Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: 1LKi5ejaYvGvRTY5Rjm7PhPY/AVvcQV27U1xRYFYtUI=
Subject key identifier: 38:67:A7:B8:0D:80:2C:67:76:02:3C:87:87:67:E5:80:EA:E9:E5:57
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 019CADFDFB261F6D5CD4BD7307E64D1936FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 0693
Signing time: Mon 02 Mar 2026 10:00:29 +0000
Manifest this update: Mon 02 Mar 2026 10:00:29 +0000
Manifest next update: Tue 03 Mar 2026 10:00:29 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: XYB+DtK4mbKlhgTPjmLidCLSY3EHteQxvPRrrp17irE=)
2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:fb:26:1f:6d:5c:d4:bd:73:07:e6:4d:19:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Mar 2 10:00:29 2026 GMT
Not After : Mar 3 10:00:29 2026 GMT
Subject: CN=3867a7b80d802c6776023c878767e580eae9e557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:3e:90:14:e9:90:33:a1:a5:35:d4:e9:47:
86:47:09:a4:a0:9f:7a:a9:22:b4:8f:4a:98:0c:91:
42:37:a0:58:98:25:38:db:12:69:6b:28:78:d7:16:
62:35:d8:ed:90:bf:e5:c5:74:a6:a7:8a:57:5a:3f:
d0:3c:e6:50:72:ff:11:f0:19:21:07:c5:5f:7e:ca:
95:8a:da:0e:57:00:3a:35:9b:b1:fa:3f:fd:92:83:
96:47:65:dc:af:9f:3f:00:42:af:94:47:4b:85:1f:
23:f1:c5:70:cb:b6:ae:a2:e5:04:ff:35:b5:63:0f:
b2:b0:74:56:a3:fd:bc:87:0f:ce:1e:68:08:73:2d:
3b:85:5e:77:00:ed:cf:3e:3d:18:45:5a:33:3a:ad:
2c:17:73:bd:a8:0a:f9:32:2e:41:00:43:6b:7d:22:
97:11:bc:f0:f7:82:5c:ff:43:5a:1c:2b:46:91:0c:
d4:0c:e6:eb:9d:4c:6e:07:01:88:a7:be:5b:d5:3b:
63:cc:04:04:92:9a:53:3f:c6:f2:38:b5:2c:54:04:
58:50:54:0d:74:43:bd:0a:59:bc:02:4b:b3:bf:7d:
c7:0e:02:2b:56:1d:96:a1:76:1c:e5:5d:c0:ec:7d:
11:90:26:8f:42:3b:5a:ca:05:a7:88:8f:79:b3:cd:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:A7:B8:0D:80:2C:67:76:02:3C:87:87:67:E5:80:EA:E9:E5:57
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:12:e4:d0:bb:85:e5:f6:b9:ce:a0:34:2b:ea:d4:a9:ef:b8:
ad:72:f2:f6:77:30:eb:2c:70:0e:cb:42:32:a8:7f:ac:2e:b1:
e6:d6:81:4c:1a:64:ff:f1:90:9c:32:32:1a:de:d4:d0:af:f0:
d5:93:1c:d4:1e:77:af:22:da:ff:99:04:e4:8a:fe:dc:49:5c:
24:17:e8:51:b3:24:cd:6e:51:87:7f:22:43:da:a1:04:f5:9a:
ba:f9:67:3a:12:88:4b:6b:8a:e3:66:68:f8:4c:04:a9:99:8c:
4a:2d:e1:39:7f:98:36:fb:34:3b:39:18:7f:c9:62:74:c1:cf:
91:fc:2e:6a:01:c6:01:52:ab:2c:49:e1:19:da:71:50:7e:14:
c2:79:66:c2:d3:0d:9f:3a:83:e6:1f:2c:43:f8:08:56:a6:d6:
34:81:4f:9a:cc:27:f9:e7:3f:ee:04:23:1c:76:ee:52:13:48:
30:40:6b:5d:1c:15:d5:ca:e0:8d:32:0d:05:44:e4:d5:87:8f:
e7:ad:60:71:90:7a:9c:aa:02:f7:39:20:6c:41:99:ab:cc:9a:
31:26:d4:de:b6:88:9c:95:6e:a4:37:0d:d0:34:9a:dd:d6:9e:
59:cf:40:10:48:e6:d6:b4:ef:ee:5e:e3:5f:4b:5e:65:ab:77:
05:46:08:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/fsmH21c1L1zB+ZNGTb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjEwYzhhNTgwNTQzZjkyZDE5ZmQ1ZjhmNTY0YmVlYWE0
OGNhMWUwHhcNMjYwMzAyMTAwMDI5WhcNMjYwMzAzMTAwMDI5WjAzMTEwLwYDVQQD
EygzODY3YTdiODBkODAyYzY3NzYwMjNjODc4NzY3ZTU4MGVhZTllNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdA+kBTpkDOhpTXU6UeGRwmkoJ96
qSK0j0qYDJFCN6BYmCU42xJpayh41xZiNdjtkL/lxXSmp4pXWj/QPOZQcv8R8Bkh
B8VffsqVitoOVwA6NZux+j/9koOWR2Xcr58/AEKvlEdLhR8j8cVwy7auouUE/zW1
Yw+ysHRWo/28hw/OHmgIcy07hV53AO3PPj0YRVozOq0sF3O9qAr5Mi5BAENrfSKX
Ebzw94Jc/0NaHCtGkQzUDObrnUxuBwGIp75b1TtjzAQEkppTP8byOLUsVARYUFQN
dEO9Clm8Akuzv33HDgIrVh2WoXYc5V3A7H0RkCaPQjtaygWniI95s81NcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhnp7gNgCxndgI8h4dn5YDq6eVXMB8GA1UdIwQY
MBaAFA3xDIpYBUP5LRn9X49WS+6qSMoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEt
OWUwYTVhMmY2MWI4LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEtOWUwYTVhMmY2MWI4
LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBLk0LuF
5fa5zqA0K+rUqe+4rXLy9ncw6yxwDstCMqh/rC6x5taBTBpk//GQnDIyGt7U0K/w
1ZMc1B53ryLa/5kE5Ir+3ElcJBfoUbMkzW5Rh38iQ9qhBPWauvlnOhKIS2uK42Zo
+EwEqZmMSi3hOX+YNvs0OzkYf8lidMHPkfwuagHGAVKrLEnhGdpxUH4UwnlmwtMN
nzqD5h8sQ/gIVqbWNIFPmswn+ec/7gQjHHbuUhNIMEBrXRwV1crgjTINBUTk1YeP
561gcZB6nKoC9zkgbEGZq8yaMSbU3raInJVupDcN0DSa3daeWc9AEEjm1rTv7l7j
X0teZat3BUYISg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:44 2026 by rpki-client