Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: 0RCfQWS1Kk8yffoHS/Uj2q5AfIqgR4rRTFRcriQ+c4M=
Subject key identifier: 1F:74:D2:83:F2:BB:79:50:3C:07:55:EF:ED:49:F5:4A:EC:52:31:C4
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019FA2CDD93847F5C03CCF8A433108DE4022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 09:00:27 +0000
Manifest this update: Mon 27 Jul 2026 09:00:27 +0000
Manifest next update: Tue 28 Jul 2026 09:00:27 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 78BjVK1jqYfr+mf+UaXnAuCpPBWHEW9Sr7j3Zes0WY4=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:d9:38:47:f5:c0:3c:cf:8a:43:31:08:de:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jul 27 09:00:27 2026 GMT
Not After : Jul 28 09:00:27 2026 GMT
Subject: CN=1f74d283f2bb79503c0755efed49f54aec5231c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cd:ba:09:d6:70:0a:5e:8b:77:ad:2c:8a:4b:
bf:ce:b8:c1:a6:9a:43:0f:0c:65:fc:9c:0e:ba:b1:
9f:bd:9f:dc:88:2c:e1:7c:24:43:9b:e6:64:11:92:
4f:05:1e:e1:c9:4e:5d:0d:59:c1:17:d9:d8:ca:0a:
8c:64:ca:a6:6b:ae:d0:ab:6b:86:13:ee:01:44:91:
26:64:6b:b3:82:6d:73:e9:be:ad:d6:de:0e:14:bd:
6a:62:2c:5b:59:54:a9:6e:13:cc:15:14:d9:f1:a0:
9c:eb:c3:76:ca:33:9a:74:58:6d:5c:92:bd:1e:76:
96:9c:63:fb:10:25:a6:f4:43:4f:22:21:31:85:05:
f5:b6:22:2d:e4:7e:e6:80:c7:bb:20:d5:94:4d:9d:
f5:33:6b:7b:51:80:b9:7b:af:31:98:80:88:7e:c6:
76:46:9d:1e:b7:f9:0c:06:b1:4a:9f:79:a6:da:07:
18:94:28:97:8a:5b:07:5c:81:5a:2b:3c:a1:26:15:
f2:11:93:d6:92:a3:7c:df:5b:42:dd:64:85:61:77:
b3:57:06:58:dd:93:fb:5d:5e:37:85:47:f2:5b:60:
07:b9:1d:18:ae:37:c7:d3:fe:30:76:e5:2b:cb:d6:
d8:79:c8:b7:9a:b5:f6:bd:13:93:3f:a5:68:b8:93:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:D2:83:F2:BB:79:50:3C:07:55:EF:ED:49:F5:4A:EC:52:31:C4
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:ae:ee:12:2d:65:5d:ea:e4:8b:11:2d:3b:d3:97:4b:a1:
7a:4a:4c:f0:5c:42:08:c3:39:d0:47:c2:0b:db:fd:17:53:56:
6e:fb:14:0b:1a:1a:63:bf:d6:55:03:ee:5c:84:80:04:a7:d9:
46:02:aa:2b:ca:01:8b:38:bd:b5:88:ff:a8:cd:a8:ed:a1:a0:
5a:9b:26:4c:46:6d:24:fc:94:c7:cb:49:56:2c:b0:30:56:03:
d5:b9:4f:61:4f:d2:57:ce:c5:dd:2f:f5:a7:84:87:10:ea:0d:
43:c6:77:5f:cd:34:df:ba:be:bc:d8:65:02:39:70:2a:7f:c2:
ae:8e:01:a8:51:10:9f:d1:0f:c2:3f:22:4e:c9:71:f1:c1:26:
a8:ae:03:eb:b7:1e:7b:f8:86:c8:30:14:ea:37:86:23:a1:34:
c8:9d:5d:e4:32:f1:61:af:01:3f:9e:20:b5:c7:25:92:8b:f0:
e3:0d:3b:6c:98:de:73:75:48:45:af:9e:14:7e:f4:03:7d:a0:
aa:ad:b9:50:fd:12:51:0e:d8:3c:7a:a0:bd:7e:c8:58:d5:2c:
4d:12:4a:bc:95:26:20:db:0d:76:8b:52:06:07:72:0a:a9:b7:
63:07:50:42:d6:3b:72:a6:98:d2:90:3e:a5:76:16:bc:7a:81:
bc:fb:42:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:50:00 2026 by rpki-client