Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: NefHCxBi09lTizGe6JmQbfnnfSrzuXg5HY1vGH5AsNI=
Subject key identifier: 83:23:A3:DF:06:DB:D0:81:F3:E7:2B:B6:4D:A0:7A:A9:00:33:7F:5D
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 01A0C39FC877E362CC494CFDF87E77617797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0944
Signing time: Mon 21 Sep 2026 11:00:23 +0000
Manifest this update: Mon 21 Sep 2026 11:00:23 +0000
Manifest next update: Tue 22 Sep 2026 11:00:23 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: 99hb45nuH1Hz8ShVn2Aar56DmAN1CVG//SFkKEpQNkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:c8:77:e3:62:cc:49:4c:fd:f8:7e:77:61:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Sep 21 11:00:23 2026 GMT
Not After : Sep 22 11:00:23 2026 GMT
Subject: CN=8323a3df06dbd081f3e72bb64da07aa900337f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:3c:71:7a:5b:7c:15:ff:20:4e:77:e6:b5:
a8:1a:71:0f:4a:c5:8f:de:fc:6e:ee:72:9b:2d:2c:
80:44:83:27:12:4e:9a:42:89:b1:2c:11:c3:a2:ab:
98:ec:9b:ab:00:29:f8:ab:1b:d6:0c:f8:d3:43:75:
df:aa:49:50:42:e7:b4:59:87:b0:9c:4d:20:66:af:
e7:f0:63:18:d6:77:dd:f4:fb:24:5e:46:23:ad:32:
93:f9:7a:50:5a:5a:39:83:03:90:51:92:99:33:92:
c3:ef:62:1b:bd:b0:77:62:46:7b:88:8d:27:a4:a6:
a5:34:b3:35:8a:4d:ed:58:02:a6:cb:67:88:8a:a6:
8c:09:c3:09:15:c9:76:f1:cc:4f:64:a1:79:62:3f:
bd:0f:f8:05:eb:49:65:e7:7b:06:d6:18:c0:03:f0:
03:d8:25:93:28:63:2e:26:0e:a7:49:fd:87:4e:08:
00:52:eb:91:ac:f3:81:b2:e4:27:4f:1e:c3:d2:80:
78:9a:6f:eb:af:99:1e:82:0b:33:07:39:4a:69:37:
d6:b6:52:8e:46:96:38:eb:86:f5:84:46:06:27:4f:
f5:c6:e6:12:ba:df:c3:03:45:c6:65:89:a6:f2:59:
b3:2f:87:ee:d8:f3:48:da:c2:74:52:7f:be:8a:96:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:A3:DF:06:DB:D0:81:F3:E7:2B:B6:4D:A0:7A:A9:00:33:7F:5D
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:13:18:e4:59:95:50:80:17:54:9c:bd:84:35:80:9c:a4:
37:15:e8:56:b2:9f:90:79:2b:8e:9e:10:6a:12:1a:b9:63:60:
2f:84:63:89:0c:78:0a:ee:7f:e0:60:b8:38:64:25:0d:2e:e1:
49:da:23:04:1d:42:50:ab:4a:3f:16:5c:28:2d:74:b6:1d:d7:
8c:00:c5:f8:74:cf:fd:df:d1:51:c5:47:54:d4:8b:14:47:09:
8d:ce:ac:bb:da:8a:c1:4c:1b:7d:03:e5:65:71:31:2c:05:95:
b3:cd:d6:b6:1b:a3:69:ef:4b:c4:e3:04:f3:81:eb:c1:a4:a7:
d6:57:98:2e:25:b4:3d:75:48:f0:40:25:de:2b:2e:77:0d:14:
31:3a:94:cd:78:e4:29:43:fe:d1:d9:28:09:7e:38:a0:e8:29:
d4:4b:2e:d7:12:fa:16:84:2d:25:ed:53:25:52:26:a4:91:f8:
6d:aa:c3:b0:83:47:a4:ef:4e:3b:ae:e4:62:3d:16:8b:1f:06:
31:97:07:fe:b0:32:54:f0:ff:da:35:0a:d0:b0:b3:fa:e3:58:
f1:db:18:df:22:0d:57:e2:ec:f1:db:19:fc:66:ce:a8:55:b8:
c4:f2:5e:b1:03:19:19:99:f9:d3:19:90:93:bf:94:ee:34:f4:
7e:ab:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:22:57 2026 by rpki-client