Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: qJ+uzlHNHscqUjwwBiIxBBHz4qcfcV24IR8cyDmB9IE=
Subject key identifier: A8:85:D5:6B:48:8E:C4:8F:89:D2:03:46:73:5E:8E:48:70:DC:5A:3C
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019E2F9700FC2AA4BAFD5968B24CF9FDC0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0D1B
Signing time: Sat 16 May 2026 07:01:25 +0000
Manifest this update: Sat 16 May 2026 07:01:25 +0000
Manifest next update: Sun 17 May 2026 07:01:25 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: 8pfjK4WNX5Ih7qFVKc1u9TnjUTCL1fp9XWfxTO0zQeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:00:fc:2a:a4:ba:fd:59:68:b2:4c:f9:fd:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: May 16 07:01:25 2026 GMT
Not After : May 17 07:01:25 2026 GMT
Subject: CN=a885d56b488ec48f89d20346735e8e4870dc5a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:c5:3c:96:bb:11:63:f6:26:ba:2c:8b:a4:
c8:cd:ff:7c:84:2e:7f:5e:80:bd:95:78:e0:3e:76:
a9:2c:cf:ee:b7:7f:82:db:23:aa:2d:6c:e2:09:22:
48:41:1c:66:3a:de:f0:03:7a:d6:ae:ba:44:8f:db:
f8:95:31:b4:70:57:17:4e:66:45:28:5a:a3:27:73:
79:50:91:46:d5:5d:cc:0f:b1:f2:e2:e8:a5:cd:0a:
70:1f:b7:e1:b3:4e:fc:06:3a:e7:c1:9e:c8:ed:2e:
92:01:7b:f8:da:1c:15:14:c0:d4:5b:15:0f:44:52:
a4:9c:35:a5:86:41:29:fa:4c:e7:bc:6e:85:c7:ac:
b6:45:b4:c4:77:fc:86:79:c9:71:e3:37:ab:72:16:
7d:5a:ce:93:96:ec:c0:15:bd:e5:04:41:50:4d:25:
b1:09:a0:c3:78:f2:73:29:10:f0:98:2f:16:93:3d:
ab:c9:3f:68:0e:b8:0b:b2:b0:c7:9a:bc:6b:b8:47:
ec:d6:72:50:71:02:02:3b:6c:59:89:ca:3e:de:0a:
21:ce:5e:90:5b:a0:e4:d1:88:03:87:64:10:6a:ed:
0a:22:a2:89:83:ea:7a:f4:6b:b5:27:64:e7:67:7d:
95:8b:76:93:67:be:40:49:18:86:4f:a7:0f:7c:f0:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:D5:6B:48:8E:C4:8F:89:D2:03:46:73:5E:8E:48:70:DC:5A:3C
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:70:84:f0:d1:71:f0:bf:63:e6:b7:7c:02:e2:be:81:15:3b:
4c:ab:c1:a8:a9:a1:53:ca:57:b4:12:72:ba:79:26:d0:08:36:
9a:26:05:e3:9e:95:66:40:1f:91:79:08:a4:26:32:61:c7:b9:
70:a2:2f:56:40:b0:ee:ab:38:8f:a4:e9:6b:42:a5:19:53:ec:
94:90:b9:59:f1:fe:10:44:de:a3:50:13:83:8d:4a:47:6b:c0:
72:0d:9a:9e:e6:a3:4a:74:be:85:5d:4d:34:34:97:4c:cf:0a:
9e:02:01:b5:66:26:cf:09:86:ba:7a:a6:18:cf:f2:9b:6d:0b:
54:94:41:4a:bf:ac:3e:f0:6c:3c:f9:2a:83:52:d9:33:0c:9c:
10:36:91:cb:92:5d:83:fe:ad:e8:83:ca:74:c9:c7:dd:9f:15:
55:c0:0e:58:97:c2:c8:8b:d2:9c:f1:75:84:d2:6a:c2:d7:59:
44:ac:bf:8a:8d:86:bb:f4:5d:a4:42:c8:db:a6:cb:d9:52:64:
4c:26:b7:bb:bf:b5:73:37:84:46:81:a4:93:fd:77:e2:79:7b:
cd:ff:f5:8d:dc:e5:a9:45:bf:51:9d:58:20:dc:70:51:a1:cc:
99:e4:44:95:ee:6c:11:07:c6:13:4f:aa:36:4a:5d:f8:c7:7a:
c3:16:ab:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlwD8KqS6/Vloskz5/cDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODRhNDE5OTdlZWVhNGQwNWZjYzdjZDQwYjEyMTEzYTVi
YjY5ZTgwHhcNMjYwNTE2MDcwMTI1WhcNMjYwNTE3MDcwMTI1WjAzMTEwLwYDVQQD
EyhhODg1ZDU2YjQ4OGVjNDhmODlkMjAzNDY3MzVlOGU0ODcwZGM1YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ebFPJa7EWP2Jrosi6TIzf98hC5/
XoC9lXjgPnapLM/ut3+C2yOqLWziCSJIQRxmOt7wA3rWrrpEj9v4lTG0cFcXTmZF
KFqjJ3N5UJFG1V3MD7Hy4uilzQpwH7fhs078BjrnwZ7I7S6SAXv42hwVFMDUWxUP
RFKknDWlhkEp+kznvG6Fx6y2RbTEd/yGeclx4zerchZ9Ws6TluzAFb3lBEFQTSWx
CaDDePJzKRDwmC8Wkz2ryT9oDrgLsrDHmrxruEfs1nJQcQICO2xZico+3gohzl6Q
W6Dk0YgDh2QQau0KIqKJg+p69Gu1J2TnZ32Vi3aTZ75ASRiGT6cPfPD2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiF1WtIjsSPidIDRnNejkhw3Fo8MB8GA1UdIwQY
MBaAFNOEpBmX7upNBfzHzUCxIROlu2noMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUt
ZjZkMGZmNDU4NjQ4LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80OTA2ZmYtOWUyMC00MTE4LTlhYWUtZjZkMGZmNDU4NjQ4
LzEvMDRTa0daZnU2azBGX01mTlFMRWhFNlc3YWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHCE8NFx
8L9j5rd8AuK+gRU7TKvBqKmhU8pXtBJyunkm0Ag2miYF456VZkAfkXkIpCYyYce5
cKIvVkCw7qs4j6Tpa0KlGVPslJC5WfH+EETeo1ATg41KR2vAcg2anuajSnS+hV1N
NDSXTM8KngIBtWYmzwmGunqmGM/ym20LVJRBSr+sPvBsPPkqg1LZMwycEDaRy5Jd
g/6t6IPKdMnH3Z8VVcAOWJfCyIvSnPF1hNJqwtdZRKy/io2Gu/RdpELI26bL2VJk
TCa3u7+1czeERoGkk/134nl7zf/1jdzlqUW/UZ1YINxwUaHMmeREle5sEQfGE0+q
Nkpd+Md6wxar9g==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:53 2026 by rpki-client