
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: 2oea1kfddmHcaEGfFZemqHJbuceyl48oXZRB0vLe+qA=
Subject key identifier: 30:A1:FE:55:69:29:77:43:5A:84:67:DC:42:35:1B:3F:69:B4:85:98
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019F92485511C39BAA74E0819404BE155B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 113E
Signing time: Fri 24 Jul 2026 04:00:41 +0000
Manifest this update: Fri 24 Jul 2026 04:00:41 +0000
Manifest next update: Sat 25 Jul 2026 04:00:41 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: MSOZk09kKi9L/PecKzYKUc6YQ4P3K/L6RKd6SGdQYqU=)
2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:55:11:c3:9b:aa:74:e0:81:94:04:be:15:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jul 24 04:00:41 2026 GMT
Not After : Jul 25 04:00:41 2026 GMT
Subject: CN=30a1fe55692977435a8467dc42351b3f69b48598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:8f:f8:9b:75:56:50:3b:70:2e:0f:42:bb:
a9:c1:86:3e:ec:2d:1c:5a:ea:ec:d0:74:b0:62:d0:
fd:0e:d5:cb:89:be:bc:83:d2:07:36:7b:a4:29:f2:
f8:6f:2a:fa:ea:d3:c2:b1:68:95:65:20:09:65:4c:
25:af:52:90:38:14:e7:0a:ce:60:83:b4:97:f3:f9:
6a:18:41:64:b8:e7:a8:dc:76:15:45:22:64:49:29:
52:f7:48:74:66:61:5f:8c:c6:8b:58:7c:65:c6:40:
ff:cf:17:b1:0c:1b:5c:1d:77:f5:2d:ef:b1:fb:b5:
4f:81:71:e5:e7:26:d2:7f:5a:0a:d9:30:0b:d7:0b:
10:57:2b:63:9f:2d:54:15:f5:00:f5:ae:2a:5c:56:
89:ab:74:fb:73:b7:22:81:83:2a:0e:80:20:db:29:
ff:4d:2f:c7:d5:d7:6f:51:59:df:91:e4:29:99:cb:
e2:47:c4:2a:8d:ce:2c:7d:5e:cf:53:b1:5c:da:c3:
42:49:30:7d:bd:73:d3:85:8d:e5:3d:d9:7c:e6:01:
bd:ff:f1:9f:f0:87:60:4c:d2:2f:1b:0d:22:54:3d:
d2:49:9a:07:3d:9f:ac:d2:da:f0:fe:12:e2:68:41:
c8:63:d5:0c:67:6a:b2:fb:aa:13:92:68:39:21:fa:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:FE:55:69:29:77:43:5A:84:67:DC:42:35:1B:3F:69:B4:85:98
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:db:98:f7:82:66:df:00:fd:53:31:37:5a:f0:6d:53:a0:b8:
60:00:ed:4a:86:ca:6a:8c:9b:82:96:81:90:5f:06:bc:b4:62:
ef:b0:7c:5f:71:3a:b6:ed:8a:16:62:cc:6a:a2:3f:29:16:9f:
61:f3:9f:33:d2:b6:73:90:0e:2e:70:76:13:2f:d0:7a:1f:52:
40:58:d7:93:41:ed:1a:05:59:a3:69:ad:52:45:f9:86:cc:b0:
5b:bf:32:63:64:e7:71:e1:f2:3b:01:79:94:cd:e3:d5:c7:8f:
2c:23:ed:e9:b5:42:c3:93:75:11:9b:64:9e:bd:ff:a7:eb:1f:
97:d3:29:48:4c:ba:f5:f0:c3:09:de:84:10:95:81:5d:4c:e1:
f0:45:b4:98:ff:ca:21:6c:91:70:5e:df:39:4e:50:3f:cd:d8:
3a:ba:dd:d7:ed:84:3c:8f:29:c1:ff:cb:76:8d:7e:21:f4:00:
fc:ed:d5:47:6b:b0:9a:a0:11:7d:60:7b:ba:8d:8c:f8:63:dd:
8a:d9:b6:1e:92:b1:bf:42:d9:63:ab:fb:18:bd:cc:a9:bf:9c:
16:1e:81:24:69:76:a6:20:f0:97:88:8f:ce:01:85:81:87:b2:
54:50:1f:15:4a:d5:02:21:0c:74:87:18:92:de:af:98:81:22:
ae:57:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:55 2026 by rpki-client