
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: j8nwHv7KRikjXFkOYAgwEau8AlU2nT2xMS8G985+25c=
Subject key identifier: 51:F9:E1:60:E0:45:65:EC:61:BE:56:C0:32:E7:74:0B:CC:5B:9F:BC
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 019D999926C18C27B6574BB651C1BCDDD44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 070D
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: nznBp3gRJg8LtoxSqiUAQlJwW2cqVcDJNZYMMXVPO1E=)
2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:26:c1:8c:27:b6:57:4b:b6:51:c1:bc:dd:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=51f9e160e04565ec61be56c032e7740bcc5b9fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:2c:37:3a:5f:bd:ba:ca:6e:4e:32:b4:99:
7a:ab:c9:32:9c:05:c4:c3:b2:11:3f:cb:a1:86:b5:
3d:1a:cf:ee:e3:2e:b8:e2:0c:70:6b:a7:63:50:c9:
07:1e:2b:3f:2b:9f:14:99:68:bf:6d:34:57:1f:98:
3f:a8:20:b3:2d:52:67:83:a3:e8:fd:28:c7:9e:a4:
a2:cb:31:68:a1:21:25:d8:4d:ef:0b:24:7b:10:49:
98:10:59:31:8a:8c:d4:92:6f:6d:12:28:02:3e:9e:
1d:73:e7:3e:1f:fe:52:34:c3:74:7b:3b:40:cf:2a:
16:06:38:27:21:bb:6f:60:aa:ba:11:33:42:68:69:
e7:dc:a7:52:27:be:96:4b:6b:9a:2f:79:ee:94:79:
5d:08:cc:54:02:19:fd:19:02:4a:9d:9b:24:f4:4b:
c3:93:84:5d:2e:2c:53:a1:4c:cc:9b:bc:fe:cc:2a:
b8:b7:5c:1c:dd:13:31:8c:d0:42:6c:17:e2:cc:e9:
12:f6:60:f0:a2:83:ce:ad:ed:4b:35:28:bf:26:a4:
b2:d7:ef:b7:6c:3d:cf:82:6e:71:6f:c5:7c:61:a2:
d1:a9:32:ed:16:31:a2:38:14:19:a3:08:31:a7:e2:
14:da:e1:01:81:38:83:b4:18:21:5f:49:76:17:c6:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:E1:60:E0:45:65:EC:61:BE:56:C0:32:E7:74:0B:CC:5B:9F:BC
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:40:a1:12:4f:ca:11:ae:0a:94:ab:2f:b9:c8:cf:d3:db:
e2:68:ae:d5:e8:69:37:85:0d:93:29:00:ed:f1:04:a9:a5:d2:
b9:a9:01:b0:36:d6:03:c5:75:2a:7a:25:98:b6:57:40:06:2a:
5e:c5:1f:4e:c8:d6:4d:69:09:3b:dc:46:1e:fa:ac:73:eb:72:
06:8c:1b:6c:35:c2:31:6d:29:3e:47:78:15:36:6a:42:2b:27:
68:ab:f5:0f:f4:c4:01:79:ad:7e:46:67:fd:80:6e:ce:95:03:
b7:a1:95:21:bb:cb:04:3b:fe:b1:a1:a1:c1:b3:35:2c:27:a9:
6c:86:35:0c:40:ab:5d:60:d1:8d:ee:89:37:da:8a:c7:7e:1f:
4d:e8:46:a9:b6:82:a0:13:9f:7e:16:69:5b:cd:5d:ab:8c:01:
9a:a5:4c:f0:ce:80:e4:61:6c:5a:28:e8:7e:4c:c7:2e:84:09:
e5:65:f2:25:12:93:ba:4a:46:f5:f3:a7:86:7c:b2:c0:40:ed:
48:02:57:78:68:9b:7c:47:59:4f:23:ae:cc:89:24:52:1f:8c:
c7:63:a2:2d:0d:67:49:84:4c:3d:ce:08:f9:55:71:3e:ad:c7:
c3:1b:c0:75:36:c1:c3:15:c7:8e:9c:8d:08:3b:04:6c:95:51:
97:18:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:24 2026 by rpki-client