Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: CleHX4RCNjX63O86YpCYoMAtN+dy1RuBN8tQPnzCWYM=
Subject key identifier: 54:0A:C9:6F:2E:34:5C:C1:CB:D5:78:11:42:4C:45:79:78:7B:3B:C3
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019EBB10486FA4FB2D41E455205735CB6655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 09:01:06 +0000
Manifest this update: Fri 12 Jun 2026 09:01:06 +0000
Manifest next update: Sat 13 Jun 2026 09:01:06 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: Wh1aZuX/1pOhJCU9u6CYz/RUIZpDVuOcZscgU5ongpU=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:10:48:6f:a4:fb:2d:41:e4:55:20:57:35:cb:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jun 12 09:01:06 2026 GMT
Not After : Jun 13 09:01:06 2026 GMT
Subject: CN=540ac96f2e345cc1cbd57811424c4579787b3bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:06:24:de:0a:ac:08:1a:4e:78:d6:dc:84:
cc:e4:0e:a2:b0:31:cb:9d:9a:f9:94:b4:c5:cb:9e:
b8:3b:2f:89:6c:92:09:dd:2b:4b:56:15:26:9a:9c:
b6:92:10:63:b4:d7:be:ed:fb:58:c7:6c:2a:4a:f7:
72:cd:1c:14:42:5a:7c:53:29:8b:e2:23:05:b2:f3:
e5:82:1d:f5:f8:71:c4:29:74:b0:37:2c:61:71:01:
86:1f:25:60:93:7e:7c:d4:f8:08:8b:93:a5:82:4a:
6b:1a:bf:16:04:d8:a2:20:06:f7:72:9e:b6:2e:d7:
64:8c:c0:b2:24:6e:5b:e8:cf:64:c1:80:9d:f8:b7:
9e:8f:9a:97:97:e6:e1:e3:09:4b:d2:54:b4:fc:d7:
3b:ea:64:64:18:ec:07:31:ec:db:9a:bb:ad:cb:1d:
07:59:cc:53:b9:f7:cf:03:14:fd:53:3b:26:55:93:
d4:be:d5:a8:33:6f:c4:e2:c0:b1:32:b3:cf:9f:14:
01:a0:44:17:30:dd:d9:b2:f8:ab:d8:00:9b:4f:b3:
8a:3b:f2:ec:73:0d:db:25:57:08:7b:c8:93:5a:b8:
7d:d9:c2:bd:99:3a:eb:6f:15:9f:2e:fc:9b:59:de:
b6:b9:63:29:63:73:36:be:54:8c:09:55:12:2e:a1:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0A:C9:6F:2E:34:5C:C1:CB:D5:78:11:42:4C:45:79:78:7B:3B:C3
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fb:a0:a9:34:a0:b7:63:34:f7:9a:3a:9a:41:3c:21:b6:04:
c4:ee:38:e9:8d:50:0b:fb:dc:db:2d:d0:ad:54:3e:f1:80:31:
ec:8a:9d:bf:0f:83:b5:87:37:41:a0:dc:5c:2b:cb:7d:d3:77:
7b:e7:6f:62:b7:ba:4c:d5:aa:11:cd:28:66:78:ea:ae:89:a8:
63:65:ed:d4:fa:7f:60:cc:3d:9d:52:c7:51:75:a6:0d:54:4a:
9b:e0:d4:41:86:cb:5b:d6:11:e5:ea:95:d8:6f:16:64:83:85:
35:f4:fc:5d:84:b0:2a:51:c9:a2:ca:67:ab:5c:da:16:17:fb:
2a:80:8a:bf:fb:a1:83:d6:c2:de:2b:13:5f:29:ac:e9:9b:ed:
f9:84:d5:22:a5:7e:5e:2d:66:9f:4a:6f:62:28:02:e7:0f:12:
9c:72:44:4d:3e:ee:2e:c6:e2:96:2f:2e:25:cc:3f:f2:2e:4c:
a3:e7:c5:34:98:7f:0c:c4:8e:77:0d:aa:53:fc:c7:48:87:aa:
bb:1b:dd:4d:55:6a:b1:77:82:c9:20:fa:07:e3:cd:ea:f4:aa:
f9:28:b9:7b:5a:99:b6:37:fb:13:49:42:a7:92:16:78:6f:d6:
a2:5e:ca:f2:7d:9d:92:e6:36:55:a5:fa:20:46:7e:d6:6f:de:
84:76:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:54:33 2026 by rpki-client