Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: c70fYte78dG1hBL5Sw+RexynM70UBYfnjp18bCFL0ik=
Subject key identifier: 03:1C:93:7D:F5:09:CE:1F:F0:5E:D9:32:80:70:EF:E2:42:E3:46:1F
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019D26964E6C8AD588770D0201E29F4393C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0CE8
Signing time: Wed 25 Mar 2026 20:01:17 +0000
Manifest this update: Wed 25 Mar 2026 20:01:17 +0000
Manifest next update: Thu 26 Mar 2026 20:01:17 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: zKtuJgCCWDjbRdbJTofSVjop2+P80nX7k+4KXX/TpJM=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4e:6c:8a:d5:88:77:0d:02:01:e2:9f:43:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Mar 25 20:01:17 2026 GMT
Not After : Mar 26 20:01:17 2026 GMT
Subject: CN=031c937df509ce1ff05ed9328070efe242e3461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:15:9c:a4:9d:88:4a:c5:d6:fb:5d:1c:7e:
83:96:a9:ad:b3:0e:24:38:af:10:15:26:89:fc:be:
fd:15:03:b1:79:98:63:b1:9d:32:75:7c:93:aa:8c:
13:bc:89:68:77:ad:8c:cc:62:5f:21:a2:cb:58:65:
c5:49:c7:af:23:d9:a4:ff:44:99:6c:f9:07:bb:16:
a3:bc:be:83:de:d8:84:b0:2f:e1:c8:5b:df:77:37:
87:f6:5a:7b:4d:68:56:c9:40:2b:62:8c:a2:c6:25:
7e:02:fd:be:a9:79:b2:25:3d:d0:db:1f:45:44:d0:
e6:4a:e4:5c:da:56:3d:a0:0a:53:6d:d2:c5:04:e2:
b2:2a:0f:68:31:5f:71:1c:02:d1:7e:bc:61:a9:e7:
8f:b5:e7:66:2b:96:5e:0b:28:65:72:43:db:54:b8:
c9:d1:0e:c1:55:67:09:b2:2d:38:4c:85:a8:30:0b:
bc:aa:9e:80:43:23:7b:b4:f6:5a:1f:9c:9c:a8:59:
a7:78:ed:95:12:39:c2:1e:2b:af:94:00:76:f7:70:
ff:9e:46:40:0c:c9:6b:db:ba:56:ec:0e:a6:93:8f:
71:2d:07:21:32:2f:69:30:5c:28:bd:de:f2:7c:b2:
d5:fe:61:b4:72:42:e4:71:02:17:e6:69:61:0e:38:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:93:7D:F5:09:CE:1F:F0:5E:D9:32:80:70:EF:E2:42:E3:46:1F
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:d5:da:c0:6f:07:c9:b4:1b:9c:8a:63:39:5f:31:3f:aa:
b8:f5:15:10:7b:e4:de:c2:24:9a:d3:e7:3f:38:d2:5a:62:bf:
d1:fe:29:2b:2e:e0:06:18:16:42:e0:31:14:4b:15:52:2f:96:
6c:30:b1:6f:d1:63:47:8a:73:c9:ae:3c:a5:b0:0e:f9:e4:99:
d8:18:2b:43:12:06:84:1a:47:df:42:96:eb:0a:4e:2f:12:07:
2a:1d:22:32:1a:15:b6:26:1a:0b:89:19:ce:d7:4a:7c:72:a8:
bb:bc:7a:a9:e5:37:64:af:64:ad:3c:91:e3:3b:61:f3:b6:17:
5c:df:61:26:8a:b1:43:3e:d6:a7:c6:8b:7c:75:2e:97:ba:29:
77:9d:ef:28:55:ec:5a:5f:17:bc:70:c7:e7:c9:43:40:3b:23:
b2:c6:ba:d8:6a:a9:b7:a9:6b:59:cd:fa:00:00:8f:bc:19:2a:
a6:d9:c6:b7:aa:1e:03:8e:5f:19:39:fb:f6:64:7f:30:ab:f9:
54:33:a7:bc:33:33:ad:51:23:fc:e0:ee:da:42:e7:93:bb:bc:
f4:a3:02:57:de:8e:af:4b:2e:80:26:97:90:71:85:ef:97:74:
95:b0:45:7a:9c:46:d1:cb:b4:9c:0b:0c:92:71:36:12:e6:7c:
08:4c:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:47 2026 by rpki-client