Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: jyoDGqwQabrCiGxO1J+gLLBmrzm4rNWo4d9p1XHKGh0=
Subject key identifier: E2:3C:E0:A8:35:10:F8:21:19:4D:02:3D:2B:F6:11:BB:56:0D:7B:F1
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019DD163C263890FD221E7F3E8F5182EBDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 18E1
Signing time: Tue 28 Apr 2026 00:01:09 +0000
Manifest this update: Tue 28 Apr 2026 00:01:09 +0000
Manifest next update: Wed 29 Apr 2026 00:01:09 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: uexnBtPUGJlalFzZfOk43z8lRbP63KgHGzitM0FM0Ec=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:c2:63:89:0f:d2:21:e7:f3:e8:f5:18:2e:bd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Apr 28 00:01:09 2026 GMT
Not After : Apr 29 00:01:09 2026 GMT
Subject: CN=e23ce0a83510f821194d023d2bf611bb560d7bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:3e:64:00:26:d5:0d:b1:ff:c4:30:74:fb:
92:7d:a9:fd:35:3d:50:cb:aa:9b:0f:7c:63:7a:f9:
00:fa:2d:77:8a:1f:93:e4:f3:da:17:00:19:0d:ba:
1a:83:a4:6f:1f:23:74:46:9e:fc:60:37:2d:0b:e9:
8b:5b:b3:6c:33:30:43:31:b1:7e:43:46:93:e5:55:
8b:47:9c:28:5e:79:ac:b5:8f:8e:47:c2:ad:a4:72:
c6:57:1f:fc:91:bb:d3:62:36:ab:a1:96:98:16:a7:
91:90:2e:aa:f6:d1:42:0a:d7:fc:af:30:ce:46:87:
18:66:a2:55:7f:08:70:b5:31:a3:e7:10:51:98:f5:
66:f2:7c:a9:03:02:79:f3:ce:25:9f:d9:7d:2f:b7:
b6:30:fb:24:55:e1:d2:01:74:67:5a:63:92:5c:4d:
07:4a:f3:15:4a:0b:82:f4:47:a4:b1:6c:4e:82:57:
11:82:96:ec:0b:fb:32:78:1f:eb:da:56:ad:cd:da:
cb:75:a8:96:01:d9:f1:06:57:00:ac:0b:c2:00:f4:
54:86:53:91:25:da:5b:85:f5:67:27:0d:cc:a3:d0:
02:14:89:a7:7d:6b:55:df:58:a0:10:e5:73:13:17:
9c:c3:74:e4:90:fe:57:dd:4b:7d:91:12:2c:58:a3:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3C:E0:A8:35:10:F8:21:19:4D:02:3D:2B:F6:11:BB:56:0D:7B:F1
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ee:b7:26:52:69:5f:c7:a5:9a:97:72:82:3d:8f:0e:98:4c:
70:22:ed:a6:8d:13:a0:91:98:16:e5:92:fb:3d:0e:be:ff:c5:
10:46:9d:6f:b1:c5:3a:c4:3d:f3:bc:4c:1a:7a:fe:24:1b:9f:
bd:a7:3e:85:4c:06:86:78:a7:1b:1f:7c:2c:14:ba:a1:26:8b:
17:44:ce:3f:2c:2b:c8:a5:aa:f4:13:52:e3:ec:da:9a:78:c6:
94:7e:5a:19:f3:ff:b0:ea:43:19:24:2e:48:0f:ed:d9:1c:ea:
63:21:87:f9:c0:b4:d6:41:10:90:72:f5:cf:21:cf:2c:82:1d:
35:39:87:6d:ef:c9:ab:54:bc:59:38:fb:8f:f1:d8:65:87:6b:
58:82:f8:0d:e1:9f:ae:52:c6:6f:a4:8a:10:00:38:36:71:9c:
8e:43:93:0a:ff:74:d5:47:93:10:60:bf:9b:5a:65:cd:ed:28:
17:d7:14:9f:e5:d7:1c:0c:a0:f5:7e:14:2c:00:e3:8c:87:d8:
d0:2b:fa:f2:bd:8c:bc:b0:a9:bd:53:f7:9f:d7:67:16:a4:c2:
e7:a4:52:7a:4f:c0:16:6e:1c:33:db:0a:09:1f:97:1c:7d:97:
1b:0c:79:0b:20:cf:e8:3a:a9:22:e5:37:55:fb:70:ad:36:01:
32:c0:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:22:36 2026 by rpki-client