Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: Zvrhhqzu0B/cBbL7sKAXYY5NUZDlX4b8ElBfMmlzWus=
Subject key identifier: B4:59:F0:C6:17:A1:B3:6E:0D:E6:67:45:3A:9F:38:0F:C2:D9:CE:DF
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019E1C46969CDAEB5B5B5228212D858F4DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0D11
Signing time: Tue 12 May 2026 13:00:48 +0000
Manifest this update: Tue 12 May 2026 13:00:48 +0000
Manifest next update: Wed 13 May 2026 13:00:48 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: vTF0oYtSfw5oTrhtfA2WpYpoFgJz0F/ddmD3PmFxD8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:96:9c:da:eb:5b:5b:52:28:21:2d:85:8f:4d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: May 12 13:00:48 2026 GMT
Not After : May 13 13:00:48 2026 GMT
Subject: CN=b459f0c617a1b36e0de667453a9f380fc2d9cedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:3e:1c:a7:a5:23:f5:65:3f:61:de:07:f0:
67:4e:9e:83:75:9c:d7:d4:83:d7:6b:67:8c:55:6f:
1e:10:9b:2c:02:b8:0f:b2:17:97:f8:be:02:de:08:
5f:4e:e5:b6:2e:cd:18:8f:1b:b9:20:42:71:54:e4:
47:3a:96:e0:70:30:69:45:9b:bb:b5:7c:5f:38:7f:
93:58:dd:a4:07:58:12:31:fa:c0:d7:55:f0:39:a8:
b2:9d:82:cb:c3:88:8b:2b:15:10:56:f2:07:58:c2:
82:24:bd:58:0a:83:be:f3:86:5c:fb:8d:b7:86:ad:
c3:44:bf:b7:a0:67:06:14:71:3d:a5:d9:85:b2:b6:
00:7a:6b:59:cb:9e:e3:3b:66:1d:66:7b:30:d4:e1:
42:96:2f:90:8e:90:05:b9:84:c5:3a:76:6c:52:35:
d5:fc:24:11:d3:6f:4e:9d:84:b4:81:e9:01:60:ab:
e8:5c:ad:eb:74:e6:31:56:c6:08:76:14:a1:c2:6e:
d3:bf:46:dc:3a:7e:11:7f:06:89:1a:19:be:79:1d:
2e:43:c5:6d:dc:2e:57:34:32:3c:e4:e1:ee:86:79:
59:2a:75:71:93:28:82:a2:57:5d:c0:8e:5d:85:09:
14:6d:97:d8:9f:0c:44:5b:93:f5:92:22:8e:f9:9f:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:F0:C6:17:A1:B3:6E:0D:E6:67:45:3A:9F:38:0F:C2:D9:CE:DF
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:52:b2:bf:b1:b8:2d:bd:28:cb:11:df:a6:e4:39:1f:96:
94:d6:d8:49:6f:65:53:e8:ee:5d:5c:1c:33:63:d6:8b:b7:3e:
ce:41:50:28:72:c5:58:da:fb:47:3f:ef:a8:e2:fd:5a:12:90:
38:48:e4:fb:66:d0:f9:cd:0e:e4:e6:a9:c5:65:54:8d:53:16:
a3:30:a9:33:cb:a9:21:9c:1a:da:b3:2e:5f:7e:52:62:7a:56:
4d:8f:8b:2c:6d:0f:1f:8a:9c:ff:44:f3:13:bc:4a:16:55:9c:
21:e1:68:6d:16:cb:f5:06:d7:7c:d1:7b:67:5b:b4:5e:6c:c2:
17:ab:70:b1:12:40:a2:e8:ee:7b:fa:e2:8f:18:79:5a:2f:c0:
03:48:66:d9:bc:91:fc:86:e5:43:c9:cb:6e:c3:c4:e0:2a:0f:
83:4f:ed:20:33:ad:87:dd:d2:c7:5d:4e:86:08:eb:ab:ec:a3:
4f:77:90:9b:a7:f8:36:9c:c8:e2:54:5d:10:b7:11:4e:fa:2f:
2c:54:01:e9:e1:c0:74:b8:49:e9:00:17:16:ab:47:cb:a9:c3:
5a:0c:ea:60:20:bc:55:e2:05:25:47:f0:d9:52:69:d9:be:13:
21:ce:20:51:a6:3c:f2:ff:98:99:07:52:5d:c9:1e:73:e5:f0:
61:36:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:12 2026 by rpki-client