Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: cWvjmrC5njGdqjx/FcMPQxdMjwEm8ZVr5I4NkgU2FjQ=
Subject key identifier: 29:5E:A2:71:2D:4C:4B:FB:C6:2A:B1:78:53:B4:01:55:F3:C8:66:C7
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019E1BD88E22D5A9262ECEDD538CFEADE63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0D67
Signing time: Tue 12 May 2026 11:00:37 +0000
Manifest this update: Tue 12 May 2026 11:00:37 +0000
Manifest next update: Wed 13 May 2026 11:00:37 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: 9X8ElEkxjJ8cEGP2FwUOUW6so7NrX4AgtDiHixUkVK0=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:8e:22:d5:a9:26:2e:ce:dd:53:8c:fe:ad:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 12 11:00:37 2026 GMT
Not After : May 13 11:00:37 2026 GMT
Subject: CN=295ea2712d4c4bfbc62ab17853b40155f3c866c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:8d:9e:4b:21:8a:19:7e:e8:93:d2:45:41:
cc:c2:95:ea:b5:26:99:c5:f0:2c:64:ee:5b:47:20:
36:1d:7f:f0:21:bf:7d:5f:08:6f:2f:58:8e:61:c7:
70:3f:c2:c3:b7:a3:d7:d1:9f:ee:a6:59:12:0e:53:
b4:92:e9:60:28:ee:8d:3c:2f:ac:01:55:74:61:80:
f7:b7:17:a6:bf:65:01:a5:21:6f:7b:8e:a3:5d:1d:
ba:82:0f:f5:37:f8:b1:15:f2:49:1e:1a:70:40:2f:
ce:be:3b:09:0b:5b:ae:c1:f5:86:e8:f6:f2:e0:69:
a0:a8:e7:87:cf:7f:5e:d3:04:a7:e9:70:78:eb:f6:
e1:f0:9f:2c:51:85:c9:61:bd:68:d7:90:db:f7:da:
4f:ef:ca:5b:aa:d5:fe:3d:ef:a8:0d:38:fb:f1:fe:
00:39:52:64:d9:c6:e5:a1:9b:81:07:33:76:ca:89:
83:37:46:16:54:1c:28:7e:75:44:8d:37:2b:08:ef:
ae:23:91:f4:5f:61:6b:49:11:02:35:70:af:76:ea:
27:b8:33:ba:56:84:5b:f4:84:2b:11:09:fb:8e:37:
a9:dc:52:36:6e:63:8d:33:6b:43:f0:f0:ed:b4:52:
d7:17:ab:1e:55:60:35:26:bf:e4:1e:f1:92:de:5f:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:A2:71:2D:4C:4B:FB:C6:2A:B1:78:53:B4:01:55:F3:C8:66:C7
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:de:dc:2f:97:39:23:06:31:9f:7c:82:fe:3e:03:95:d2:
2b:45:b2:a2:53:90:ce:a9:d3:fc:d3:03:92:ca:30:81:f4:11:
97:2d:05:dd:69:78:37:8d:11:86:a2:73:fa:c3:bb:a4:d6:30:
91:01:c9:a3:67:c5:88:56:f9:3b:c5:58:0f:db:b1:10:c3:3b:
31:b6:88:10:7e:fa:32:21:45:63:18:ac:e0:37:ba:7e:54:40:
e2:2d:ec:c9:72:db:84:c5:8b:b0:10:c0:e9:69:51:f9:76:2d:
75:05:2b:ed:85:0e:24:38:32:48:bc:8f:bf:86:1a:8c:a5:1e:
c9:49:37:f7:6e:8b:19:be:c0:a3:5f:9c:8a:d7:96:77:9d:e6:
fc:db:57:4a:06:9c:c2:5f:ce:86:65:91:50:53:f6:72:ef:38:
f9:e0:c0:5a:bc:09:f1:8b:da:e9:af:5b:b0:e8:9e:43:e2:95:
43:eb:9c:eb:f5:e2:dd:d3:31:91:53:67:7c:37:75:ae:e0:4e:
b5:6b:de:b9:40:ba:71:ef:10:bd:33:89:b5:61:7f:60:2e:60:
86:ef:3a:e3:2f:5a:0a:d0:78:ff:37:ae:3c:18:d4:18:e5:73:
6d:30:42:f3:23:6a:72:4f:fc:50:98:4b:da:9d:4a:38:47:6b:
da:28:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:44 2026 by rpki-client