Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: W6UcIkD4dPPZVRNB8HKCf8FcZrN2jZObyBmyTFM2aWs=
Subject key identifier: F7:AE:79:50:38:24:1B:38:0D:45:86:D9:36:29:3D:8B:E4:2D:AF:69
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 01A1065C15E4CB3FACBA42921D8DC126B250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0E1A
Signing time: Sun 04 Oct 2026 10:01:00 +0000
Manifest this update: Sun 04 Oct 2026 10:01:00 +0000
Manifest next update: Mon 05 Oct 2026 10:01:00 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: /xkRPlv9DtP4dNruy/hOkah5cRifI+/b8x84Y4dmH2I=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:15:e4:cb:3f:ac:ba:42:92:1d:8d:c1:26:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Oct 4 10:01:00 2026 GMT
Not After : Oct 5 10:01:00 2026 GMT
Subject: CN=f7ae795038241b380d4586d936293d8be42daf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:c1:ee:d9:c8:29:3d:12:f6:a8:db:68:81:
34:61:54:11:44:7a:7a:f1:cd:02:13:2b:c6:6e:c3:
a8:01:16:9c:0f:f5:39:ea:70:18:1a:21:2f:23:1b:
63:83:cf:56:72:e2:24:4b:94:df:15:74:5b:cb:2d:
d4:71:a8:56:8e:d5:e6:97:2f:fd:a5:72:b0:56:07:
98:de:ae:7c:23:23:ec:45:5a:f7:6e:c6:55:0b:31:
94:13:c9:1d:56:cb:39:1a:e3:62:2f:05:95:d6:00:
38:7b:78:6d:ea:15:ca:d4:3e:03:92:a7:61:6d:c6:
81:7b:b4:0d:54:d0:a5:c5:2b:5b:44:7d:43:fc:b9:
db:f2:15:63:8e:22:60:c0:75:7e:98:49:45:3a:37:
b8:94:7f:61:e7:33:43:4d:39:15:db:8a:63:85:ac:
59:d8:05:35:db:ea:ea:1c:11:3e:96:bc:0a:55:e0:
bf:9e:e1:e6:e8:1b:86:11:f5:89:a9:90:51:f6:3e:
ea:c5:cb:c0:2b:bd:d9:2f:4e:fb:38:59:a8:64:97:
1c:a7:1e:48:cd:78:0a:2f:8d:a2:d2:c3:ba:0f:9a:
45:4d:2c:21:4c:f7:61:5d:f4:6c:40:0e:67:34:17:
02:e2:44:2d:2e:43:78:b6:3f:59:07:49:f1:3a:9b:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:79:50:38:24:1B:38:0D:45:86:D9:36:29:3D:8B:E4:2D:AF:69
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:36:fb:2b:72:e7:30:ad:13:cb:0e:93:88:47:ec:bf:75:3c:
1c:41:c0:75:2d:15:6b:38:0b:89:b2:51:88:7f:0c:dc:b4:01:
fe:cf:f5:0f:4e:ee:6f:c4:3f:74:5b:6f:62:ff:0a:ee:5d:bd:
43:c8:6b:41:8e:3b:2a:8a:10:3d:b5:37:dd:e6:b2:1a:de:78:
bd:86:4f:73:e2:2e:22:1c:48:dd:7a:5f:f9:3d:55:1a:d1:59:
a7:e3:72:43:40:18:89:06:4c:24:d6:b0:40:a6:46:62:58:77:
58:cb:9b:d4:21:15:d1:53:79:26:ef:ab:e6:dc:17:12:38:54:
7c:4d:d8:e7:6f:f6:68:96:e5:6c:b4:6e:a4:6c:7d:29:da:3b:
a7:18:0d:25:3a:9b:da:44:d3:ca:44:62:30:a2:13:a7:90:71:
ac:b4:75:a4:07:fe:12:15:95:80:14:14:59:69:ee:92:eb:d9:
56:ed:1f:9a:e5:ab:2e:75:22:11:c9:1f:a3:9a:b1:09:07:28:
69:ce:9d:bc:29:37:55:3d:a4:78:16:8c:44:95:6a:8a:c0:8f:
51:99:01:e2:31:a6:96:60:71:7a:dc:04:d4:d3:2a:56:e4:48:
3f:15:66:0c:77:84:21:d5:34:b0:db:9e:17:d3:57:13:97:3c:
c5:c4:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:09 2026 by rpki-client