Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: QhQTM22nh/hGq4z294RqpX9H0sfmVxI8/we1lQgB1+c=
Subject key identifier: CE:3E:38:F6:20:6B:50:89:41:18:87:E0:E0:C9:97:04:44:AC:8B:27
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019F90FE685B6FA1E8BF5658C15A09808AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0DD2
Signing time: Thu 23 Jul 2026 22:00:19 +0000
Manifest this update: Thu 23 Jul 2026 22:00:19 +0000
Manifest next update: Fri 24 Jul 2026 22:00:19 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: jk0RAa5AKVQHQf9WfPo4OnBlYK/9r3n0t+SksHr++Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:68:5b:6f:a1:e8:bf:56:58:c1:5a:09:80:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Jul 23 22:00:19 2026 GMT
Not After : Jul 24 22:00:19 2026 GMT
Subject: CN=ce3e38f6206b5089411887e0e0c9970444ac8b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:57:19:47:77:f1:9a:81:e0:f9:03:9b:19:
6c:ba:aa:94:bd:58:81:dd:8f:b7:9e:36:0a:66:ff:
85:2f:06:9f:cb:2d:27:fb:c1:17:1d:3c:05:f5:71:
e9:e5:b1:a7:fc:77:e0:8a:1b:00:59:0b:a3:5a:6b:
3d:68:6c:b4:37:05:06:6c:3d:18:bb:64:09:97:2d:
e1:4a:e2:c6:2b:e2:b7:ee:5e:a9:8d:03:71:45:cb:
8a:da:6d:b1:9d:3b:3e:4b:7a:55:11:1a:11:39:6b:
a5:81:ec:51:f8:30:ce:9d:0d:d8:f2:25:16:e9:6d:
48:e9:bc:3e:64:a2:53:6d:da:fa:fe:04:3d:8a:11:
1b:a4:bb:88:5a:76:65:dc:0d:b6:68:14:ca:a8:29:
b1:c5:e1:42:7c:43:d5:40:0b:a0:52:0f:10:f7:6b:
4f:11:3b:f6:bd:f8:08:cd:d8:d1:07:9a:f1:4d:97:
25:ff:d4:8a:d4:96:b0:0d:7b:94:ca:d4:b2:a3:e9:
07:68:91:a5:de:cf:91:c0:86:4e:ab:3d:67:de:85:
a4:3b:1a:1a:45:a8:56:ea:ef:32:47:a1:39:79:67:
e2:30:06:56:bb:4c:3e:6e:05:99:e3:c8:84:ab:08:
ee:f9:80:cb:d7:7e:04:05:c0:87:73:54:de:49:5f:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:38:F6:20:6B:50:89:41:18:87:E0:E0:C9:97:04:44:AC:8B:27
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:db:1b:cc:2a:64:f2:69:18:04:2f:fd:54:f7:91:13:b2:
7b:7b:dc:4a:c4:e0:6b:8f:9c:57:d3:45:16:6d:b8:66:53:02:
ed:5e:7c:2d:78:a1:d4:9e:a4:e5:81:79:a9:10:dc:2f:14:3b:
7f:18:29:fc:f0:f0:56:95:9e:cd:fe:56:f9:c4:ee:58:9e:6a:
bc:df:4a:95:f0:33:f2:d1:ff:85:2d:7d:6f:a6:08:d3:b2:67:
f9:78:cc:87:ba:a6:a6:16:13:01:99:8d:cd:fa:05:cf:8f:b0:
7c:2f:8b:d0:8d:a8:7c:93:60:9d:6e:28:1b:d6:d0:9a:87:2a:
37:6c:56:02:6f:50:a0:b4:92:94:43:cd:15:68:8a:a9:a3:db:
f3:47:f4:92:9c:38:ac:e8:97:a0:82:b8:dd:51:fe:db:22:47:
22:85:12:a7:e9:34:a5:ce:72:c8:59:ca:0d:8a:0f:29:ed:86:
59:47:ab:8e:ad:90:ba:b8:b9:db:75:66:66:1e:cf:b8:c4:56:
ce:e2:8a:9e:e5:fe:83:46:2b:1c:ef:f7:d4:4b:74:fb:86:e9:
f9:cd:e5:b4:e6:5a:9e:21:06:76:df:a0:d4:99:05:3a:49:eb:
f0:74:dd:bd:95:7b:5e:d6:6e:30:4f:43:34:89:63:58:33:0f:
1e:a7:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:02 2026 by rpki-client