Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File: 26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier: tqwSloadxYX4g+ki0hTS9chVXsSG3yzt7y3u+WloB5Y=
Subject key identifier: 86:CE:DE:37:16:56:10:34:18:FC:3D:0C:90:12:B5:A8:44:0B:8E:1A
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer: /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial: 019A7225DE34BB6363C66F94B3C7E81E46B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number: 0398
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: K6rD1S7Y8gfzXL7YmEYR3Arr6nrBNtZxVSOlRaKz4Lo=)
2: UjW7yWELLZ4wmIBJun9f47O3M5s.roa (hash: BN8elBK909fGWcFpTeqxq0IE/blqpykN7942105/TNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:34:bb:63:63:c6:6f:94:b3:c7:e8:1e:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=86cede371656103418fc3d0c9012b5a8440b8e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:63:03:0b:f7:ed:41:66:31:b6:50:32:5e:
03:a0:08:07:10:89:cd:e7:33:29:ee:e0:0e:e1:0f:
ee:49:49:cd:bb:d0:45:bd:b3:b3:37:be:57:0d:57:
23:7a:30:43:b3:6c:72:e5:11:15:37:3b:8a:b2:cd:
7d:25:95:8a:14:5c:f5:be:7c:28:7a:9c:61:1f:d8:
06:d0:e2:e8:7f:98:d3:01:4a:bc:64:24:96:44:b6:
fc:02:38:99:be:39:75:18:6a:be:42:85:27:a4:6d:
2a:c5:88:1c:28:a4:3a:a4:1e:5c:e4:8b:77:ec:fe:
6c:83:96:cb:aa:0b:b8:8e:68:0a:1c:87:bd:cc:d8:
f1:51:59:5e:bf:ba:ce:5f:b9:0b:46:7c:ef:21:d0:
d3:14:ce:d2:1e:99:30:72:46:18:5d:f5:47:c1:0c:
c9:96:d0:45:27:e2:29:6b:00:9e:3e:05:22:d3:23:
94:19:e7:56:b7:72:40:77:ce:02:49:1e:9a:76:82:
a4:d7:a6:ad:55:c7:90:3f:c0:40:e2:77:0e:63:a7:
64:ef:53:dd:eb:80:81:88:2c:fd:89:91:01:cc:3a:
ba:26:00:0c:39:2b:3e:5e:51:9c:2a:25:dc:f9:4f:
a4:a7:53:2c:71:c9:71:9e:09:22:a3:9c:1e:57:a0:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:DE:37:16:56:10:34:18:FC:3D:0C:90:12:B5:A8:44:0B:8E:1A
X509v3 Authority Key Identifier:
keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9c:bf:19:29:8b:f7:20:cc:52:8f:99:97:49:21:45:77:de:
d5:62:74:03:d1:44:0f:34:c9:32:b7:e8:bd:61:76:db:3d:c0:
8f:7a:9e:64:1f:6f:5c:08:3b:a6:3b:21:a7:7d:7c:0d:43:90:
82:54:92:1e:73:c3:81:a4:f1:eb:f9:de:f9:0b:b3:44:32:2a:
ed:8b:3a:36:c8:1c:c0:01:82:9c:2c:4f:ba:5c:76:15:0f:b8:
57:86:bd:1c:9c:88:81:a0:f2:d8:14:b5:1f:34:42:9d:d7:dc:
40:4f:22:5d:63:4e:24:1d:4d:3d:15:57:77:fd:96:97:c6:0a:
28:38:bb:fe:97:0d:54:e6:28:34:21:af:36:8f:46:11:70:77:
95:d4:78:27:75:f3:a9:06:b2:95:76:3a:bb:ed:9a:bb:4f:67:
6a:3e:ff:fc:de:32:ee:36:92:dc:8c:01:64:d9:11:e6:4f:a7:
52:b6:81:89:f9:e5:d2:2a:b3:ba:9d:f3:df:19:4c:ac:fd:0e:
0e:01:00:8e:62:f0:b3:d0:cc:89:40:14:45:d5:c6:1c:f0:8e:
cc:b8:a1:36:94:6c:99:a0:f4:10:43:ec:ba:de:eb:10:ab:a7:
99:4f:bb:7d:51:5e:85:3b:18:0f:83:60:72:5c:63:9f:a0:f6:
da:71:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:13 2025 by rpki-client