Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: oTfnzWsMq+IZTkBWRgpkkwhwcYkd7vjDD90xy3Q5dgU=
Subject key identifier: B7:F8:0E:E4:F6:5F:33:E1:6B:47:9C:E6:C6:90:58:B1:3A:E5:C9:6B
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 01A00093BB222D0B31B466B4A5EFA6F5A379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 08DF
Signing time: Fri 14 Aug 2026 14:01:16 +0000
Manifest this update: Fri 14 Aug 2026 14:01:16 +0000
Manifest next update: Sat 15 Aug 2026 14:01:16 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: IivK1ckZFBT+9gxc5uGaSN9bf5CeTJ2W3amtQ2QV3uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:bb:22:2d:0b:31:b4:66:b4:a5:ef:a6:f5:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Aug 14 14:01:16 2026 GMT
Not After : Aug 15 14:01:16 2026 GMT
Subject: CN=b7f80ee4f65f33e16b479ce6c69058b13ae5c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:25:62:fd:70:26:ad:f8:3d:86:3f:0f:27:
73:55:d7:6f:93:a0:91:3c:d9:74:be:6c:b5:cb:4c:
2e:a2:65:a2:f7:e2:7c:6b:04:8b:df:30:ec:78:0e:
50:56:20:24:ee:71:c4:d8:9d:de:a7:de:dc:0c:b3:
77:81:07:0a:c9:0b:b7:c0:63:8f:1b:d5:77:4d:2c:
45:87:a6:d5:f5:00:ec:38:6f:6c:9d:8e:98:8d:e9:
06:c3:87:33:34:2b:dd:f3:54:0e:ef:5a:ac:5b:88:
24:f3:79:9c:85:cb:57:2c:7a:5b:0e:f3:09:48:39:
f6:65:08:7a:48:35:c1:f9:44:78:7b:b7:55:43:f7:
c5:1f:ea:ae:8d:da:3f:78:a0:34:1b:7d:e5:bb:06:
8f:a3:9a:c0:3e:89:1d:f6:c2:25:9c:45:f1:9c:ef:
4c:f1:2e:d1:e5:90:ec:79:ea:27:a3:9c:43:6f:46:
c2:67:81:c3:ef:f8:c7:e0:23:0b:b4:a2:2d:74:2e:
66:dc:23:b3:7a:bb:35:82:c3:0d:e7:dc:0e:55:b1:
10:07:11:25:0e:cb:0e:d8:49:13:8c:ef:8d:7d:11:
e8:9b:04:ab:23:41:9f:d3:8b:9e:a9:00:3b:2a:1c:
6a:eb:f1:25:1e:85:d0:bd:f1:c6:f7:3a:63:63:76:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:0E:E4:F6:5F:33:E1:6B:47:9C:E6:C6:90:58:B1:3A:E5:C9:6B
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e6:72:da:8f:55:45:0b:67:d4:6a:a6:38:e0:66:f0:cd:b8:
76:ea:95:0c:45:eb:e1:17:b0:7c:3d:34:ef:31:e9:91:5f:5a:
26:ec:9b:5b:48:ef:db:a1:77:37:cf:50:d1:8b:56:49:c7:7c:
5c:cf:94:d7:0c:83:84:6b:03:a0:f2:9a:3e:12:c0:a0:5f:b2:
44:e4:b0:3d:cf:2e:69:19:5d:3f:31:10:46:f7:2f:10:47:58:
61:3f:11:99:52:67:10:c2:79:9e:a2:81:6c:1d:c6:46:f5:17:
67:b2:fc:79:02:fc:d5:5e:50:50:00:72:13:7f:eb:f4:a5:4f:
36:fc:0c:14:94:e1:94:4a:55:c8:45:87:22:ea:b6:3a:51:37:
01:6a:45:1b:05:7d:99:e5:48:25:ed:e5:1f:23:a3:35:34:36:
9a:10:2b:09:9b:16:a8:92:6e:36:6a:6e:73:44:e2:04:48:5b:
42:0e:cb:d3:48:75:eb:81:ed:23:02:4c:0b:0d:fb:0e:60:56:
31:48:82:70:82:5d:5b:13:a2:1f:e4:fc:ab:1c:b1:28:d3:54:
2f:da:7a:6a:08:ea:e9:58:31:8e:9c:5d:af:ee:a7:de:2e:45:
24:78:47:4a:ce:2f:a6:1c:38:e7:fd:97:cf:79:a3:4a:f7:81:
75:c3:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:20 2026 by rpki-client