Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: uWZ4esr606CXGlo9LxBwCXNyVKYrYn15GDIOyEUFHa0=
Subject key identifier: A4:AA:EA:BA:59:5A:74:4B:6E:92:34:77:1C:E7:95:0A:AD:25:63:29
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01A08C7AD9EEB1A7583448E7EF19911C18C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 18:00:56 +0000
Manifest this update: Thu 10 Sep 2026 18:00:56 +0000
Manifest next update: Fri 11 Sep 2026 18:00:56 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: nM8JflxY3lIJjFSOr7IwJ/ehnsvC8DvrpzzI37znzyc=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:d9:ee:b1:a7:58:34:48:e7:ef:19:91:1c:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Sep 10 18:00:56 2026 GMT
Not After : Sep 11 18:00:56 2026 GMT
Subject: CN=a4aaeaba595a744b6e9234771ce7950aad256329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:13:c3:5a:ad:01:b6:98:ab:8f:0d:e1:0b:
f3:6c:5b:f4:d6:83:75:89:22:ca:86:20:c2:3e:45:
d4:cf:68:e5:ae:25:a2:31:d8:98:5f:b1:cf:15:ab:
6b:77:91:33:d1:02:e6:b3:dc:19:89:3d:c8:b8:96:
81:e4:92:a1:1f:e8:75:d7:e4:cf:9b:02:2e:a8:11:
c2:c4:d2:aa:c3:f9:97:0a:1c:9d:68:14:ae:d3:14:
f6:1b:da:b5:f0:51:50:1c:00:4f:29:74:fc:c3:e5:
c4:c8:c9:e0:f7:67:41:1b:6e:0d:31:24:bd:ed:41:
ad:ae:62:96:9c:f2:ec:02:8f:1c:8b:ab:b1:d3:91:
13:3a:95:b9:1c:7f:49:74:58:3d:47:da:75:d3:f2:
9f:03:5b:23:d0:93:6a:f8:20:d7:eb:d7:97:6a:a6:
15:52:4a:12:36:d3:6a:53:04:7f:d8:9a:b4:75:a0:
36:ed:78:1e:13:39:49:6d:11:12:bb:8e:71:0b:77:
dd:e7:d6:9c:7b:d7:6e:12:e4:d9:96:50:68:f0:9c:
44:cf:cd:d4:13:65:33:cb:c0:1d:1a:b9:9d:14:b1:
e3:b3:27:91:71:b9:68:15:bc:49:83:da:f1:9c:5f:
c0:59:6d:07:5d:a3:93:f0:3c:5d:25:3a:92:e8:88:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:EA:BA:59:5A:74:4B:6E:92:34:77:1C:E7:95:0A:AD:25:63:29
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:82:5e:72:1d:92:9d:ae:fa:07:b7:6b:89:9a:29:d3:bc:e9:
cc:90:00:dc:ac:23:a6:93:a0:7e:5e:c1:ae:b3:e5:4f:16:d5:
cd:f8:b0:ef:15:b4:d9:ae:b8:ca:68:5a:22:79:b9:ff:b8:ab:
d5:97:b0:f9:ff:07:66:28:53:f2:6c:80:aa:8b:38:b7:d1:09:
67:34:30:50:75:33:45:2a:eb:f2:a1:8d:27:f9:82:26:ea:21:
43:7a:38:2d:a7:dc:02:1f:c0:69:c2:52:fc:42:08:81:eb:66:
88:19:ea:0e:e6:48:4b:ca:de:72:d8:f1:0f:3f:bc:73:e4:cd:
b0:c3:81:58:f8:76:1a:f0:97:a3:bb:fb:33:07:7e:c0:48:c9:
77:c9:a3:08:f1:00:5b:7d:dd:08:bd:3f:18:4d:cb:aa:64:38:
85:fd:99:e6:37:37:d3:dc:77:83:a8:80:28:a1:f9:c2:81:77:
da:fd:59:70:4a:42:84:f7:35:d2:ec:80:a4:52:da:fd:ba:e2:
77:90:43:d6:07:8b:6b:3c:ac:ef:a8:87:9a:8e:93:77:fc:bb:
0e:2e:99:92:2a:c2:4c:cc:86:50:8e:ee:10:23:66:1f:f7:8e:
53:78:a8:0d:ba:cf:b6:12:dd:9b:f7:d0:6d:a6:fa:8e:e3:df:
4b:9e:54:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:36 2026 by rpki-client