Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: YXUTD5yURcjXk8xG8T+2i495gQXifnIp2o3ITwoae+g=
Subject key identifier: 49:2B:C6:FA:71:D6:11:E9:D5:A3:4A:08:1E:2B:66:D2:48:B7:D3:AD
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 01A13F709BC96DD033FBFA12F8273D686864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0EB3
Signing time: Thu 15 Oct 2026 12:01:46 +0000
Manifest this update: Thu 15 Oct 2026 12:01:46 +0000
Manifest next update: Fri 16 Oct 2026 12:01:46 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: a7RJoCn51CcVYDmF+eSNXoMMbTxkfgtf1JIwD5Ddxac=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:9b:c9:6d:d0:33:fb:fa:12:f8:27:3d:68:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Oct 15 12:01:46 2026 GMT
Not After : Oct 16 12:01:46 2026 GMT
Subject: CN=492bc6fa71d611e9d5a34a081e2b66d248b7d3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:4d:a4:f1:b0:8f:c9:4d:c3:e4:38:6b:af:
ca:04:09:13:98:ae:71:6b:8c:cb:60:14:fa:1a:72:
70:4a:34:f3:19:fe:ce:09:64:cb:d9:c3:e5:94:47:
a6:ec:7a:6a:5b:a6:1d:6d:d3:40:32:0c:6e:9f:af:
1b:95:c3:01:57:15:97:49:50:c1:d9:05:40:91:da:
ac:1c:20:6a:21:9b:a9:f9:36:29:cb:ab:f0:4a:f3:
f3:fc:7d:a6:8e:63:ad:f0:2a:66:ca:95:52:d3:0f:
54:fb:22:c6:78:7c:33:4c:73:b1:6c:f6:62:9d:4c:
4a:a1:b7:b3:f6:67:d0:db:c2:26:ab:37:8b:b0:17:
1e:52:a3:14:82:6e:c9:01:a8:39:2b:8d:70:09:e7:
36:c8:3d:90:8a:67:11:10:88:f4:de:54:af:06:43:
d7:d2:06:8f:d9:c5:40:7e:4b:99:dd:20:3a:1b:3f:
66:b6:d7:53:c3:18:8f:59:b2:57:a0:99:0e:b0:96:
ae:9e:ee:80:7a:cb:71:bb:0a:49:80:e1:0e:87:c5:
d4:df:8a:08:84:33:87:f2:92:1d:e3:44:d6:14:e2:
64:a6:4e:84:aa:a6:41:9d:6b:c5:9a:a1:60:97:59:
e0:ff:ba:78:26:fb:de:43:8e:34:f6:e5:db:f4:ec:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:C6:FA:71:D6:11:E9:D5:A3:4A:08:1E:2B:66:D2:48:B7:D3:AD
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:7c:df:c5:6f:af:3b:07:1b:21:dc:46:59:5d:fb:bd:de:
24:94:27:f0:ab:ee:78:32:e1:ab:b1:b4:f8:ec:4f:91:4a:ae:
cf:dd:81:a6:7e:12:90:20:6a:b8:fd:3e:6d:53:b4:01:98:d0:
93:dd:52:ff:a0:1d:3e:74:fa:db:e5:65:fb:fd:f0:f5:63:03:
7f:73:a5:13:00:c6:b9:bb:d1:39:15:ff:df:3f:be:81:a9:9c:
56:e9:8c:4c:65:62:f4:6e:93:6f:01:70:64:a5:3c:2c:22:7e:
b7:e9:21:4c:ee:96:4d:e7:03:57:fe:45:3d:94:cb:9e:67:ba:
04:d9:27:3d:da:c4:82:4f:1f:21:ee:e1:78:d9:79:43:aa:f5:
6a:3b:5f:a8:5d:e2:14:7b:01:80:6f:b7:72:36:fa:2a:fc:d0:
a7:fb:b5:94:13:15:5c:a6:c5:63:94:d5:03:5d:0d:f4:46:a4:
f1:c8:27:a9:bb:7e:79:a3:4a:c3:98:00:0e:d2:fd:2d:9d:e7:
e7:37:e8:ee:5f:20:95:c7:56:42:f4:f8:98:f1:ca:92:ad:4a:
69:0f:63:1a:86:3d:98:04:46:5a:65:49:b8:98:78:48:e6:58:
89:94:c3:fd:20:f2:b4:23:09:ba:be:0a:a9:f7:33:fb:a3:db:
23:24:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:39 2026 by rpki-client