Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: ifX9XSFs4bu0JaC/x5+4B1/xujozllJGSBfmLqciBg4=
Subject key identifier: 4A:C6:70:0D:8E:74:91:E8:E7:38:22:5C:BB:77:19:DB:9A:D8:1B:9B
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019D39AF56AB0F3A9C75009EC5BF75DC6D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0514
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: XBI6LYwmTshpCFNdEiJ4McRs5frlklDC6ELH0qkYV+0=)
2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:56:ab:0f:3a:9c:75:00:9e:c5:bf:75:dc:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=4ac6700d8e7491e8e738225cbb7719db9ad81b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:bf:e6:5d:32:35:80:ab:2b:e8:e1:f4:f4:
82:01:3f:5d:2c:65:34:e6:da:97:15:3b:3d:4d:36:
6d:c6:1d:d5:2e:25:01:ee:8f:b8:80:7b:40:a0:58:
53:cb:d3:47:4d:ba:b1:06:28:bf:dc:b5:62:63:95:
0d:d7:1a:ce:25:50:55:21:d5:df:26:15:bb:21:29:
fd:fb:f4:fc:b0:83:d6:b8:2b:aa:bf:1c:ec:a9:c5:
c8:6a:08:cb:9f:3a:75:c0:1e:73:6a:4a:8a:43:4a:
8a:14:b4:49:c7:47:8e:4e:23:0a:17:c6:c8:94:75:
46:38:52:6a:1d:6f:8c:99:39:5d:0e:b3:40:2c:95:
a0:4d:1f:1a:6b:bc:d1:65:a1:01:4e:7b:44:32:3b:
cf:bc:df:e2:78:50:58:87:b0:78:a1:ab:6a:10:10:
0c:c1:e3:68:4a:1e:16:ab:3b:4e:51:ec:b9:11:bc:
1c:ca:b0:51:4d:cb:cc:48:95:f2:bb:b1:d4:bb:33:
e1:dc:4c:99:26:e7:32:8a:71:14:87:13:a3:01:d3:
45:71:0f:bd:42:d1:31:f0:55:02:d0:d0:3e:8a:16:
bc:80:64:3d:3f:46:25:0c:fd:3a:01:4c:6a:51:33:
46:e4:9f:c8:14:ff:a4:8b:e2:13:29:2c:04:ea:f8:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:70:0D:8E:74:91:E8:E7:38:22:5C:BB:77:19:DB:9A:D8:1B:9B
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:93:2d:ed:a3:4f:f3:2e:3a:94:d2:fd:89:66:d6:3a:c9:8a:
36:64:5c:db:bf:85:ca:ed:56:9e:9d:26:ae:31:98:7c:97:99:
2e:50:d4:b7:a2:ec:55:66:c3:59:6d:7d:af:8d:fb:bd:d0:24:
d7:9d:9c:17:95:12:62:41:9b:fa:2f:a6:44:38:e4:40:60:e6:
7f:d7:2c:58:ee:c0:a2:80:53:3b:ab:78:35:81:fc:a0:bf:71:
7c:0a:d7:c7:65:29:34:62:07:b6:90:81:3a:d0:d2:db:53:da:
53:9e:62:b3:53:c7:0e:59:18:4c:63:d6:1a:9b:bb:f2:da:31:
09:05:96:25:c3:80:e7:e4:42:2a:8a:8d:9f:00:6a:c0:01:11:
c1:96:bd:60:04:6e:1a:25:6a:d0:4c:a3:00:97:a7:84:d0:32:
d0:c8:bd:52:9e:53:a5:b4:ec:a8:bb:a6:a6:6b:66:29:60:21:
11:e0:a9:e6:93:4b:bc:0b:3d:2a:f4:f2:f0:b7:d9:fb:5d:89:
32:32:c4:11:05:0c:9e:b1:bf:ff:71:29:09:2f:1e:ee:f7:a7:
83:b1:9d:7c:52:89:93:ea:de:35:6e:b6:bf:ab:f5:22:6e:d2:
6a:ae:6e:43:d6:f0:b0:ad:62:80:3c:c1:1a:6c:b4:24:5e:1c:
fd:99:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:03 2026 by rpki-client