Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: BnHgmGvuaoBDePSrmyQbRL3C8ksjf9yd4LcSQjH2tEI=
Subject key identifier: C7:7E:4B:A1:E2:59:F6:6D:08:4A:BB:30:4F:60:9A:F3:31:1A:A4:6A
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019E30E00BDB2700674BEF8A576BC17E1253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0594
Signing time: Sat 16 May 2026 13:00:49 +0000
Manifest this update: Sat 16 May 2026 13:00:49 +0000
Manifest next update: Sun 17 May 2026 13:00:49 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: VncfPPY1CP5pb3QNRmPXSqsTyM1e3OkMD7ciHh1uaII=)
2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:0b:db:27:00:67:4b:ef:8a:57:6b:c1:7e:12:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: May 16 13:00:49 2026 GMT
Not After : May 17 13:00:49 2026 GMT
Subject: CN=c77e4ba1e259f66d084abb304f609af3311aa46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:be:eb:55:76:17:ac:6c:c4:98:a0:f2:b9:
4b:50:e8:a4:00:0d:f9:a4:73:5e:32:7d:f0:35:d3:
15:4a:d7:57:6f:ea:45:b5:b2:3c:fa:5c:43:17:0c:
5e:ce:b7:b7:32:dc:7d:74:a4:56:b2:f1:91:50:32:
a4:e8:cc:d4:f4:95:02:89:5e:2f:c9:8e:9f:61:e9:
07:ed:2c:a3:4b:43:21:43:3a:9d:d4:43:99:9f:7b:
4e:31:5c:52:74:9e:39:ca:89:1d:9a:df:8b:3a:8d:
f6:35:9c:20:7b:42:1b:bd:9d:33:a3:ea:fa:3f:31:
c8:d0:28:24:28:fb:bb:1f:e7:dc:57:d6:91:b4:c6:
57:f9:fc:ae:4c:d7:0f:36:e2:75:21:9a:b8:ce:3c:
23:55:8c:fd:56:ee:d9:e9:7f:a0:8b:9e:e8:1d:a8:
e7:84:e5:60:d8:79:79:58:2e:93:a3:89:22:66:3f:
fa:18:10:5a:30:68:a0:40:d5:72:45:6e:91:fb:cb:
c8:68:99:e7:16:98:b6:1d:8f:62:f1:9a:4e:db:d0:
03:9a:e7:8d:e2:9f:db:b8:b8:1f:07:59:30:34:64:
d5:13:c1:86:fb:fc:f7:ea:ff:dc:b5:c4:72:18:dc:
1b:d5:e4:d4:99:88:1d:87:8d:34:48:2d:bf:8b:54:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:4B:A1:E2:59:F6:6D:08:4A:BB:30:4F:60:9A:F3:31:1A:A4:6A
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:53:49:fe:3c:41:50:b7:66:27:7e:c0:ab:75:ad:ba:11:6b:
3d:1a:65:ac:89:09:69:77:9d:e1:89:98:28:04:7c:e6:fc:47:
d6:40:67:3e:78:70:b5:b4:26:91:65:88:31:0f:43:de:b2:a1:
a3:a2:78:89:a6:b3:15:f2:eb:6b:24:71:1d:97:19:ed:cf:d2:
1b:06:1d:5d:7d:75:e2:4d:8f:d7:74:7a:24:19:24:f1:dc:dd:
d9:0f:f7:b0:1c:e9:3f:1d:5e:e4:c6:ef:ec:7e:53:e3:3f:9b:
b5:98:50:57:94:89:b0:03:01:87:4e:ea:f6:b8:95:46:fb:b6:
ca:5f:cb:3a:85:5b:68:78:d9:10:03:f0:69:cc:73:06:fa:5a:
0d:4c:e1:04:d8:dd:0c:9d:af:f9:51:ab:24:24:ab:a1:86:3b:
b2:49:d2:73:1d:b3:d5:9b:f1:b6:5c:90:cd:dc:1d:bb:e2:76:
be:ad:03:18:04:2d:b5:67:7c:b9:51:52:0b:b0:7f:7f:2f:ca:
39:e2:26:95:95:0f:1e:ef:01:78:8b:f9:0c:90:42:b9:af:03:
ec:86:50:cc:32:88:bd:59:0f:7c:fd:39:d8:8f:4a:8e:7e:1a:
a1:a5:e5:60:e8:05:61:5d:39:c0:39:53:f4:56:9a:40:73:51:
43:43:2c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4AvbJwBnS++KV2vBfhJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx
ODEyMjcwHhcNMjYwNTE2MTMwMDQ5WhcNMjYwNTE3MTMwMDQ5WjAzMTEwLwYDVQQD
EyhjNzdlNGJhMWUyNTlmNjZkMDg0YWJiMzA0ZjYwOWFmMzMxMWFhNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0e+61V2F6xsxJig8rlLUOikAA35
pHNeMn3wNdMVStdXb+pFtbI8+lxDFwxezre3Mtx9dKRWsvGRUDKk6MzU9JUCiV4v
yY6fYekH7SyjS0MhQzqd1EOZn3tOMVxSdJ45yokdmt+LOo32NZwge0IbvZ0zo+r6
PzHI0CgkKPu7H+fcV9aRtMZX+fyuTNcPNuJ1IZq4zjwjVYz9Vu7Z6X+gi57oHajn
hOVg2Hl5WC6To4kiZj/6GBBaMGigQNVyRW6R+8vIaJnnFpi2HY9i8ZpO29ADmueN
4p/buLgfB1kwNGTVE8GG+/z36v/ctcRyGNwb1eTUmYgdh400SC2/i1TFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd+S6HiWfZtCEq7ME9gmvMxGqRqMB8GA1UdIwQY
MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVNJ/jxB
ULdmJ37Aq3WtuhFrPRplrIkJaXed4YmYKAR85vxH1kBnPnhwtbQmkWWIMQ9D3rKh
o6J4iaazFfLrayRxHZcZ7c/SGwYdXX114k2P13R6JBkk8dzd2Q/3sBzpPx1e5Mbv
7H5T4z+btZhQV5SJsAMBh07q9riVRvu2yl/LOoVbaHjZEAPwacxzBvpaDUzhBNjd
DJ2v+VGrJCSroYY7sknScx2z1ZvxtlyQzdwdu+J2vq0DGAQttWd8uVFSC7B/fy/K
OeImlZUPHu8BeIv5DJBCua8D7IZQzDKIvVkPfP052I9Kjn4aoaXlYOgFYV05wDlT
9FaaQHNRQ0MsaA==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:55 2026 by rpki-client