Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: GihNaDB0sN9/cn/sAu0cRqCspP7tnyyd0ONVqN92zq4=
Subject key identifier: 11:86:82:0C:46:8D:3C:6E:95:AD:B3:A3:28:00:9D:6F:6C:28:B0:80
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019CAAFD7F1D5B6EDE76104D61DEAF94A418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0725
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: E/KPaT/KCO9YgTBGWKwY3edrR+xygnIboBADJhHjQ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7f:1d:5b:6e:de:76:10:4d:61:de:af:94:a4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=1186820c468d3c6e95adb3a328009d6f6c28b080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:bc:14:11:36:92:2c:bb:23:e3:c2:8b:1c:
f1:a4:c9:b5:73:37:54:f1:e4:94:67:b0:72:20:5f:
a1:04:d1:f6:ee:f3:c2:a2:04:22:f7:01:2e:57:e1:
20:f7:aa:83:ce:12:d3:7f:82:1c:a5:a5:70:08:28:
9a:f4:c7:29:be:14:a5:ed:e0:06:3c:16:fe:3f:2f:
92:39:2e:fb:99:16:37:79:bb:8e:b8:19:1b:91:a2:
11:68:d3:02:45:61:ba:30:7a:6b:3b:bc:c5:0a:f3:
c9:d4:7e:d5:b7:8e:d9:4d:7a:36:e3:33:d8:27:1f:
02:bf:af:32:b8:80:d5:a8:26:6a:88:28:60:2e:fc:
d0:3c:a7:c4:50:e5:f9:36:de:4f:14:55:f3:bb:8d:
3f:74:75:39:08:04:98:8e:ed:28:1a:77:ec:31:9e:
a0:56:a7:d6:b9:9a:15:e9:8f:aa:0e:de:00:77:15:
fc:b2:9b:8d:9b:e9:96:9b:13:49:1f:50:87:64:d4:
c5:23:70:02:6c:9d:db:89:d0:1a:f5:71:ba:25:8e:
77:f4:3b:ee:63:e2:ea:7a:ab:92:95:57:1e:e4:96:
7a:6f:f1:bf:a7:4f:7a:aa:35:ac:66:8f:1b:9b:2b:
6d:11:98:2a:33:bb:91:0f:a0:ec:b5:be:27:53:61:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:82:0C:46:8D:3C:6E:95:AD:B3:A3:28:00:9D:6F:6C:28:B0:80
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f7:7e:8e:cd:81:ce:6d:ab:8f:3f:e6:09:8f:a8:7f:b4:12:
45:89:67:eb:70:34:0f:94:59:c1:d7:4a:af:ba:d7:42:ef:55:
79:5a:34:9a:cf:bb:c9:36:00:a7:ce:a1:40:25:51:ce:8a:bc:
7e:b9:14:84:d1:90:80:37:a0:22:d6:42:4f:7d:28:43:48:20:
2b:5e:6f:4f:e3:00:c5:14:13:87:0b:ef:b2:f7:a5:06:33:35:
b6:1f:ae:ce:68:38:1e:8f:ff:b3:79:de:7e:6e:d3:ec:fa:4b:
e4:52:09:fe:ec:61:c6:dd:ef:59:71:e2:8e:92:52:a4:40:6e:
c0:19:42:5a:92:74:88:59:f8:a4:77:9c:a3:3f:d8:0c:7a:0d:
9a:bb:58:9d:59:d1:90:63:54:5b:f3:3c:d3:66:5b:00:7f:98:
88:44:a4:22:5c:32:07:6e:9e:7e:40:68:fe:24:44:6f:32:76:
59:e7:41:22:4c:e1:7d:13:6c:5b:6e:10:46:22:27:91:49:51:
9d:a3:27:01:a9:e5:3c:f5:68:de:8b:6b:92:7d:2e:2f:d2:2a:
f1:ff:09:88:88:7b:fb:94:17:b9:63:18:d6:6c:59:d7:2c:01:
a9:f5:12:27:89:6f:bc:9a:b4:a3:0a:ec:44:56:02:fe:c1:aa:
c6:4e:95:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/X8dW27edhBNYd6vlKQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmU1MjQ4YzFmYjY5YjM4YTMxODhkZjk0NzJlOGNkYmM4
NWMxOTMwHhcNMjYwMzAxMjAwMTA1WhcNMjYwMzAyMjAwMTA1WjAzMTEwLwYDVQQD
EygxMTg2ODIwYzQ2OGQzYzZlOTVhZGIzYTMyODAwOWQ2ZjZjMjhiMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hm8FBE2kiy7I+PCixzxpMm1czdU
8eSUZ7ByIF+hBNH27vPCogQi9wEuV+Eg96qDzhLTf4IcpaVwCCia9McpvhSl7eAG
PBb+Py+SOS77mRY3ebuOuBkbkaIRaNMCRWG6MHprO7zFCvPJ1H7Vt47ZTXo24zPY
Jx8Cv68yuIDVqCZqiChgLvzQPKfEUOX5Nt5PFFXzu40/dHU5CASYju0oGnfsMZ6g
VqfWuZoV6Y+qDt4AdxX8spuNm+mWmxNJH1CHZNTFI3ACbJ3bidAa9XG6JY539Dvu
Y+LqequSlVce5JZ6b/G/p096qjWsZo8bmyttEZgqM7uRD6Dstb4nU2E8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGGggxGjTxula2zoygAnW9sKLCAMB8GA1UdIwQY
MBaAFA3+UkjB+2mzijGI35Ry6M28hcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzIt
NTQ4ZDA4NWI0NTVkLzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzItNTQ4ZDA4NWI0NTVk
LzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/d+js2B
zm2rjz/mCY+of7QSRYln63A0D5RZwddKr7rXQu9VeVo0ms+7yTYAp86hQCVRzoq8
frkUhNGQgDegItZCT30oQ0ggK15vT+MAxRQThwvvsvelBjM1th+uzmg4Ho//s3ne
fm7T7PpL5FIJ/uxhxt3vWXHijpJSpEBuwBlCWpJ0iFn4pHecoz/YDHoNmrtYnVnR
kGNUW/M802ZbAH+YiESkIlwyB26efkBo/iREbzJ2WedBIkzhfRNsW24QRiInkUlR
naMnAanlPPVo3otrkn0uL9Iq8f8JiIh7+5QXuWMY1mxZ1ywBqfUSJ4lvvJq0owrs
RFYC/sGqxk6VKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:08 2026 by rpki-client