Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: 4aUcjycg0kqtgOIJD0SkwVOEaJMokqzUqNRakQ5+0zY=
Subject key identifier: B0:AC:CB:30:F0:55:58:90:96:35:71:D8:DD:59:B8:E7:87:21:46:42
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019F190CF9A148437745C600371225C5714B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0D96
Signing time: Tue 30 Jun 2026 15:01:48 +0000
Manifest this update: Tue 30 Jun 2026 15:01:48 +0000
Manifest next update: Wed 01 Jul 2026 15:01:48 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: xS1ZAMc6K2mDJX1r1XaAL7DVCqZ4it6OZD91yPggyAU=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:f9:a1:48:43:77:45:c6:00:37:12:25:c5:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jun 30 15:01:48 2026 GMT
Not After : Jul 1 15:01:48 2026 GMT
Subject: CN=b0accb30f0555890963571d8dd59b8e787214642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:ac:f7:54:a5:f2:ee:2d:73:bd:95:8f:3b:
28:55:97:89:d7:18:2d:ff:40:9b:09:89:fc:c3:10:
d4:66:31:f8:9f:25:28:06:89:4d:1d:b6:6d:d7:88:
db:07:87:b8:2f:75:8d:b0:c8:f8:5b:3f:c5:44:51:
d5:f4:4d:2e:71:4d:92:09:c7:57:5d:bc:a0:c5:10:
83:94:09:3d:23:ed:75:0d:37:e7:bf:b2:3a:32:a3:
ca:78:4f:9f:26:31:ba:04:d5:2b:01:0c:90:8d:85:
2d:d9:89:94:7f:bc:d0:68:d3:dd:1f:2e:98:57:3d:
30:1b:51:62:d5:b7:0b:89:0b:44:ab:a2:f9:b0:e1:
3f:4f:ff:8d:a2:6b:69:65:d5:76:97:d1:3c:88:b7:
30:19:7c:fc:a0:17:7e:fe:d9:9e:66:0a:1c:59:06:
5d:a6:1a:d1:f1:fd:ac:ef:f9:c0:4a:3e:c7:fc:10:
25:be:28:59:e8:77:c0:cf:6a:bb:34:a2:be:b0:01:
98:8f:ab:0d:e1:e8:e9:90:e8:87:b7:d5:6e:e9:e0:
8f:f7:9f:60:71:e9:53:d2:27:77:83:4e:92:d8:41:
c1:99:37:8b:86:d7:9b:a8:23:f6:30:a7:04:be:8e:
a6:69:3a:3e:87:e3:c9:f9:50:94:3d:62:f6:ca:cd:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:CB:30:F0:55:58:90:96:35:71:D8:DD:59:B8:E7:87:21:46:42
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a5:6e:d6:c4:17:38:4a:94:a0:db:8f:f4:6a:eb:8f:a7:56:
71:29:09:c0:4c:a5:c1:c9:a7:5e:31:85:d5:4a:6f:69:49:d2:
75:40:6b:1d:9e:87:eb:d7:c2:e5:c7:e1:33:7a:45:44:4c:4d:
77:ce:e5:0c:5b:b5:bb:9b:ff:59:6d:f3:33:de:7b:cb:45:59:
ab:a5:8d:15:f8:cb:38:99:93:8f:05:46:16:08:57:d6:63:54:
49:91:99:26:4d:ce:98:4e:c3:26:d3:73:a6:6d:fa:61:76:1c:
fa:03:d2:fe:93:5b:71:f6:b5:48:29:ee:ac:27:c1:98:64:db:
ea:44:d4:ee:55:12:1e:30:05:1b:74:48:82:a1:d3:8c:1f:fb:
7f:de:39:e3:9c:51:77:b0:bc:45:2f:3f:de:0c:0d:4c:3a:57:
8c:8d:62:3d:2f:2d:3a:e7:2f:d2:10:c0:e3:a1:49:79:2b:2c:
f6:b4:78:0a:e8:53:54:f4:48:e5:a5:19:41:b3:b0:1c:5f:f7:
7f:6e:f4:90:7b:91:c2:35:64:f3:de:09:98:79:41:10:1e:a0:
b0:72:a8:83:6e:2b:37:71:e4:3e:6c:a2:dc:eb:3c:cc:71:77:
8a:58:21:a5:7b:58:c3:50:6a:ff:1d:bd:4c:f9:62:a8:49:cb:
6d:28:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:27 2026 by rpki-client