Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: Yfy8HcktiiMAxl9DCVxbyhxpnMjrAn0GrfYSkZkyvGk=
Subject key identifier: 14:EA:8C:3D:47:0A:1B:48:44:76:DB:64:45:D3:B6:C7:A6:DA:35:E0
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019F18D6836610EE0F2F8A07FC4B67469B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0867
Signing time: Tue 30 Jun 2026 14:02:19 +0000
Manifest this update: Tue 30 Jun 2026 14:02:19 +0000
Manifest next update: Wed 01 Jul 2026 14:02:19 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: xBoiHSZCHfW/Cmpi8n6erETN4CKfLjIFNW9sh0eTk70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:83:66:10:ee:0f:2f:8a:07:fc:4b:67:46:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Jun 30 14:02:19 2026 GMT
Not After : Jul 1 14:02:19 2026 GMT
Subject: CN=14ea8c3d470a1b484476db6445d3b6c7a6da35e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:66:37:9a:af:dd:13:0b:c6:aa:fc:93:6c:
67:4f:32:e7:23:1f:24:7d:a1:b7:8f:69:63:aa:a3:
95:14:af:ca:98:9a:46:8e:7b:66:87:43:90:5b:02:
0e:21:b5:a5:ff:23:c7:d7:6b:60:37:91:9a:4b:dd:
ab:bc:f5:09:40:5f:fe:03:3b:ea:3a:65:91:27:5a:
58:25:d7:76:3e:fc:d6:f8:ae:40:6e:c5:ff:67:76:
d4:31:02:80:95:70:f5:29:1a:34:f9:bb:37:11:24:
c9:0f:8f:ca:65:5e:38:28:a4:3a:58:3e:54:32:9a:
9a:82:8b:18:5f:14:c8:13:97:28:ad:3c:54:fd:13:
cd:12:0d:7d:6f:a7:8a:db:3c:3f:b4:84:46:88:b9:
fc:a0:93:51:d3:54:58:32:62:0f:8e:28:82:39:cb:
69:e8:98:18:df:1c:2c:9a:b8:df:be:1b:6f:4f:ed:
fd:77:33:52:61:c9:58:2b:92:37:a9:9d:20:e7:cd:
68:26:ec:f8:05:fa:be:4f:a6:49:13:77:81:53:4f:
ca:2e:27:6c:56:02:a8:cd:73:48:db:a2:2f:4b:d6:
68:fe:d9:7d:79:6b:83:1b:ee:3a:e4:8c:07:06:de:
d1:bb:eb:a6:c2:7a:37:e3:7e:1e:4e:0b:22:8b:a3:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:8C:3D:47:0A:1B:48:44:76:DB:64:45:D3:B6:C7:A6:DA:35:E0
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:33:76:e6:ae:82:24:12:38:f0:44:1a:f4:3b:ff:6a:16:
46:44:1f:66:47:7e:ad:a0:55:b3:c7:e8:08:6b:b6:98:ec:f6:
17:20:2e:ec:58:30:71:1c:90:84:7a:e8:aa:93:20:e2:ae:ad:
57:cb:e6:d5:03:de:01:31:35:3b:32:74:cd:b3:c6:02:b9:da:
8f:e1:c3:3d:a7:78:d4:38:9b:c2:5e:07:3f:71:eb:8b:82:06:
f7:7a:5c:9d:71:b5:6f:8f:40:b3:7a:11:18:cc:df:63:52:30:
13:4f:4d:27:7a:04:d9:2c:29:9b:db:93:c4:45:96:aa:05:ed:
53:46:f7:23:b4:74:f3:ed:a9:9b:4a:3e:96:d7:3f:29:0e:21:
46:68:8a:b3:e9:e9:5a:80:39:31:eb:db:e2:bf:99:ce:ff:3e:
6b:83:29:c6:48:14:b4:75:86:76:9c:65:f9:8c:b8:4b:d0:b4:
1c:25:96:58:17:ad:72:36:15:45:55:b5:d4:c2:fb:9f:a3:9d:
b6:ec:84:ae:e4:1c:03:a8:a9:a2:ba:95:27:32:52:c2:49:e8:
95:82:7d:77:4d:ee:cf:e1:61:c6:66:94:9f:4e:57:3e:09:60:
d6:12:68:f4:47:44:23:74:b9:41:35:e9:8f:a7:a3:b2:f7:46:
0e:e0:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:49 2026 by rpki-client