Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: hreLCZjYtd4gG045Pr4kUqJrEcuNYMwG42ELc+2vcA0=
Subject key identifier: 11:61:E5:02:22:BC:56:F4:38:4A:6C:DC:08:88:FB:08:2D:78:D2:EF
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019E2F5FF36B2F2383C89BCC75B6634104AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0D1D
Signing time: Sat 16 May 2026 06:01:17 +0000
Manifest this update: Sat 16 May 2026 06:01:17 +0000
Manifest next update: Sun 17 May 2026 06:01:17 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: z2MmD8VrpxoHOyBq75nYT/zJjv4gU+ngeWOpNCP9o1Y=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:f3:6b:2f:23:83:c8:9b:cc:75:b6:63:41:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: May 16 06:01:17 2026 GMT
Not After : May 17 06:01:17 2026 GMT
Subject: CN=1161e50222bc56f4384a6cdc0888fb082d78d2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:10:60:75:86:ab:bc:d3:1e:c5:56:96:05:
3e:25:52:21:06:a8:63:1a:de:01:d1:28:21:67:a5:
b5:61:16:e7:fb:0e:62:3c:df:9d:2f:43:ac:ab:5d:
b2:22:6b:1a:3a:73:67:03:17:f7:f7:5e:1e:d8:32:
7a:e4:31:70:30:14:d0:97:72:4b:79:fd:e4:c8:e3:
c7:08:2c:23:de:5c:bc:c7:c7:14:26:b3:ad:c7:14:
b8:7d:a1:55:6a:c3:fc:ad:2f:bf:a1:fa:6e:25:a6:
05:07:cd:e4:b1:fc:7e:fe:f0:fb:1a:4b:e3:8e:98:
94:d5:0c:45:8d:df:40:55:50:f2:dd:c0:e9:21:16:
f7:88:9c:83:be:3c:fe:be:ab:15:be:9f:c1:b5:c6:
db:d0:65:a0:3a:95:d2:1e:83:f7:8a:c5:d4:2b:e3:
e5:c0:5c:55:6b:74:1d:6d:72:fc:6e:a1:0f:62:4d:
50:30:76:92:02:64:c2:56:a6:ce:34:08:ff:6f:4f:
53:47:12:3d:6e:21:a6:0a:a3:da:6a:9b:67:ea:23:
5b:a7:02:f3:42:c1:a2:b3:ac:5e:d5:32:b4:fb:31:
e7:11:1d:09:d4:58:3a:ab:04:ed:b7:a3:7b:6b:71:
1c:96:b1:86:48:aa:09:5a:05:9c:b0:a1:74:f7:0b:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:61:E5:02:22:BC:56:F4:38:4A:6C:DC:08:88:FB:08:2D:78:D2:EF
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:2f:7f:04:35:51:31:89:ee:fc:7f:09:85:22:61:59:63:
5e:66:a7:bb:5f:f5:56:e3:92:28:39:a9:ab:24:64:38:34:5b:
37:eb:88:17:29:12:14:2d:58:bb:20:86:f9:43:cc:da:31:7c:
dd:06:a6:ca:67:fc:03:14:f0:85:28:1c:e3:8e:3d:c5:56:b1:
c2:fa:58:ef:e6:17:63:09:68:e1:c4:a0:43:5a:cc:18:ed:3e:
e0:9a:e6:ea:d1:02:1b:d2:e0:8e:9b:59:f4:ea:1e:b9:c1:97:
a7:d1:78:2c:47:eb:3a:95:aa:fc:6d:77:86:28:b0:fa:bb:7d:
cd:47:5b:00:73:cd:8e:86:76:f5:29:0a:2c:c3:fd:50:b9:95:
e1:aa:7a:a0:44:79:96:d3:44:47:23:16:2b:fb:f1:95:eb:ac:
03:be:11:a5:4d:71:9c:c3:86:7d:31:58:6d:9d:6b:f8:d0:7c:
8d:a6:10:ea:5c:99:46:c8:23:17:05:65:82:86:f3:de:70:ca:
96:e5:b6:50:a1:30:6c:db:d8:b7:d6:be:ce:ea:7e:0a:2f:0e:
75:75:c9:dc:1a:41:01:3c:d7:f7:1a:a7:39:1b:f1:db:b6:a5:
26:b7:1f:4d:a0:c5:3d:9b:51:9b:c3:3e:d8:60:10:84:67:68:
d3:28:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:41 2026 by rpki-client