Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: pxrsdOv0alre+/BEnrbg7C1HH2ke1rrqIKvp1GrK5Ok=
Subject key identifier: E3:DE:93:DF:66:CF:BF:2E:34:3D:AC:A3:73:D4:81:6A:1E:96:55:BB
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 01A1404C2AF2AFA6F0B0EA2F9918489ADF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 08F1
Signing time: Thu 15 Oct 2026 16:01:35 +0000
Manifest this update: Thu 15 Oct 2026 16:01:35 +0000
Manifest next update: Fri 16 Oct 2026 16:01:35 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: apHMiIn77XtKK9TP3XKqqxk0jrN1OPxwcGGtjvcnI70=)
2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:2a:f2:af:a6:f0:b0:ea:2f:99:18:48:9a:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Oct 15 16:01:35 2026 GMT
Not After : Oct 16 16:01:35 2026 GMT
Subject: CN=e3de93df66cfbf2e343daca373d4816a1e9655bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:76:18:66:7f:d4:40:0e:2c:c5:06:75:29:
2f:ef:16:70:87:51:75:b4:98:86:d2:77:26:4a:ee:
0b:9c:1c:8d:fa:0a:19:92:04:01:e9:1c:07:72:c5:
cf:65:df:1e:b5:21:87:ad:7f:55:63:c9:f6:21:35:
66:76:a8:2c:f9:91:60:8d:cf:cc:45:85:3a:d3:24:
f1:2b:e3:35:75:64:84:50:8c:de:84:5d:ff:5e:ad:
e0:e7:4f:7c:5c:5a:e1:42:b6:e6:ac:79:d9:5e:bd:
c6:92:54:df:4d:e8:11:36:0d:8e:5c:ac:e4:0d:56:
13:28:e4:c9:2b:af:33:96:af:46:5f:5d:49:db:c1:
6c:ff:bd:71:3c:6c:57:8c:e3:a9:4c:f0:26:56:39:
78:23:7c:0b:ba:c3:39:12:c3:b8:0a:9b:78:6a:2e:
d8:15:0f:c4:c6:2d:15:0e:05:8b:65:48:43:45:68:
90:89:92:ae:46:ed:87:00:5d:a8:30:de:ae:5c:1f:
d6:ae:61:40:c4:78:e5:66:31:8b:a6:d5:22:ee:76:
b6:b4:80:ca:2b:4d:1d:6b:d7:a4:65:99:75:93:c2:
d0:84:54:26:3b:9b:fd:fa:38:77:f2:3a:a6:da:2b:
42:8c:09:85:e9:e7:b3:e7:3e:58:23:6c:ae:1c:b4:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DE:93:DF:66:CF:BF:2E:34:3D:AC:A3:73:D4:81:6A:1E:96:55:BB
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d1:82:ec:3f:f9:21:62:41:76:44:02:8a:04:ed:7d:c7:c4:
d4:cc:41:bb:be:22:40:85:3a:b0:59:ca:f8:27:ee:45:fe:49:
26:f0:43:63:7e:90:a1:b1:05:5f:ed:4a:ad:63:e2:31:f4:2e:
04:72:7e:99:ca:1e:f4:8a:0f:09:6e:21:43:65:22:e6:d6:6d:
b5:50:4f:d4:39:85:a8:47:63:b0:05:91:8e:a3:84:bd:e5:9a:
f9:b0:fe:2d:49:c5:0e:a7:e6:ef:68:16:af:67:08:0d:f3:33:
42:02:7e:49:59:b9:db:30:74:3e:73:c8:03:cc:17:da:c0:83:
9c:a5:44:43:d9:c5:9e:30:f6:e8:5e:84:95:dc:03:e0:2b:0a:
64:5c:74:b3:92:47:e8:14:1b:f8:7f:c2:22:00:8a:fc:1d:5b:
12:84:53:16:cc:05:05:71:51:d5:11:f5:29:be:03:4c:ef:f8:
24:9e:aa:87:c1:66:92:73:78:cd:2b:5e:6a:ff:b4:db:8b:c3:
6f:c1:ac:fd:57:ff:6b:49:df:20:03:53:13:13:de:fe:30:99:
3d:f4:30:1b:8a:49:c3:d7:6c:7d:74:ed:03:59:68:7d:79:c7:
74:9f:48:8f:4d:4c:b4:99:82:f6:fb:1d:72:25:00:f2:36:f0:
eb:1a:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:35 2026 by rpki-client