Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: 5F74Cm7vd9VZIu1vs+LEIriK05a1O9E0Tyfpy/GQDDI=
Subject key identifier: C1:C7:2F:06:07:BC:C7:C2:FF:4C:7A:B2:09:76:F4:FA:CE:11:6F:F0
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019D37F7A0621626E9CA5F8E73FCA4ED9548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 076E
Signing time: Sun 29 Mar 2026 05:01:08 +0000
Manifest this update: Sun 29 Mar 2026 05:01:08 +0000
Manifest next update: Mon 30 Mar 2026 05:01:08 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: PLiZnD/gAEMfOMqTncaJBKXvic7wxu2K6LQzYT2PE1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:a0:62:16:26:e9:ca:5f:8e:73:fc:a4:ed:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Mar 29 05:01:08 2026 GMT
Not After : Mar 30 05:01:08 2026 GMT
Subject: CN=c1c72f0607bcc7c2ff4c7ab20976f4face116ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:0d:f9:1f:a8:88:eb:71:14:76:c6:ff:f3:
1f:4f:22:2f:8b:5c:2c:e5:5d:27:77:80:38:ae:73:
5c:f8:03:ca:a0:e5:27:93:c8:61:4e:cc:76:a0:34:
9d:37:c7:01:b5:75:24:07:81:6d:83:35:1d:e6:a8:
27:64:3e:a2:bd:b7:8d:ab:81:7f:13:dd:ef:9f:83:
5f:27:0c:b8:36:f2:1c:76:10:83:a5:e7:0e:ce:a1:
a2:98:4c:9f:d3:6f:b6:60:e2:ec:8c:f0:a7:b5:e3:
da:d6:a9:d3:46:c9:88:b3:49:2d:bf:f0:77:64:a5:
b7:29:ac:78:25:52:d6:1b:0e:d2:a9:24:b9:21:3b:
e2:28:f3:61:e7:3b:f3:7c:e5:6c:93:77:9f:9f:9f:
9e:e2:b0:75:2a:0f:42:25:03:ae:5a:16:57:9e:68:
0f:83:a9:88:4f:31:40:00:da:a9:31:0a:08:6c:bc:
37:1e:89:3e:bc:e0:b7:01:d8:27:f4:6b:91:2b:a2:
93:31:a3:71:b1:ba:37:19:9c:b1:30:fb:45:19:06:
57:f2:65:8b:fa:5c:fb:e0:cb:80:a8:ba:31:29:fc:
58:61:e5:4d:80:e6:4e:8d:aa:77:bb:16:81:3b:8d:
fb:ce:72:8a:95:11:74:fc:e1:8d:44:09:a0:0e:e6:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:2F:06:07:BC:C7:C2:FF:4C:7A:B2:09:76:F4:FA:CE:11:6F:F0
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:11:61:5e:98:a1:e2:3a:9d:80:8b:29:0a:da:01:47:1a:74:
8c:94:70:a3:97:30:40:74:a0:94:96:1a:df:25:a5:ea:49:01:
ae:a4:f6:23:d5:98:8f:16:14:7e:a4:49:e8:95:80:d1:3b:2b:
b6:e9:44:de:0c:c9:3e:29:b8:87:f4:54:c2:02:20:2a:e7:b5:
83:cd:18:ec:72:8a:c7:af:9f:9d:5b:15:8f:0b:36:2a:2b:d3:
fe:03:c7:70:6b:85:74:22:16:e4:f9:48:8f:ed:be:bc:2a:d9:
86:cb:82:1d:17:5f:c1:81:16:be:15:05:cd:c9:0d:6d:b4:b3:
00:83:96:3f:ca:43:09:46:bf:1e:73:ab:62:5d:f2:e2:b5:47:
af:8b:a9:1d:6c:65:33:3c:00:7a:86:9e:57:0f:45:4e:b1:e7:
3a:81:69:74:ee:11:de:91:b4:a3:40:a0:26:6c:90:80:31:82:
40:6e:2d:8a:09:05:89:9d:05:cd:4a:d3:05:fc:7a:61:8c:20:
15:94:ae:68:a4:10:f0:95:3b:cb:01:f2:77:96:26:d9:34:4c:
2b:81:25:5e:0a:2c:3d:58:16:5d:51:9f:b4:96:69:63:c8:5c:
e1:77:e6:c0:7f:50:13:a8:12:8c:54:0e:ef:75:b3:22:53:0f:
7c:d4:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:07 2026 by rpki-client