Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: ZwzeWiTvf3g8uZwiMThFYS1c/VGfb57JCtgzMgcnIOE=
Subject key identifier: 02:D2:6E:C0:75:40:F5:FF:BF:DE:20:3C:82:42:5E:69:14:F6:26:5B
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019D28F2B1EC5A79BAA0172F353CFF132FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0C93
Signing time: Thu 26 Mar 2026 07:01:26 +0000
Manifest this update: Thu 26 Mar 2026 07:01:26 +0000
Manifest next update: Fri 27 Mar 2026 07:01:26 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: 1FEjdN0DBf4rkIrZJPwBebooXksRyMN8z221hyQyYL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b1:ec:5a:79:ba:a0:17:2f:35:3c:ff:13:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Mar 26 07:01:26 2026 GMT
Not After : Mar 27 07:01:26 2026 GMT
Subject: CN=02d26ec07540f5ffbfde203c82425e6914f6265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:75:8e:11:c2:e8:2e:62:91:ae:48:d2:20:
e4:fb:0f:8a:76:86:00:06:a4:fa:0b:6a:3a:b8:98:
ad:f3:72:ea:f5:88:71:2e:8c:44:10:f0:37:c8:3f:
b1:c5:ab:bc:b5:b3:e9:48:94:62:11:f8:07:5e:4f:
48:7f:63:96:ec:06:26:a0:76:c5:4d:01:d4:67:31:
0b:2f:e4:c9:4b:a1:0a:5b:05:17:d9:0a:be:a2:3d:
82:8f:c3:38:13:87:3f:68:1c:01:f1:a8:e4:c2:aa:
85:66:b3:68:11:d5:06:ed:69:84:50:ad:db:4e:0a:
9d:db:98:96:7a:35:04:70:c8:0b:88:63:10:58:91:
f3:c4:d3:d6:33:39:1c:21:46:84:ec:31:01:1d:76:
00:ed:16:a4:a1:dc:52:99:c8:a9:be:28:24:7e:93:
24:2e:09:bf:b8:b2:07:bf:e1:15:2d:9b:88:a9:56:
cd:dd:43:f4:1b:78:ca:34:31:eb:3b:14:0b:95:ca:
20:13:99:7c:66:cf:1c:8b:97:9f:aa:c5:f1:48:1f:
e1:e9:38:a4:71:ab:6a:ce:de:a9:47:c7:fd:8a:1d:
5b:d3:5b:20:e0:a4:ad:c8:de:58:2b:13:16:bd:87:
08:5e:b3:d4:d9:df:bd:d3:e0:5e:1c:cb:e7:52:3b:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:6E:C0:75:40:F5:FF:BF:DE:20:3C:82:42:5E:69:14:F6:26:5B
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:9a:5b:3b:57:78:f1:97:7d:9b:f5:6b:47:1f:27:cf:bb:
3b:40:f8:fc:0e:09:e8:65:e1:60:d7:ea:24:2c:d3:ca:9a:a8:
5a:af:11:50:ed:13:54:15:8a:8f:ab:5a:bf:30:7e:e5:6f:b3:
00:b2:85:1e:69:31:97:21:8b:fc:65:b3:bf:46:8e:bf:d8:3e:
e4:1b:2b:b8:d2:df:18:46:50:97:88:33:85:03:c1:59:bd:09:
3a:80:e5:a9:92:6a:7d:87:ca:28:5a:79:00:43:b5:c9:d1:06:
e9:ca:6c:7a:4b:a1:d1:b7:71:5a:83:c8:54:ae:09:9c:9d:74:
cf:fd:1d:e7:fc:27:ab:5a:95:8c:16:0a:27:d7:e6:62:a1:33:
d8:28:40:fc:3f:64:2e:6c:5c:10:db:c6:7f:7b:4f:bf:27:cb:
dc:bc:17:63:68:38:15:25:d0:ce:70:69:5f:75:d5:32:45:5e:
d3:87:ab:f4:cd:48:58:f6:e5:7e:84:9a:1f:b9:03:01:14:83:
8a:42:12:9f:73:ba:03:7a:db:c1:4c:4a:bc:f4:33:b0:28:6f:
90:fb:a1:b2:68:82:aa:d7:12:0a:bc:c2:63:6f:6e:ca:05:3d:
a5:70:29:58:bc:0d:53:e5:bd:70:bf:5e:b8:2d:ad:2e:e0:d7:
3d:68:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:10 2026 by rpki-client