Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: +lhr0fkSoRDhNTIVLEjz3tjc4uORSTvfxYmlDQfBP+0=
Subject key identifier: 92:D8:3B:EF:42:6E:F7:03:F5:23:50:C7:6A:8F:84:BF:89:C4:BC:B4
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019FA9AC4249A3E94E7B104A281BF7B83740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 08B2
Signing time: Tue 28 Jul 2026 17:01:06 +0000
Manifest this update: Tue 28 Jul 2026 17:01:06 +0000
Manifest next update: Wed 29 Jul 2026 17:01:06 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: Zz9FRGOOO5nHMdgByuand5y/znKxjQEBEkfIe/ZbmcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:42:49:a3:e9:4e:7b:10:4a:28:1b:f7:b8:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Jul 28 17:01:06 2026 GMT
Not After : Jul 29 17:01:06 2026 GMT
Subject: CN=92d83bef426ef703f52350c76a8f84bf89c4bcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:cd:f2:95:26:db:49:97:31:3f:fa:ec:2d:
e8:42:db:0a:09:18:ce:bc:dc:00:82:69:41:68:e7:
f5:89:74:2c:57:43:8b:e5:d8:cd:d3:ca:4f:21:56:
1e:74:92:5d:1b:54:15:e5:ae:91:a6:c3:a7:56:7d:
d9:ce:d3:11:2f:24:10:be:3e:1c:bf:b2:cd:c4:e0:
c3:c1:29:36:b3:4c:0e:e6:68:2d:e6:1f:59:cd:f0:
9b:f4:dd:af:51:a6:ab:ed:ad:c8:9e:8b:7b:b1:7b:
f3:5c:a7:e3:f7:3f:8c:02:27:8c:82:d0:be:3c:c0:
4a:01:85:07:a6:ca:28:4c:4b:4a:ae:ad:06:81:88:
e6:5f:e2:66:ff:9e:80:e8:95:99:de:1b:db:8a:48:
e0:a8:a3:29:f6:de:a1:bb:1d:bd:4e:97:25:27:7e:
03:7f:bb:0f:20:ff:48:11:8e:4d:c2:b1:90:6d:d2:
01:32:22:9c:cd:36:37:d6:b0:78:25:82:f1:4c:65:
07:1c:66:22:e8:71:9b:8a:8d:ef:a1:c1:06:25:c5:
ab:d8:a5:21:65:c4:0e:17:d7:2b:8a:84:5e:f0:23:
c0:11:12:3d:be:3c:b6:7b:18:be:bd:6d:ff:63:47:
3d:4c:94:48:fb:dd:31:a1:85:e2:57:df:04:69:a2:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:3B:EF:42:6E:F7:03:F5:23:50:C7:6A:8F:84:BF:89:C4:BC:B4
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bc:e0:86:9d:e7:09:ce:b1:3b:27:96:69:e8:9d:92:60:f5:
67:44:cf:5b:5c:af:e4:97:40:48:c5:50:45:e3:3c:09:77:7d:
b0:de:bf:f9:02:16:f2:30:3d:de:cc:f5:3d:13:b3:99:56:73:
a4:4f:a2:c3:92:4b:3f:08:42:db:ab:0e:cc:76:8c:67:57:6c:
ca:40:7a:a6:2f:81:5e:f8:1b:8d:ab:ea:58:ac:a7:7c:db:0b:
f4:bc:d0:f6:06:7c:56:1d:83:58:a1:5d:95:cc:bb:85:5e:e8:
e7:6c:bb:05:55:c0:63:b6:7f:3e:3b:c3:02:47:e3:36:13:2a:
29:26:15:7b:ea:f0:2e:7b:b9:22:bd:73:24:84:d2:fe:ab:81:
f9:db:22:d0:e4:52:39:36:6c:ac:35:37:64:3c:5e:42:d4:45:
ae:07:65:64:e1:0d:b6:83:89:83:9b:77:73:a2:bb:fa:23:79:
a4:14:db:91:42:22:7e:55:8c:9c:0d:a0:85:53:c4:e5:3c:84:
0e:66:af:66:19:03:7c:fa:af:ce:82:7a:41:39:42:7b:75:33:
8d:5c:9f:9e:d9:d9:b0:c1:0f:df:b6:91:c2:60:85:63:34:3e:
86:da:09:01:24:75:f2:24:68:ad:f3:8a:d7:95:3a:95:e5:17:
c2:1a:cb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:52 2026 by rpki-client