Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: kITnTle/wH491raxHlAxWoew8JtzkcLkHfo6MmTyFPE=
Subject key identifier: 25:CE:3A:09:FE:5D:43:39:F1:B6:27:6E:C5:0A:E5:3D:AB:7B:4A:42
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 01A000CA0F470BFCD80A658EDABBF2AF5FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0F0B
Signing time: Fri 14 Aug 2026 15:00:37 +0000
Manifest this update: Fri 14 Aug 2026 15:00:37 +0000
Manifest next update: Sat 15 Aug 2026 15:00:37 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: 4hYP76qijNIuJxUeGnbyUTqhHxiSiBuKuRNvxbgdHEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:0f:47:0b:fc:d8:0a:65:8e:da:bb:f2:af:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Aug 14 15:00:37 2026 GMT
Not After : Aug 15 15:00:37 2026 GMT
Subject: CN=25ce3a09fe5d4339f1b6276ec50ae53dab7b4a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:28:ef:3c:54:23:a1:ad:ca:76:6a:43:cd:
27:61:d8:5c:17:34:3f:e8:ce:cf:74:63:1b:00:8f:
d6:e3:1b:41:f2:ea:22:54:a3:ff:fc:cd:38:37:7d:
68:60:c3:26:0a:33:86:92:0c:55:fe:b4:4e:af:b6:
e6:d5:0e:33:80:4a:21:29:6d:34:63:c2:aa:19:9a:
56:c1:8d:ce:54:1d:d3:03:e1:fb:85:71:10:39:a5:
cd:52:81:c9:8a:79:d1:e1:d6:64:33:ed:95:62:3f:
96:19:2c:50:26:14:6e:ab:8a:84:98:58:c7:a6:4a:
6b:e8:8f:b1:20:3e:d3:e1:26:81:2e:7f:06:9d:0f:
4c:ce:3b:27:6c:62:ec:e8:be:24:95:82:e5:2c:77:
a9:30:fd:38:9c:e6:46:90:57:3e:a0:9e:4f:58:f9:
4d:df:a2:ba:79:4b:ce:e3:1b:96:b0:e9:8a:f8:13:
de:9d:98:de:be:50:15:ec:3d:1d:22:5a:7b:ee:e3:
b4:5c:a3:ec:f7:c2:11:63:a4:05:f8:fc:b9:fe:a1:
17:35:55:10:de:31:86:70:08:24:61:75:cf:bc:1a:
9f:d0:6c:d2:f9:75:13:5a:6f:eb:98:09:4d:3e:b0:
f7:e1:23:6a:68:a0:b0:e3:d7:06:d0:f2:bc:ee:ea:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:3A:09:FE:5D:43:39:F1:B6:27:6E:C5:0A:E5:3D:AB:7B:4A:42
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2f:55:00:03:6f:49:c2:d9:0e:6b:3c:93:ff:be:7b:54:5c:
6c:2c:a5:9a:1e:29:30:9d:4f:41:6c:82:fe:f5:8d:9f:b9:88:
7b:ae:04:46:76:27:2c:8f:66:de:b4:66:27:f0:9b:0d:af:5e:
92:0b:d6:70:71:3e:2c:63:36:3f:23:74:55:d1:43:ec:7d:3d:
3f:8f:ed:30:4a:b9:ac:34:ea:40:6f:5e:91:14:c1:ce:e8:63:
c9:cb:4e:ac:d0:41:e3:b0:8c:87:f2:30:87:27:99:aa:d6:ba:
d3:91:74:e4:4e:f0:ca:e7:da:01:92:c8:5e:9e:de:2c:be:81:
eb:6f:2c:64:28:e3:fc:9b:7a:93:c4:36:5f:f2:41:be:1a:e7:
31:95:81:94:c6:48:8e:a4:25:86:05:b0:c4:4b:68:42:3d:67:
69:1c:0f:5d:9f:42:6f:2c:0d:6e:c5:85:f0:33:01:5e:ba:81:
3b:e0:3d:57:87:7e:10:67:90:f1:95:2a:12:91:c6:76:5c:11:
83:f4:00:cc:0a:3d:52:a5:32:b3:c5:5a:fa:48:3c:22:68:04:
3d:d6:eb:5b:17:e5:7e:c7:40:35:fd:c3:e9:c2:94:bc:45:84:
5f:a1:40:f4:0f:55:c8:b6:81:49:19:f6:98:17:84:80:8a:63:
3d:8d:72:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyg9HC/zYCmWO2rvyr1/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNDljNDlhNzVjZjZlMjQ4YzliNTFjNzA1NGRiMmY4ZDlk
Y2VkY2IwHhcNMjYwODE0MTUwMDM3WhcNMjYwODE1MTUwMDM3WjAzMTEwLwYDVQQD
EygyNWNlM2EwOWZlNWQ0MzM5ZjFiNjI3NmVjNTBhZTUzZGFiN2I0YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSwo7zxUI6GtynZqQ80nYdhcFzQ/
6M7PdGMbAI/W4xtB8uoiVKP//M04N31oYMMmCjOGkgxV/rROr7bm1Q4zgEohKW00
Y8KqGZpWwY3OVB3TA+H7hXEQOaXNUoHJinnR4dZkM+2VYj+WGSxQJhRuq4qEmFjH
pkpr6I+xID7T4SaBLn8GnQ9MzjsnbGLs6L4klYLlLHepMP04nOZGkFc+oJ5PWPlN
36K6eUvO4xuWsOmK+BPenZjevlAV7D0dIlp77uO0XKPs98IRY6QF+Py5/qEXNVUQ
3jGGcAgkYXXPvBqf0GzS+XUTWm/rmAlNPrD34SNqaKCw49cG0PK87uq59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXOOgn+XUM58bYnbsUK5T2re0pCMB8GA1UdIwQY
MBaAFA9JxJp1z24kjJtRxwVNsvjZ3O3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYt
ZDgwMDc3ZTEyYjVkLzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYtZDgwMDc3ZTEyYjVk
LzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtS9VAANv
ScLZDms8k/++e1RcbCylmh4pMJ1PQWyC/vWNn7mIe64ERnYnLI9m3rRmJ/CbDa9e
kgvWcHE+LGM2PyN0VdFD7H09P4/tMEq5rDTqQG9ekRTBzuhjyctOrNBB47CMh/Iw
hyeZqta605F05E7wyufaAZLIXp7eLL6B628sZCjj/Jt6k8Q2X/JBvhrnMZWBlMZI
jqQlhgWwxEtoQj1naRwPXZ9CbywNbsWF8DMBXrqBO+A9V4d+EGeQ8ZUqEpHGdlwR
g/QAzAo9UqUys8Va+kg8ImgEPdbrWxflfsdANf3D6cKUvEWEX6FA9A9VyLaBSRn2
mBeEgIpjPY1yIQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:17 2026 by rpki-client