Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: /KEAcppG4jkZNjr9rwtZW05Mgc+SOsebBF260NNrjv8=
Subject key identifier: 1E:61:7B:C1:1D:4B:94:BD:3B:7D:C7:5B:86:2B:4B:31:6D:77:A9:7E
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019CE5C84A7E751C1D43BB041B56FCA4CA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 06:00:34 +0000
Manifest this update: Fri 13 Mar 2026 06:00:34 +0000
Manifest next update: Sat 14 Mar 2026 06:00:34 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: RUKgptYfXuXZ2xNe3HhpAYugMRYGMMCjzMfgaJFtt/A=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:4a:7e:75:1c:1d:43:bb:04:1b:56:fc:a4:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Mar 13 06:00:34 2026 GMT
Not After : Mar 14 06:00:34 2026 GMT
Subject: CN=1e617bc11d4b94bd3b7dc75b862b4b316d77a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:68:e5:31:b9:db:e7:cf:ec:1e:37:70:43:
a3:03:8c:c3:37:eb:42:fa:23:ab:27:4c:6e:03:36:
94:65:67:55:06:75:91:3c:83:b1:72:a6:8e:39:12:
a2:74:4d:a6:60:8e:14:c8:80:0d:db:e9:10:a8:e9:
25:f4:73:c2:9b:43:d2:33:43:c6:cb:57:f1:da:bc:
e3:7c:fc:66:ee:67:d8:04:55:09:09:85:0b:78:ca:
83:f7:10:d6:ed:16:be:12:32:6f:a2:21:8b:52:f7:
92:82:ab:67:dc:41:23:83:b8:19:e4:f6:b3:09:b8:
7f:3c:5d:28:c5:11:5d:de:57:a4:bc:4a:19:31:cb:
4a:02:74:19:84:b2:a4:29:d9:20:cf:b2:b6:c0:e0:
d5:2b:3d:7d:2c:04:7f:23:c2:08:10:8c:f0:c8:6b:
a1:e9:9f:69:19:11:bb:09:dd:9b:81:54:02:c6:5c:
ad:04:72:38:7b:43:a4:dd:96:70:94:d9:3f:07:6b:
c1:94:6d:94:19:0d:d6:e2:ae:eb:82:f6:52:23:65:
e1:25:14:3f:cc:78:71:ed:37:0c:54:81:f5:00:75:
e4:3e:8b:34:97:c2:78:21:73:92:01:3f:cd:cc:5c:
8d:67:da:5f:cc:bd:61:16:7c:4f:3e:b4:65:03:5e:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:7B:C1:1D:4B:94:BD:3B:7D:C7:5B:86:2B:4B:31:6D:77:A9:7E
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d4:ed:f2:ad:4f:95:69:1b:54:b7:8f:8b:21:9f:1d:60:4a:
bf:79:cd:b7:3d:62:70:9e:04:95:47:97:79:65:cc:86:d6:8e:
b1:ba:bf:97:dd:30:a9:a8:c8:b6:c1:20:a7:10:9d:10:08:25:
81:c9:c0:c9:ce:3e:dc:6e:c1:e4:36:b8:9f:51:1e:e1:a7:66:
af:f4:5b:1f:24:15:d8:e7:5d:dd:9a:52:27:47:e6:d3:6d:35:
1b:6b:05:11:1b:68:d5:d0:e1:18:ea:b2:4b:07:bd:37:25:d4:
44:41:41:fa:db:fd:3f:3a:e2:83:d6:f0:9c:27:d8:d9:cd:1f:
a1:bc:a2:86:e1:e3:a3:2d:d0:22:32:8b:61:c1:2c:a8:7d:73:
2c:4d:42:f6:01:ae:9d:a0:61:05:15:2f:71:89:ba:c1:57:13:
96:60:e3:cf:12:7b:b4:f2:d7:2b:e1:e0:1d:da:bb:19:db:39:
15:44:6a:1f:29:20:01:c5:ac:87:d7:cd:a8:15:f0:a3:d1:05:
06:a3:c4:71:3b:91:43:34:7c:cf:86:df:b1:9a:96:ef:c0:42:
fb:cc:b2:d6:c2:0e:6c:15:69:49:12:5c:02:21:5a:54:68:0d:
b5:b4:50:4b:19:22:bf:a0:d3:af:91:35:8c:96:f6:ae:e8:e6:
b9:8c:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:42 2026 by rpki-client