Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: dPs4fqs9o1JLgTAvLH8411oOryguQ6r0ro49NL1ntyk=
Subject key identifier: 9F:31:6C:00:8E:3D:06:10:22:E1:9B:FA:9C:DB:1D:14:95:80:E5:32
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019D38667AD5DB0457D1585086B2B381057C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: Q65XMmaSsUmavRl6NL392lBe29ncbUx4Jmn57hMWsnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7a:d5:db:04:57:d1:58:50:86:b2:b3:81:05:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=9f316c008e3d061022e19bfa9cdb1d149580e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:be:b1:fb:ff:6c:62:e6:02:89:d6:7f:a2:
08:f3:5e:7c:09:2f:a3:68:9e:53:22:3f:42:b2:21:
e4:7a:3e:64:27:1c:e7:d3:3e:c3:98:88:dc:98:97:
4d:51:c2:05:01:22:f7:5a:20:ba:f6:6f:81:a6:5e:
21:2e:a4:7e:b3:29:e9:b3:53:36:69:77:6a:10:05:
53:a0:69:27:c5:3a:20:e9:0a:cf:6a:88:a4:2a:c7:
f1:0f:a1:4b:a9:f8:90:c6:a4:ec:12:26:70:e9:ca:
df:71:ac:3d:55:2e:2c:cc:fe:38:05:04:d9:d6:98:
cc:e2:a4:d5:96:30:41:d5:b6:13:21:0f:10:12:7f:
df:e6:50:cf:4c:64:c8:69:01:62:8d:16:27:a4:8d:
30:ce:de:43:0c:3f:15:91:1c:13:25:13:2d:72:3f:
2d:78:31:45:ef:5f:37:67:a8:e2:af:fa:57:08:08:
d8:3f:c4:ea:b5:fd:89:55:db:10:19:72:bc:a7:de:
34:c6:cd:c7:d2:eb:d2:da:54:3a:2b:9e:09:b4:b2:
0c:d7:db:9c:cd:06:73:42:76:a3:d5:c4:39:86:f3:
73:cf:57:81:8a:31:42:6c:d4:b2:f2:72:14:f2:c5:
1c:4e:e6:1d:57:88:dc:eb:e2:c0:5a:51:e4:c5:53:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:6C:00:8E:3D:06:10:22:E1:9B:FA:9C:DB:1D:14:95:80:E5:32
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:27:f2:e2:6a:44:48:b8:58:af:ff:5c:75:4c:57:9f:95:
89:13:1f:52:e0:11:3b:01:0a:e2:bc:e6:00:f9:53:f7:3e:15:
5a:22:5e:37:09:29:9e:83:ad:e7:a2:e9:0f:98:d4:f7:ed:73:
33:ed:53:0d:a5:ab:30:9b:01:3d:e7:a2:ed:b2:b4:51:6c:75:
66:bf:6e:e0:06:66:ec:db:91:b0:9b:01:bd:22:96:44:cd:f6:
e2:30:dc:79:fd:8c:e8:0e:84:cb:81:2c:f8:28:60:0a:d1:bc:
62:a1:82:6f:d4:32:63:c4:77:e6:aa:c8:01:bf:ba:ef:ce:d4:
c0:80:1a:3c:7a:68:af:b4:4a:48:91:8f:49:e3:8f:7d:7e:25:
79:5d:eb:12:f7:32:5a:ab:e8:cd:36:83:6e:89:25:48:1c:25:
c0:55:a3:0e:ec:44:0f:c9:d5:aa:28:f8:d0:ef:51:7f:f9:04:
d5:06:56:f9:18:98:db:7f:a6:73:db:67:1f:2a:fe:40:06:83:
b2:48:51:31:8d:80:6b:19:6f:1c:d3:0b:c4:8a:8a:a7:cf:f7:
db:13:67:3d:d8:01:44:5d:31:28:6c:cf:46:e3:2e:3c:07:df:
f3:66:c5:73:85:e1:51:a7:1a:ec:38:1f:0a:f1:c4:62:2b:82:
00:b4:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:22 2026 by rpki-client