Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: 0nPmpkBA5g0FO7IIyULQrhX4ZZksKpWpII4QoO3HVsE=
Subject key identifier: 89:A6:9C:BB:0E:CB:51:91:40:7C:4D:39:B6:7E:F4:F8:27:EE:40:F1
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 019D3909E760CFF7D092B81FF654DEB9EE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 06DB
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: KPGouSk+TEyYUjZvDy/w7ODOLuZ7iZLOWsgwTYrpIAw=)
2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e7:60:cf:f7:d0:92:b8:1f:f6:54:de:b9:ee:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=89a69cbb0ecb5191407c4d39b67ef4f827ee40f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:56:72:08:9b:97:79:8e:04:21:79:e1:d5:
2b:1e:d2:e1:8a:68:68:2a:79:1a:7f:bf:bc:66:ff:
f3:f7:a0:7a:ca:aa:46:37:05:34:4b:63:4d:6c:f2:
bd:70:a3:20:7d:63:f2:d1:8d:05:a8:71:4c:33:c2:
fd:a8:c4:78:d5:ff:a5:04:1d:91:fe:13:d6:6d:ce:
be:15:ef:f9:0c:9c:2e:bd:84:a8:f2:1c:60:7f:a9:
c5:b0:8f:5e:48:94:ba:e7:43:1e:77:a6:f1:4d:f2:
2a:06:ac:bf:d7:a2:7f:91:7e:4b:5a:d3:6b:6b:2b:
fe:5c:3e:84:d5:e1:a9:73:d6:b5:d6:be:e7:ea:57:
fa:f6:fc:e5:32:b1:cf:fe:dc:2d:af:c5:83:da:47:
be:43:a3:27:28:3b:2c:98:de:46:52:15:92:60:29:
7b:b1:01:40:b7:f5:cd:42:99:c0:f8:30:54:c8:b7:
7b:7d:b0:8a:95:b9:c6:b4:d7:45:ac:5b:a2:57:ad:
dc:6f:0c:f7:b9:ac:68:92:9b:5a:86:78:e6:62:2a:
29:68:a5:12:cd:e6:98:bd:9b:a7:bb:e7:b7:94:5d:
29:fc:90:b4:09:55:71:e7:79:3d:cd:d6:63:74:5e:
69:b4:4c:f7:06:5b:ba:6b:af:de:40:c2:fc:9c:5f:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:9C:BB:0E:CB:51:91:40:7C:4D:39:B6:7E:F4:F8:27:EE:40:F1
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:be:fd:cc:f5:6e:3a:ab:ce:25:4b:33:46:d0:2f:da:4c:34:
c7:5d:f2:ca:0e:6b:1c:ef:3b:40:e2:03:11:65:f7:05:d6:3c:
51:af:2e:b8:68:1b:9b:2f:e3:9b:cb:40:f9:a6:11:da:2f:03:
ac:1d:de:7f:8b:5c:a7:9c:b2:ea:36:05:c6:e6:9e:e7:c2:a5:
9e:62:a3:69:c4:a3:d8:34:fb:4f:9d:8f:96:26:39:c2:35:84:
62:1b:e6:07:95:b9:eb:df:64:26:ef:5a:e1:c4:8d:1d:d6:59:
4c:b2:9c:f4:62:7c:fb:76:47:7b:c0:05:51:e3:ec:53:3b:77:
b2:9b:d6:ff:cc:a1:75:a0:df:56:1b:36:cf:4a:c2:9b:6d:c2:
36:13:52:c3:90:0f:f3:90:e8:2b:52:7f:01:22:72:b8:e9:47:
20:1d:6e:fd:7f:b9:0d:49:fe:c7:8d:37:a3:67:46:40:1b:bc:
dc:e0:52:21:d8:7a:dd:bb:9f:38:2c:73:4b:41:db:da:95:a3:
a9:3a:95:63:f3:a7:10:11:96:b4:6a:fb:c9:60:18:fb:5d:5f:
af:d8:17:2d:9a:de:c4:f9:35:e9:1e:92:b3:06:b0:a1:09:da:
7e:bd:dc:39:a5:0d:d9:f4:a3:07:19:8d:e5:13:9f:98:78:37:
56:07:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:24 2026 by rpki-client