Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: tA9LYJZviNxNnMqsZyp0AGi7PUqKrUegvctcU/ym9Sw=
Subject key identifier: 2E:47:05:74:C4:41:8B:D1:1E:67:CC:09:7F:78:EC:9E:53:DD:3F:54
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019D26963868104FD9BCA1E788DED7989B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0765
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: hq3BdBAPzmcRVbjmhh7y5EkgGBNU6W9rionnR6j62aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:38:68:10:4f:d9:bc:a1:e7:88:de:d7:98:9b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=2e470574c4418bd11e67cc097f78ec9e53dd3f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:0b:39:5a:b9:09:0a:5f:b3:9f:91:19:03:
86:bf:92:e1:d3:51:7d:df:3b:00:35:b6:62:7b:a3:
a5:68:4d:f9:32:cf:70:25:c1:cf:cf:fe:7d:38:5e:
f0:af:c6:1f:7d:0d:9b:54:a2:7b:1c:4f:1a:0b:44:
3f:33:88:bf:45:60:4a:20:02:1d:5c:a9:e8:1b:c3:
85:33:56:ae:fd:0c:85:c8:89:16:3e:70:33:90:9a:
0c:66:b5:7a:84:f6:c8:67:87:c8:d0:83:ce:45:fd:
4a:55:d0:5b:02:37:29:34:ce:e5:c1:e3:e7:35:4f:
57:73:67:34:1f:2b:ca:6d:4e:88:53:41:dc:da:27:
49:90:a5:aa:d6:cf:08:15:ff:94:a8:a3:68:40:9c:
64:9c:38:0a:cc:b5:a7:56:08:a5:14:77:63:98:2e:
31:cb:eb:e6:37:fd:2e:8f:60:f2:32:de:45:6a:e7:
15:7d:96:bf:65:7f:58:de:8a:ce:f8:22:49:c6:43:
ee:56:c5:80:af:e4:46:1e:ce:1c:2f:f4:e8:0c:09:
b2:fa:23:85:0f:93:a2:54:ca:08:01:f1:c9:9b:a4:
4e:1a:c8:1a:e8:ce:aa:5b:e1:99:98:16:9a:32:65:
7e:e8:b8:e7:30:01:3b:bf:db:19:4e:5a:21:71:5a:
45:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:05:74:C4:41:8B:D1:1E:67:CC:09:7F:78:EC:9E:53:DD:3F:54
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:18:4f:34:97:55:27:0c:4e:c4:2a:98:e5:1c:13:b6:a2:7e:
86:7d:b7:66:0f:98:bb:0e:59:5e:4a:a4:40:49:40:16:28:44:
fa:5d:76:d1:4f:58:ca:eb:cb:0b:d7:c4:0a:f1:24:97:25:3c:
35:8a:b7:06:af:62:27:13:27:82:fc:84:e3:f0:ec:83:bf:2f:
c3:b4:b3:85:93:29:ce:57:8e:90:ad:66:e9:72:ac:8d:b5:11:
77:03:e0:db:f7:ec:23:c3:f1:08:db:ff:7f:2e:65:21:e2:7f:
76:28:68:db:14:af:9a:6b:c0:ce:cc:45:56:3f:95:d5:6b:7e:
57:87:b7:d8:88:a8:c3:cd:c3:7a:97:20:2a:e5:31:a8:f7:ca:
a2:8d:82:40:57:fa:3e:62:e1:98:71:48:89:32:d7:29:d8:2c:
59:aa:86:e5:42:9e:44:44:7c:43:ad:39:f2:2d:5e:3a:68:f7:
fd:32:93:18:84:85:0c:dc:7a:e1:e7:16:f8:55:6c:69:5d:45:
d3:43:8f:45:fa:70:78:70:c1:42:4d:63:c3:2b:e8:3c:81:13:
c7:2c:94:54:50:fc:a1:3f:c8:ff:3a:58:b0:0f:68:79:15:3a:
41:87:c5:59:18:2e:b6:e0:ab:ba:89:48:ac:ae:6f:e4:11:f6:
f8:e4:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:43 2026 by rpki-client