Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: +xwVRRseanLyPU2tkKzm/muzHxCqkychb88e1pgAmn8=
Subject key identifier: B4:E2:5F:49:3D:23:B6:04:8E:4D:93:BE:0A:15:CF:E3:38:B6:D6:7A
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 01A14B3D148D44F7E8C629F94AFD37AD40BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0EB9
Signing time: Sat 17 Oct 2026 19:00:56 +0000
Manifest this update: Sat 17 Oct 2026 19:00:56 +0000
Manifest next update: Sun 18 Oct 2026 19:00:56 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: mvQ4SXktA5O6wBSw9WqGGT7ug0sPdGRb1jDGz0eAn2s=)
2: 9yzmPh8oJfNBPMrq7efMNmGgI74.roa (hash: VyVDyXa6TLgVb+XPY7hwuidc/KWJQPprmyizLUlblqE=)
3: w6eclGmKjMAUjq7V9uc1FML1-2I.roa (hash: bCyMAOYHLv+yGiUSeC+OdAVQhKwwCl26DAu4AQkhkIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:14:8d:44:f7:e8:c6:29:f9:4a:fd:37:ad:40:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Oct 17 19:00:56 2026 GMT
Not After : Oct 18 19:00:56 2026 GMT
Subject: CN=b4e25f493d23b6048e4d93be0a15cfe338b6d67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:99:b0:21:ea:f4:92:b3:84:18:67:54:31:
36:cc:af:ac:10:49:a1:b4:16:20:50:9d:23:25:8c:
f6:86:93:dc:90:f7:a7:16:f9:09:e1:21:bc:50:66:
34:13:63:2a:08:f9:ff:a9:9c:6a:bb:32:24:95:ae:
c5:77:54:62:1e:14:2f:20:5e:95:aa:32:a7:f6:26:
4e:1c:62:af:c5:27:25:0b:89:3a:38:c1:bb:8d:0c:
ba:f9:fd:5e:66:32:a1:3d:1a:a6:61:0f:73:9d:14:
8c:56:ff:8c:e0:2a:63:e2:cb:e9:a5:17:cd:0f:5b:
bf:88:db:fc:f0:d5:b1:93:5f:46:8f:b9:9d:95:99:
80:b3:42:89:60:86:4a:b1:eb:11:3d:b9:35:bd:5d:
08:3f:06:d5:8c:fc:46:2d:06:c1:f0:d9:24:2a:b9:
a5:21:20:31:9c:18:13:18:25:74:d0:6b:6a:cf:05:
8a:3d:e1:ff:80:75:8d:de:72:1d:9d:1f:c9:43:07:
3c:32:92:33:11:bc:82:9a:b8:a1:81:d2:0a:15:9f:
0c:c0:d2:d7:d1:68:1d:8a:cc:1e:67:11:b6:ae:dc:
05:27:3c:25:30:b7:53:ad:8d:f0:1c:6d:87:8e:0d:
26:95:54:21:21:28:0e:d2:24:f5:01:d1:ca:fc:c3:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:5F:49:3D:23:B6:04:8E:4D:93:BE:0A:15:CF:E3:38:B6:D6:7A
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d7:c0:d8:4a:86:71:c0:f6:7e:89:4f:a4:ed:09:e7:0a:98:
ff:d9:02:59:89:1e:59:a5:8c:6d:c6:d8:e2:9c:5c:9a:cf:a0:
76:db:2f:4f:5c:a6:89:37:78:d7:bc:c8:82:17:39:a2:f8:bd:
54:bf:3d:16:3e:15:9a:b4:04:e2:28:cb:a3:01:64:ab:5c:e3:
83:af:5e:0f:2c:3d:54:bc:2d:64:2b:6a:0a:1d:e9:fb:d9:9f:
5c:b5:7f:df:d3:13:7b:b0:ed:a4:f7:5c:75:13:dd:88:f9:51:
cc:8c:c5:56:d0:d2:ae:51:21:63:d9:d1:91:30:d0:42:28:4e:
43:b2:a1:84:19:b4:e8:ff:7d:70:67:c7:2c:d1:c4:8b:5c:d1:
cc:ea:4d:7d:ac:d1:cd:17:02:4d:fa:79:c5:a0:85:c3:67:89:
13:7f:1c:0d:be:28:28:02:9b:e1:a6:0b:e7:55:02:35:89:0b:
d8:4d:59:a7:73:80:eb:b3:00:73:21:5b:55:1f:3f:91:46:8b:
c0:18:c2:0e:b6:e1:2c:4a:87:65:1b:2f:fe:5e:de:67:56:61:
76:74:83:fd:5f:c6:09:27:6b:2d:2e:c8:c5:11:6e:0c:80:b2:
0f:54:a0:3e:23:2d:9b:3f:61:e2:92:87:db:e6:22:d8:d5:69:
ed:75:e2:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLPRSNRPfoxin5Sv03rUC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi
YjY5ZTgwHhcNMjYxMDE3MTkwMDU2WhcNMjYxMDE4MTkwMDU2WjAzMTEwLwYDVQQD
EyhiNGUyNWY0OTNkMjNiNjA0OGU0ZDkzYmUwYTE1Y2ZlMzM4YjZkNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEiZsCHq9JKzhBhnVDE2zK+sEEmh
tBYgUJ0jJYz2hpPckPenFvkJ4SG8UGY0E2MqCPn/qZxquzIkla7Fd1RiHhQvIF6V
qjKn9iZOHGKvxSclC4k6OMG7jQy6+f1eZjKhPRqmYQ9znRSMVv+M4Cpj4svppRfN
D1u/iNv88NWxk19Gj7mdlZmAs0KJYIZKsesRPbk1vV0IPwbVjPxGLQbB8NkkKrml
ISAxnBgTGCV00GtqzwWKPeH/gHWN3nIdnR/JQwc8MpIzEbyCmrihgdIKFZ8MwNLX
0WgdisweZxG2rtwFJzwlMLdTrY3wHG2Hjg0mlVQhISgO0iT1AdHK/MPWHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTiX0k9I7YEjk2TvgoVz+M4ttZ6MB8GA1UdIwQY
MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt
ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4
LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtfA2EqG
ccD2folPpO0J5wqY/9kCWYkeWaWMbcbY4pxcms+gdtsvT1ymiTd417zIghc5ovi9
VL89Fj4VmrQE4ijLowFkq1zjg69eDyw9VLwtZCtqCh3p+9mfXLV/39MTe7DtpPdc
dRPdiPlRzIzFVtDSrlEhY9nRkTDQQihOQ7KhhBm06P99cGfHLNHEi1zRzOpNfazR
zRcCTfp5xaCFw2eJE38cDb4oKAKb4aYL51UCNYkL2E1Zp3OA67MAcyFbVR8/kUaL
wBjCDrbhLEqHZRsv/l7eZ1ZhdnSD/V/GCSdrLS7IxRFuDICyD1SgPiMtmz9h4pKH
2+Yi2NVp7XXieA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 23:53:33 2026 by rpki-client