Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: +EGTrKLtjImvMgIBUz7qYSWQAjWtESB8M7zbd5gFuis=
Subject key identifier: B3:E6:EC:30:B9:05:A2:84:CD:36:71:D5:6C:9C:A1:D1:D0:CE:C1:78
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019D9AE388477D528660C7CDE8DDD387063C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0CCE
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: tR87UiCSyPDUiGgQAvKd16iXzPNoYA32vVLar3kEXoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:88:47:7d:52:86:60:c7:cd:e8:dd:d3:87:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=b3e6ec30b905a284cd3671d56c9ca1d1d0cec178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:51:e7:64:d9:88:6c:b4:8d:34:5d:70:b8:
7f:78:d9:45:ff:ad:d5:8b:2f:df:2b:f7:da:d7:2f:
80:88:a3:4b:83:64:9e:74:71:70:59:05:81:15:03:
88:69:6c:a9:cd:d2:a7:ea:a7:4d:e3:0d:d4:33:22:
1f:e5:05:fd:10:9e:52:cd:7b:2d:7d:7b:b9:24:fd:
aa:e7:a8:7a:9e:12:af:2c:c5:07:07:75:79:1a:87:
5f:90:c7:b9:8b:01:93:ac:42:c9:86:21:e4:f8:64:
cb:3e:cc:06:da:8e:28:33:00:43:e2:68:2c:50:d9:
2b:8c:6f:24:d6:ad:5a:b1:5b:c2:e7:5e:87:58:b0:
bc:87:2f:8d:5b:d5:bb:50:a2:60:08:21:ab:97:68:
ff:25:fe:10:21:3b:af:48:ed:d9:6f:0a:f0:f4:c4:
d3:10:53:17:ae:73:cf:65:23:91:9c:d4:da:84:02:
f9:4f:93:9e:dc:95:78:b6:7a:8c:5b:3b:93:20:61:
0a:ab:05:de:4d:9a:78:db:c7:b4:da:24:a5:db:9b:
7e:52:44:a4:c2:48:ee:18:74:f0:26:6e:c1:d0:be:
38:8d:7a:d4:92:0c:b9:8c:33:8a:85:09:21:f9:35:
87:26:a3:3f:a0:73:fd:a6:69:5b:65:17:91:e5:3d:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:EC:30:B9:05:A2:84:CD:36:71:D5:6C:9C:A1:D1:D0:CE:C1:78
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:29:cc:75:d7:4e:40:43:41:5f:57:51:20:36:cf:96:b5:ff:
e0:0f:2a:8a:fe:5b:18:1c:b7:5c:b1:63:7e:39:55:36:4a:08:
47:65:a5:20:20:93:6b:5c:d1:31:f6:63:fc:b9:e1:92:16:35:
96:5e:35:a1:76:c1:3f:ac:46:4f:08:e0:2e:55:91:d1:26:bb:
26:85:fa:0e:0f:7d:cf:0d:73:da:51:3e:a2:a6:5a:9f:50:a1:
39:11:f9:33:50:0b:b7:73:96:12:f3:a5:bb:3f:94:69:20:dc:
6f:95:3b:22:5f:9c:c6:ff:ce:b1:5f:0f:b7:1c:10:5d:d9:7a:
3b:da:b8:f1:f2:bf:4f:c3:52:7e:f4:64:fd:91:c2:d4:1c:b0:
37:2f:5c:79:db:76:3e:15:6b:7f:fe:d2:7b:cb:a9:58:d4:05:
f1:bf:a4:e8:5b:5d:de:4e:fa:12:38:af:52:81:09:58:a9:f4:
60:32:ae:53:5c:11:58:96:92:8c:78:a7:f2:68:36:cc:d6:0a:
d9:0d:ab:5e:92:b7:89:e0:ed:a5:c1:a6:63:8b:c7:10:54:55:
79:72:c5:2e:ca:2c:32:59:a0:2c:39:c9:32:45:94:88:87:2a:
f0:7b:13:f2:a1:7c:7e:5a:37:19:87:0d:98:eb:7f:f7:6b:25:
b0:b4:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:14 2026 by rpki-client