
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier: jfJSvtrp6DJ2v3XDhDNRZ89J3l8Hg3xiYNUvRV0KEF8=
Subject key identifier: EE:6C:95:7F:EE:91:95:9E:D2:BC:2C:D3:B9:20:1A:EF:DB:E6:B0:11
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 01A0CC6BE6E29CE3C5DB958C9F5710B8179A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number: 08B5
Signing time: Wed 23 Sep 2026 04:00:18 +0000
Manifest this update: Wed 23 Sep 2026 04:00:18 +0000
Manifest next update: Thu 24 Sep 2026 04:00:18 +0000
Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: z9ExefkblWVOEkUqOS6v8weSsebeemeIeFlomQZcBSA=)
2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:e6:e2:9c:e3:c5:db:95:8c:9f:57:10:b8:17:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Sep 23 04:00:18 2026 GMT
Not After : Sep 24 04:00:18 2026 GMT
Subject: CN=ee6c957fee91959ed2bc2cd3b9201aefdbe6b011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:4e:d0:f3:11:20:25:55:24:23:ed:6b:f1:
33:58:69:73:7a:e2:7f:db:31:a4:34:d4:62:bb:e8:
e3:fc:c0:10:0a:f9:40:95:43:29:99:58:0e:7b:53:
d9:48:c2:0e:32:1e:25:ec:cf:e0:3f:e6:fb:e6:bc:
63:1f:82:d2:a7:3c:91:03:39:aa:d7:48:db:6a:7b:
2b:8d:af:ee:a3:6f:28:20:cc:38:a7:43:95:92:71:
e7:ba:57:cb:71:73:e0:f0:de:89:11:05:64:5e:ae:
75:53:42:88:f4:3a:71:64:7b:90:2d:d5:00:ef:6b:
9b:b0:40:a5:68:1b:f6:cb:5b:c8:c7:19:42:1e:7b:
ba:5a:2a:b2:ca:e0:f4:17:06:bb:cf:61:83:cc:4f:
dc:f4:d5:8b:09:06:fd:4c:88:06:2b:7c:31:fe:45:
41:5a:6c:e5:41:fa:cf:2b:ac:bf:b6:fb:dc:08:24:
ce:f7:c8:ff:81:b7:c9:16:c0:16:cb:c0:40:21:b7:
15:a7:f1:13:aa:32:24:e5:4d:a4:98:d8:27:c0:bf:
51:43:b6:36:b7:1e:4d:b5:ab:c3:ca:33:d7:c8:5d:
29:15:46:0c:ff:cc:e4:6a:da:93:69:30:28:16:21:
c8:57:04:d1:cc:d7:e1:23:57:5b:48:3b:f1:29:25:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:95:7F:EE:91:95:9E:D2:BC:2C:D3:B9:20:1A:EF:DB:E6:B0:11
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0e:48:1a:7d:9a:ff:97:aa:de:0f:be:bd:c4:50:74:f8:df:
4a:83:55:f1:0a:d7:e2:91:47:21:a5:51:b6:b0:ce:b1:44:1e:
47:47:91:81:1e:e0:06:e8:6c:8f:0f:c6:84:ac:7d:09:38:13:
4f:32:a0:ec:a5:9f:27:41:bf:e7:aa:51:c2:b5:36:c1:fe:4b:
05:f9:6e:8a:53:da:84:41:ce:97:dc:05:dc:8b:ef:3f:58:8e:
60:c1:b3:27:82:59:8a:ff:f9:2a:a3:4f:8c:c7:40:12:e9:30:
05:97:2a:00:84:b0:f8:19:0c:6e:6a:5b:7d:cc:40:c6:f6:15:
a3:1e:bf:6c:94:0b:cb:61:de:4d:da:f0:d0:e4:f0:b5:6f:45:
c6:90:ea:2a:10:a6:ec:48:48:84:f2:ce:45:d5:1e:76:a1:8b:
46:c1:ab:49:25:61:62:28:9c:6b:33:73:08:07:cd:ce:0e:51:
ea:9b:5f:59:5b:cc:d4:11:57:31:e6:27:04:54:17:b5:c3:1e:
b0:d8:e3:79:94:61:1d:8e:ba:84:59:90:16:f6:f7:4b:a2:61:
e2:ff:90:b1:5e:93:f4:d6:09:ae:f4:63:28:b0:e6:50:af:52:
44:e4:d6:b4:73:ed:45:ae:63:f5:73:25:0e:b3:e8:b4:66:47:
ea:ad:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:49:02 2026 by rpki-client