Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: KznSLuSyGooWdpDNIxmwXGWidNP3mjuS9PtmaxEy5Rg=
Subject key identifier: 18:33:59:99:92:8D:A2:72:87:C3:FE:BB:2A:66:C0:3B:10:EE:19:91
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019EBE112537EE6D217BDDC9664C0ACAF585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0838
Signing time: Fri 12 Jun 2026 23:00:55 +0000
Manifest this update: Fri 12 Jun 2026 23:00:55 +0000
Manifest next update: Sat 13 Jun 2026 23:00:55 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: +ku+iN48D6u80VhhPxPyumoEGiR36qX/CjI07VUO7yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:25:37:ee:6d:21:7b:dd:c9:66:4c:0a:ca:f5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Jun 12 23:00:55 2026 GMT
Not After : Jun 13 23:00:55 2026 GMT
Subject: CN=18335999928da27287c3febb2a66c03b10ee1991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:2e:6b:1f:fc:dd:f7:cf:67:05:d0:fc:47:
bf:97:f3:78:17:2c:94:1f:63:a9:b7:5d:fa:b5:c5:
d8:9c:b2:19:a8:c5:b9:cc:6c:eb:77:5d:e9:9d:af:
50:ef:ae:91:f7:e8:ed:06:3e:6d:42:5f:09:86:d6:
85:90:28:29:74:31:88:dc:46:68:b3:36:89:b0:43:
2e:ad:57:ff:9b:72:04:e9:89:7e:b9:9d:88:26:eb:
8a:30:6a:1f:08:6c:f5:22:a6:55:22:4d:c8:ab:c6:
14:dc:c2:40:77:65:c6:4c:57:af:1c:12:f1:8a:a3:
4a:49:e8:06:04:f8:f4:b7:31:d0:fe:4e:fa:ae:c8:
81:8e:f8:c5:f7:79:ef:7f:f5:86:03:24:92:2d:07:
17:45:12:a1:e6:ce:bb:d9:b2:1b:36:b6:ee:c4:4b:
65:c9:76:45:dc:5b:26:ef:7f:05:ca:d3:83:4a:26:
1b:5d:45:65:3d:96:cb:48:a2:26:97:a9:e2:c7:ce:
c3:9a:9d:f3:43:b5:33:80:13:8e:f8:07:81:66:da:
1a:e0:4c:85:1a:7c:60:2b:e7:1a:e4:e6:1a:9d:98:
49:7b:0a:90:15:89:f8:87:b2:af:dd:4a:6f:85:b4:
98:15:ee:6f:6e:bd:b6:22:8c:fe:af:01:a7:20:0e:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:59:99:92:8D:A2:72:87:C3:FE:BB:2A:66:C0:3B:10:EE:19:91
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:56:8c:98:09:20:ac:ef:4b:cb:4e:26:6f:c2:0a:b2:9a:d1:
50:98:79:9a:8e:84:99:30:d3:35:53:66:4b:44:fb:5b:75:a7:
af:f0:43:2e:52:78:47:5d:0f:0b:24:9f:b8:93:d7:fb:a6:c3:
28:70:8f:ac:a7:a0:48:8c:57:64:9b:be:df:c9:ea:03:a6:6c:
46:3a:5f:c1:12:ab:44:25:9d:7b:96:5c:3b:97:85:7c:ed:c8:
46:86:72:a9:37:78:ba:c7:7b:ef:34:15:ea:02:ab:19:fd:85:
f5:1b:f4:be:2c:b6:f2:9a:bd:c3:13:2c:67:e4:03:e1:bc:95:
2d:85:f3:e5:70:f2:c6:28:30:d8:2a:35:f1:f5:94:0a:8c:f1:
92:f7:2e:18:67:c6:b5:cf:fc:ee:00:71:f3:18:44:27:82:fa:
a6:11:30:2c:b5:fc:80:eb:74:de:8e:85:2d:bd:51:c4:06:31:
4d:1d:cd:f4:26:5a:15:73:16:15:f4:31:86:d7:3d:37:2c:e4:
9b:1a:c2:a2:ca:94:ad:a5:a5:82:ba:45:36:fe:9d:11:94:6c:
74:8f:b7:54:f3:c8:9c:3b:22:9c:68:df:59:2d:18:3c:8e:50:
ba:0d:f5:a9:fb:e0:17:69:c0:d4:80:3d:29:ab:34:5d:af:8b:
33:4f:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:03 2026 by rpki-client