
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: 64Hml/scxJMJXDgl1dGecG/dMehhs5VrCWvORADS5Ak=
Subject key identifier: F9:7A:09:56:40:A2:5A:FB:25:1E:38:D6:8F:B4:94:D1:B1:DB:BA:6C
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019FA974C5F0FA55E530C45BE94AD194B37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 114A
Signing time: Tue 28 Jul 2026 16:00:30 +0000
Manifest this update: Tue 28 Jul 2026 16:00:30 +0000
Manifest next update: Wed 29 Jul 2026 16:00:30 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: uFtVdHz45FQ6Lb0aBDIq5vf6BFvwHuXtTNwWld/s7IA=)
2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c5:f0:fa:55:e5:30:c4:5b:e9:4a:d1:94:b3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jul 28 16:00:30 2026 GMT
Not After : Jul 29 16:00:30 2026 GMT
Subject: CN=f97a095640a25afb251e38d68fb494d1b1dbba6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:e6:79:82:bc:b0:de:f4:36:af:7a:50:54:
a5:9a:05:61:4d:77:f3:35:c4:50:14:c2:79:b1:11:
87:6e:18:5c:e6:0d:4c:63:25:59:bb:eb:93:e3:4f:
67:a0:cf:95:b2:af:2f:5d:74:19:e6:e1:e2:42:04:
2d:0b:58:6c:07:e8:9f:09:ea:cc:03:53:24:84:d8:
69:ef:68:df:e8:89:1d:29:56:8b:f2:8e:3f:d0:ac:
15:84:d9:2a:25:94:c3:d6:b9:70:ba:90:b0:d3:80:
43:b2:43:9d:c4:ab:c5:c3:63:53:ec:43:3a:77:28:
ea:de:f9:0f:07:8f:ef:ac:de:53:af:f9:30:d3:ed:
d2:78:7c:14:43:a3:f4:0f:4c:f1:b7:56:ef:d3:29:
00:7b:05:1a:c6:0e:ca:b1:ab:b8:53:f9:b4:02:e4:
71:0a:21:1a:f1:93:ec:0f:79:4f:71:67:19:eb:07:
43:d6:b8:6b:71:6c:7c:a9:f4:13:a5:63:9f:a5:1b:
db:c4:5f:04:cc:26:65:78:84:b2:81:52:ca:1c:3b:
62:04:a2:af:bd:04:ba:b8:a4:9f:e6:cb:ca:a7:8f:
a1:c6:f3:f4:57:0a:a9:34:6c:7c:71:72:95:b1:9d:
14:0f:1e:94:48:6c:40:4c:54:f4:f5:fc:c3:fc:b7:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:09:56:40:A2:5A:FB:25:1E:38:D6:8F:B4:94:D1:B1:DB:BA:6C
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ad:9b:8a:3c:94:62:c3:df:64:57:f4:de:ae:73:65:47:94:
1f:b8:aa:f9:64:fa:6a:37:ea:0f:68:dc:8f:eb:aa:14:de:af:
c5:e6:e1:7b:b7:5f:b2:3c:a3:20:4c:68:3f:86:d0:2a:4c:f1:
04:73:14:32:88:2f:f4:59:03:64:77:46:5d:a1:27:de:66:df:
5f:b3:6d:80:29:0d:07:4a:bf:1a:26:12:19:94:02:25:e5:20:
a3:29:11:72:2e:a8:34:21:0a:ae:1a:cc:81:27:51:10:1d:25:
5a:94:28:a0:ea:9e:36:03:e0:a6:b0:45:7e:0a:90:35:a4:8d:
85:eb:54:0b:9c:64:76:ad:80:3c:df:de:84:9a:23:e3:29:e6:
a8:7a:9d:c5:ec:de:49:72:8f:3d:1b:b3:8b:19:a5:f5:e5:a2:
18:7c:8f:72:fe:f2:8e:ac:19:88:2f:fe:c9:aa:11:a6:56:cb:
61:92:cc:c2:a6:5a:49:90:84:1f:5f:ea:b6:6d:0a:5b:52:0b:
bd:10:fa:9f:e9:55:70:a8:01:ec:2a:67:6c:ad:29:35:13:a8:
fc:28:8b:89:3b:04:f6:54:93:ef:5a:c8:db:ac:9d:98:7f:0a:
32:9b:9f:03:d4:0e:b4:74:7b:0d:97:63:ea:b8:d3:69:0b:6d:
6c:82:ba:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:36 2026 by rpki-client