Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: e/aWxOuOpRI81Z7nLPMFrUqYpLV7S4dAVFcW+nwCqac=
Subject key identifier: CC:2E:29:20:98:D0:C8:3A:9A:49:A3:FB:33:C5:EA:35:67:29:45:AC
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019D382E4EC0611403F3DC630389AAE873BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: vsD0tPCbvpfFsJXhrAQFFOwHLAGgZrZd4em9i6YHSH0=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4e:c0:61:14:03:f3:dc:63:03:89:aa:e8:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=cc2e292098d0c83a9a49a3fb33c5ea35672945ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:47:bd:29:f0:9c:ff:14:c9:b6:45:4f:78:
da:69:65:b1:25:bc:61:08:c7:4e:85:49:89:8e:e3:
49:a3:75:84:87:d6:4f:4f:81:f1:80:77:21:c3:96:
ec:a5:e8:d7:b9:b0:5c:d4:5f:b7:64:80:ce:33:69:
f9:09:76:36:22:20:15:12:1a:46:46:f8:48:b6:83:
d1:8b:9a:fb:a5:44:d5:8e:26:77:f1:bc:19:38:96:
5a:42:5c:d4:23:28:3c:7c:37:ba:47:06:d5:cc:9a:
f8:43:8d:26:64:b1:49:b6:65:12:94:7d:95:a8:b3:
d1:68:a2:9f:eb:9a:3f:fe:9c:fe:c0:54:c0:a9:22:
75:52:8e:98:35:3c:8c:a0:d0:cb:34:eb:f8:7b:68:
a8:e7:c4:a5:23:10:89:82:fe:15:34:06:ed:22:8b:
58:49:c8:0c:a5:02:33:a0:7c:88:4e:df:61:e3:69:
ac:fe:a3:42:6b:fd:38:8f:f4:4a:04:68:f8:40:41:
8b:26:cd:ef:d5:11:59:01:b9:f6:aa:22:8b:66:9b:
02:bc:3f:1f:66:74:17:55:ad:07:0f:3d:b2:3c:8b:
c1:b7:76:da:60:83:0a:85:2f:2b:06:38:aa:02:4e:
ed:e6:88:bf:02:1b:0d:c0:bd:2d:81:09:d0:15:5d:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:29:20:98:D0:C8:3A:9A:49:A3:FB:33:C5:EA:35:67:29:45:AC
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:78:92:eb:00:5c:0b:f8:1e:72:38:72:e3:26:4e:ee:1b:
4f:d4:ea:83:b2:74:9d:b1:9b:b7:df:80:08:19:b9:81:45:4c:
a2:71:d0:32:4c:2e:00:49:ec:b4:de:2a:16:b8:44:2c:80:5b:
6d:23:69:6c:7c:22:34:c7:82:90:f3:3e:3e:28:dc:cc:17:53:
ab:69:30:d0:74:ff:93:d4:e3:39:ed:ce:06:94:3e:57:28:8d:
21:da:22:c7:c3:a9:08:d7:67:c9:01:c3:3b:7d:05:97:52:7c:
49:cd:67:a5:a3:77:e2:f4:fa:3c:54:05:4d:e1:74:ff:2a:07:
32:4b:3c:b0:41:f8:c6:9d:86:56:e8:d6:ed:fe:bb:c2:52:29:
f7:24:75:8f:0c:3f:d9:9e:b7:3e:03:0e:f2:90:e3:3f:d6:9c:
ac:e8:c7:ec:c3:2c:b7:39:86:53:e1:b6:42:f1:77:7a:4c:3c:
d1:12:c7:16:bc:14:9f:88:99:d9:5a:89:33:52:db:0b:10:b3:
be:83:6b:e0:1d:4b:bb:12:28:3b:37:bb:7c:ff:5e:f9:5e:45:
2a:28:45:08:2a:13:e1:90:5a:5d:4a:d5:3c:13:e6:54:ea:7c:
62:a5:33:43:a4:35:0e:4a:7f:1c:90:60:58:5c:5c:3e:a7:37:
ba:7d:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:01 2026 by rpki-client