Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: XoHKeBAve3N+fn+qdp9fdVKVBFOZzhKAKmL25d7yWZ4=
Subject key identifier: B8:11:E3:F0:6B:49:B1:12:6D:A8:4A:B7:6A:73:2F:BC:A9:BA:04:20
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019EC25C27FF3218B57B3180F2E4898C3B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0D67
Signing time: Sat 13 Jun 2026 19:01:19 +0000
Manifest this update: Sat 13 Jun 2026 19:01:19 +0000
Manifest next update: Sun 14 Jun 2026 19:01:19 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: aEaO2y0jBfG0XjPBhocpHcP2YroCbC2yhuP0G8TAYZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:27:ff:32:18:b5:7b:31:80:f2:e4:89:8c:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Jun 13 19:01:19 2026 GMT
Not After : Jun 14 19:01:19 2026 GMT
Subject: CN=b811e3f06b49b1126da84ab76a732fbca9ba0420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:d5:56:7a:5e:65:9d:6c:37:a0:e8:ed:11:
9f:87:85:ef:0e:68:bb:e4:05:2a:59:a6:c8:58:85:
c8:56:e2:e6:36:d0:da:b2:a0:5d:b2:1a:89:1d:2d:
18:b6:d4:a8:e3:b4:cd:46:18:03:a0:ae:e3:90:88:
e7:a6:76:09:16:c8:9d:95:13:b8:ae:d9:e7:9b:c1:
16:58:67:34:90:05:ea:7c:e3:65:4c:c3:de:9f:2c:
1e:7f:be:01:f5:d7:d7:9b:ab:9c:eb:9b:85:0c:75:
db:91:78:92:a4:1a:61:c5:12:dd:7f:f9:b5:f5:7c:
77:ed:fc:ef:d1:9b:40:d5:85:7b:14:19:99:cd:cb:
24:72:45:ab:52:12:5f:05:4e:49:1e:91:94:12:4e:
c1:f1:82:51:c3:eb:b2:20:59:d0:62:2d:57:be:a5:
3d:4a:33:c3:16:f7:ca:70:36:0d:9b:53:23:79:92:
23:3e:0c:1b:3d:6d:11:a2:95:4b:50:09:05:ba:9d:
a7:a6:3e:85:b5:0d:b2:ef:04:3e:6a:93:47:1f:3c:
80:14:a6:8c:b0:a4:55:30:7f:9b:3a:c3:40:32:e1:
b0:f7:80:47:a2:2b:8c:1d:6b:ab:73:02:01:77:9d:
65:63:69:7c:3d:38:8b:51:ef:b5:1f:fc:4a:68:7d:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:E3:F0:6B:49:B1:12:6D:A8:4A:B7:6A:73:2F:BC:A9:BA:04:20
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:92:df:88:ea:bd:4d:a2:53:0f:c1:8c:47:65:46:59:10:41:
49:46:ad:4b:95:fb:8d:8d:dc:5e:8b:67:cb:f8:6b:da:6c:6e:
34:cc:55:79:0c:a0:0a:13:09:e3:56:3f:d1:93:0d:25:75:27:
57:73:e5:30:0c:f5:e4:c7:ed:77:2d:be:60:45:ca:82:81:c9:
36:44:8b:60:f6:74:0c:d9:b3:0a:f1:dc:da:50:fc:3c:a9:1a:
7a:8b:6a:b8:59:18:13:c7:f9:83:d9:5f:79:07:83:4f:8e:4d:
42:9c:75:3d:44:6f:20:c4:cf:61:cc:65:00:87:f2:f9:a8:8c:
ac:2a:8a:ad:d2:53:7e:88:43:6f:75:a9:8c:d5:10:65:68:96:
b9:65:7a:0a:98:0b:c4:5a:45:47:84:47:10:3f:09:eb:6d:e8:
ae:ff:fb:57:7a:6f:a6:4a:4d:f0:7f:a4:26:05:6a:09:5c:d0:
f8:36:ad:db:49:c3:8a:7b:96:72:36:17:6d:dd:a7:f9:93:17:
0f:a4:c1:11:d2:b4:03:ec:8b:d1:6b:64:1d:56:80:46:c2:42:
bb:90:de:f6:b4:99:cf:ed:03:92:97:38:f8:b0:ff:48:cf:ec:
ca:88:70:de:ce:e3:62:e7:e2:e3:6e:77:b6:0a:aa:ed:ae:5b:
7a:5d:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:38 2026 by rpki-client