Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: Cvu7n+1+lSo79pCQiJxHQ+yX5qU/0IYPpT2J4X3QzB4=
Subject key identifier: A2:62:18:AC:87:C9:F2:34:68:4F:21:28:33:C3:A6:D0:D0:53:BD:D4
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019D9A3E15F1A1061C1258A3A2BCB7922EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 1039
Signing time: Fri 17 Apr 2026 07:00:53 +0000
Manifest this update: Fri 17 Apr 2026 07:00:53 +0000
Manifest next update: Sat 18 Apr 2026 07:00:53 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: o+Sl+orE91QGoyTiYMvKGNOVBhs1SYUjBusGlYdzHvE=)
2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:15:f1:a1:06:1c:12:58:a3:a2:bc:b7:92:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Apr 17 07:00:53 2026 GMT
Not After : Apr 18 07:00:53 2026 GMT
Subject: CN=a26218ac87c9f234684f212833c3a6d0d053bdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:8d:58:1a:f2:45:b8:4e:f4:e1:8d:39:40:
03:f9:2e:75:01:1e:c1:25:5a:0a:d9:90:e5:a1:e7:
19:0f:11:e9:f9:e8:a5:ef:2c:f0:40:95:05:95:8e:
82:dc:63:f0:6d:8b:95:83:80:b3:80:9e:a8:7d:08:
83:51:0e:c2:42:6c:aa:3b:f7:5c:c7:42:a7:f0:34:
6b:3e:11:f0:84:23:23:2e:55:79:f4:45:91:c3:47:
d0:f1:18:7a:8d:4a:b5:2d:00:93:98:c6:83:56:a5:
61:45:67:e1:9b:ef:1a:5d:a7:cd:00:f9:4c:57:11:
62:20:17:f1:89:dc:1e:06:a1:5a:c1:13:79:61:c8:
17:23:e0:02:c3:a0:3a:59:76:5b:8a:b1:b0:73:1a:
01:47:49:0b:c4:b7:4f:bf:0a:c1:e7:ab:20:8e:cd:
98:f3:b8:bf:c5:5d:6a:0e:8d:e5:3f:0a:20:10:36:
67:ca:cc:7e:74:4f:0d:f2:bb:54:9f:a4:d8:b4:85:
8e:41:d0:ce:7a:e8:3f:94:e9:4d:a3:51:d0:5d:61:
ce:54:f4:c8:27:c6:77:ef:55:57:c6:0a:01:6d:1e:
4c:04:2d:3e:68:6a:a9:7f:df:68:a6:39:aa:4b:a4:
57:b5:db:11:6a:ff:51:7b:93:41:38:4a:ef:db:21:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:18:AC:87:C9:F2:34:68:4F:21:28:33:C3:A6:D0:D0:53:BD:D4
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6a:8e:e1:15:db:81:f3:4f:20:5c:6f:48:8d:ed:b5:9d:cd:
67:a5:b6:61:a9:e0:9e:7b:49:4f:ce:04:56:dd:4a:9e:95:c0:
93:e6:29:c6:d6:cb:03:a5:89:bc:38:a7:6a:24:99:ab:31:eb:
c0:12:14:b2:96:a2:fd:8d:ac:5e:af:17:bd:73:42:04:25:8b:
3b:32:30:d8:62:56:f5:c8:3e:f9:f5:7c:47:58:6a:76:12:f6:
d7:56:d2:e7:e6:91:ac:be:27:34:26:77:0a:73:59:08:32:30:
2f:a4:14:7d:5c:7b:b2:3d:fc:83:92:c4:d8:eb:40:64:c8:8d:
ef:f9:a2:42:84:01:66:4a:d1:bc:36:18:71:b0:97:47:5a:d7:
d1:59:3d:e7:4a:a3:41:6c:ce:f3:f0:fd:c1:f0:73:e3:5e:93:
d8:24:9d:14:e1:fd:ea:4c:f9:f4:02:6e:25:fb:29:d6:24:79:
59:81:32:5d:01:03:87:ca:79:3f:a2:01:c7:fa:84:5a:54:06:
c6:4b:f8:fd:2e:f7:c4:bf:31:f0:98:50:f3:24:45:d8:2b:14:
16:2e:36:c7:40:c3:6b:d5:3b:7f:7d:3c:e9:de:00:d3:50:57:
99:4c:31:e8:40:de:06:61:45:23:ac:06:3f:81:79:7a:8c:d1:
c6:24:6b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhXxoQYcElijory3ki6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx
NjYwMDgwHhcNMjYwNDE3MDcwMDUzWhcNMjYwNDE4MDcwMDUzWjAzMTEwLwYDVQQD
EyhhMjYyMThhYzg3YzlmMjM0Njg0ZjIxMjgzM2MzYTZkMGQwNTNiZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvmNWBryRbhO9OGNOUAD+S51AR7B
JVoK2ZDloecZDxHp+eil7yzwQJUFlY6C3GPwbYuVg4CzgJ6ofQiDUQ7CQmyqO/dc
x0Kn8DRrPhHwhCMjLlV59EWRw0fQ8Rh6jUq1LQCTmMaDVqVhRWfhm+8aXafNAPlM
VxFiIBfxidweBqFawRN5YcgXI+ACw6A6WXZbirGwcxoBR0kLxLdPvwrB56sgjs2Y
87i/xV1qDo3lPwogEDZnysx+dE8N8rtUn6TYtIWOQdDOeug/lOlNo1HQXWHOVPTI
J8Z371VXxgoBbR5MBC0+aGqpf99opjmqS6RXtdsRav9Re5NBOErv2yG89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJiGKyHyfI0aE8hKDPDptDQU73UMB8GA1UdIwQY
MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt
NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh
LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2qO4RXb
gfNPIFxvSI3ttZ3NZ6W2YangnntJT84EVt1KnpXAk+YpxtbLA6WJvDinaiSZqzHr
wBIUspai/Y2sXq8XvXNCBCWLOzIw2GJW9cg++fV8R1hqdhL211bS5+aRrL4nNCZ3
CnNZCDIwL6QUfVx7sj38g5LE2OtAZMiN7/miQoQBZkrRvDYYcbCXR1rX0Vk950qj
QWzO8/D9wfBz416T2CSdFOH96kz59AJuJfsp1iR5WYEyXQEDh8p5P6IBx/qEWlQG
xkv4/S73xL8x8JhQ8yRF2CsUFi42x0DDa9U7f3086d4A01BXmUwx6EDeBmFFI6wG
P4F5eozRxiRrfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:01 2026 by rpki-client