a8:3f:fa:a6:e4:db:61:e2:a8:8c:82:ad:
60:2e:ab:fd:e0:e1:aa:da:31:f1:a0:12:53:d8:04:c3:d5:fd:
8f:a5:10:c5:49:f1:1d:2f:41:10:0a:6a:15:94:3d:63:f9:0c:
dd:97:f9:7b:0f:4a:d9:89:9c:b1:f5:32:11:ba:62:f4:81:3a:
5f:a5:49:2c:f1:1a:76:e9:e8:03:8f:7c:f4:c7:b9:50:07:02:
f6:92:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:06 2026 by rpki-client