Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: ZTZ5woe5nwDLizEnMtOhHUlNtUSinGsrTOYZylnKTpg=
Subject key identifier: A4:D4:57:05:15:D2:65:80:19:83:86:0B:4A:AF:99:FF:A8:1E:ED:BE
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 019D988696A16EB6D3C21C17C02859CF0FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 07A0
Signing time: Thu 16 Apr 2026 23:00:50 +0000
Manifest this update: Thu 16 Apr 2026 23:00:50 +0000
Manifest next update: Fri 17 Apr 2026 23:00:50 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: 49EXljPktVj1uNRj4Tdqu+UJ9dGY05T6kOJbFjzCD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:96:a1:6e:b6:d3:c2:1c:17:c0:28:59:cf:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Apr 16 23:00:50 2026 GMT
Not After : Apr 17 23:00:50 2026 GMT
Subject: CN=a4d4570515d265801983860b4aaf99ffa81eedbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:8c:66:38:7a:75:b9:79:87:35:85:df:ac:
d4:7a:05:e8:a1:ed:6a:fc:23:ec:f3:fa:88:c8:e0:
1f:9a:3e:72:96:46:f5:54:2e:9b:86:ba:52:ae:02:
70:a8:c8:b2:54:1e:0a:d8:65:fd:32:1e:35:46:c0:
c7:79:8a:17:27:91:ac:c5:8b:33:d5:07:2f:b5:cf:
c4:52:d6:30:19:54:f6:73:39:e1:47:92:0c:74:fe:
fa:6e:94:dc:78:db:76:9b:cb:64:3a:33:92:a4:97:
4d:f0:78:eb:ad:45:d9:0d:6c:c4:b1:48:f0:40:da:
6c:02:35:ac:15:20:c8:74:1a:fd:a8:aa:0d:ef:ce:
f7:a1:8d:f2:3d:7e:a7:a2:99:70:b4:b8:ef:80:56:
a4:20:e0:48:c2:06:5b:f7:78:e9:26:17:65:92:81:
85:cd:1e:72:9e:88:b9:9c:8d:ef:8a:f0:e8:c7:72:
da:89:86:fe:73:90:53:2b:d2:68:bd:02:16:c2:db:
cb:23:a1:3c:0b:fd:eb:e6:94:37:9c:cf:88:38:fa:
e4:3a:9a:c6:64:f1:09:1b:d2:73:7b:a5:e2:bf:55:
49:62:35:2a:d1:46:ec:aa:67:05:eb:4e:06:cd:e5:
b4:18:61:2c:cc:7d:4e:fd:49:3e:4f:51:66:d0:44:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:57:05:15:D2:65:80:19:83:86:0B:4A:AF:99:FF:A8:1E:ED:BE
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:df:e8:7f:c8:d5:e9:50:3f:bd:0b:c7:cb:c9:44:36:91:25:
97:44:d2:b6:d8:64:0f:48:3f:d7:09:0d:ff:4d:4a:41:d5:fe:
e7:cc:1b:88:44:74:83:7f:68:1d:3b:f5:fa:c4:77:f4:49:3e:
a0:38:55:ac:71:7c:37:c5:8a:5b:df:dd:86:69:19:9d:2c:a2:
db:67:79:f1:a7:b2:be:5b:dd:00:22:b1:df:89:8a:ee:15:fd:
d5:c0:30:64:f6:e8:ef:ed:3f:9b:f2:75:61:fb:95:ad:9a:20:
8a:69:de:28:d2:34:25:22:df:0a:d5:84:64:96:98:b8:85:ce:
13:7e:b6:d5:1d:53:7c:f1:16:f3:1a:d2:2f:bc:1f:75:b5:9d:
c9:ac:fa:bf:3e:36:10:32:9f:e7:b9:05:e9:a1:73:6e:b8:dc:
6c:88:a6:32:bc:4d:17:8f:cb:09:17:67:35:c0:29:41:3a:87:
38:46:e0:0c:ae:b9:5b:93:0e:95:2a:73:89:87:eb:e5:65:f2:
b9:19:69:24:76:c6:12:fe:97:c1:56:b6:93:db:c1:ca:8e:6f:
eb:d0:40:90:8d:96:89:e3:d0:71:2e:95:f3:2d:f4:e3:2a:5c:
31:96:e7:f0:e8:b8:e1:10:f4:07:f4:fd:d2:83:72:b4:1a:39:
9c:5a:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:38 2026 by rpki-client