Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: 044xqKNbA6SClcXvFriTsEL55CdKzz/DBH7DxlGHcwg=
Subject key identifier: E9:64:01:60:33:BB:C7:C8:ED:A3:76:4A:69:0A:F4:82:2E:66:06:92
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019E311793605D78DE1B4B41FC331E2DB234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 07EF
Signing time: Sat 16 May 2026 14:01:29 +0000
Manifest this update: Sat 16 May 2026 14:01:29 +0000
Manifest next update: Sun 17 May 2026 14:01:29 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: 8v6XrlY9d4NiCpEp1tqFjDL6dMbfjDxO27vYT/iLjG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:93:60:5d:78:de:1b:4b:41:fc:33:1e:2d:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: May 16 14:01:29 2026 GMT
Not After : May 17 14:01:29 2026 GMT
Subject: CN=e964016033bbc7c8eda3764a690af4822e660692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:63:be:c0:b0:bf:42:7c:d6:8a:8a:53:82:
3f:1b:43:88:23:73:c2:6a:90:6d:f3:fb:e4:b8:6e:
a1:80:49:2b:49:2d:27:b0:5a:9e:a5:9f:f3:10:49:
b5:02:1e:ea:6d:f5:a8:73:05:ed:fb:90:b8:30:04:
62:7f:c0:bd:62:2a:b1:8e:c8:b5:99:66:3a:ec:72:
3a:f5:e3:7d:69:a7:3a:61:5b:89:c7:fa:ea:fe:52:
f5:8d:a6:83:33:76:02:54:c6:7f:e4:80:df:75:11:
0f:3b:7d:90:15:9d:45:68:6d:d2:9b:09:8c:ea:b3:
3b:7e:ac:bc:f6:0f:7d:0a:e1:11:46:75:58:ad:09:
0b:03:24:d1:0c:30:0c:ce:3b:95:6d:bf:ae:ca:47:
2e:41:49:17:e5:bd:00:e7:3b:81:9e:88:6a:85:01:
c7:ed:f2:c8:92:f7:71:86:e1:3b:fd:4f:bc:16:3b:
54:1b:67:96:c8:6a:fb:b1:46:a1:b6:ab:d8:41:df:
23:5d:fd:70:4b:10:f4:8f:2a:e1:f0:b7:44:41:8f:
02:d3:fa:8e:92:be:72:a7:b6:13:ff:a4:21:77:a7:
c3:50:ae:cd:70:2b:f2:9e:6e:21:0f:04:c5:27:ab:
9e:df:2f:4d:ac:57:4a:58:82:3a:7c:25:94:c3:0d:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:01:60:33:BB:C7:C8:ED:A3:76:4A:69:0A:F4:82:2E:66:06:92
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0c:65:90:56:fa:f0:34:ad:83:d6:ea:fd:9c:98:f3:91:ad:
3e:e7:2d:7f:dc:b9:bd:a3:f3:78:92:de:15:11:6d:02:7f:37:
03:5f:93:f9:e8:ee:86:3a:f3:b1:8b:1a:f2:65:84:49:0e:31:
90:62:ad:3b:66:9b:d6:ee:69:d2:43:47:4c:09:92:cb:b1:df:
6e:08:81:89:b7:5e:6f:a9:7a:e8:00:d4:f4:72:be:9e:e7:6e:
7e:58:6c:58:d6:2e:ec:f6:7e:2e:b1:39:a5:81:10:0d:c3:a7:
d0:bd:26:03:a9:bc:c8:4e:3f:34:65:e1:0f:6b:ed:27:2d:1b:
66:06:07:bb:01:41:00:da:be:25:e5:90:2f:57:d1:1e:e6:d5:
70:ae:24:ec:28:65:68:ea:cb:8a:8e:e2:ce:d7:32:94:4d:f0:
ae:ec:e3:ca:80:9f:fc:1f:60:69:20:da:81:4b:51:fb:27:ad:
25:ca:74:87:f0:2d:80:44:4d:fd:2c:f4:2a:95:a6:ba:9e:1d:
72:6d:25:2c:a1:4d:b6:c1:1b:8b:6f:b8:2c:74:38:60:c4:8c:
76:73:1a:c6:fa:f2:3d:35:1a:63:35:a6:c7:1d:26:e6:ba:ec:
8e:fa:d2:35:95:d5:9e:61:10:90:88:46:b7:6b:7c:90:18:80:
c6:64:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:39 2026 by rpki-client