Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: Un/89VBlzHZL3PCs0+FYPXJz1V0i8L8v/cFY3P3y9sA=
Subject key identifier: 35:4F:2F:3E:34:FB:57:EA:AD:F8:6C:34:B7:39:A0:A3:0F:A9:AB:90
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019F17F9FBD62D9F1F200D38F3B22B341971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0D1A
Signing time: Tue 30 Jun 2026 10:01:26 +0000
Manifest this update: Tue 30 Jun 2026 10:01:26 +0000
Manifest next update: Wed 01 Jul 2026 10:01:26 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: 7IPfxzR0lKXEkS0RsiphHBDcyOwVNJVw5mLwXjWgF6o=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:fb:d6:2d:9f:1f:20:0d:38:f3:b2:2b:34:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Jun 30 10:01:26 2026 GMT
Not After : Jul 1 10:01:26 2026 GMT
Subject: CN=354f2f3e34fb57eaadf86c34b739a0a30fa9ab90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:da:b5:d4:80:20:ec:ba:ff:73:62:18:eb:
22:34:63:51:b6:79:2b:a3:ee:8a:ed:36:c0:1d:32:
06:09:8f:9f:11:1d:1c:88:80:b8:e1:1d:65:70:82:
a8:ed:a6:4b:56:0a:14:a2:a2:10:2f:f2:29:c5:5e:
b3:91:d5:d1:e6:91:78:a1:02:a2:2b:bd:b4:27:3c:
7a:e6:10:0b:77:37:54:ad:74:1f:9a:d1:f4:65:6b:
50:c5:08:fc:17:40:e2:e9:ff:fd:84:74:c3:42:46:
12:4b:36:47:07:27:d1:4b:4c:13:0a:3e:e7:ef:e5:
d2:61:1f:1f:05:db:20:65:44:d0:6f:c9:e9:7b:81:
62:f4:a1:96:31:fa:71:40:c3:9e:76:6c:41:c8:7b:
cc:3e:ab:5e:72:34:fc:39:f0:79:26:c4:34:ea:6a:
a5:88:82:cf:b1:63:47:4c:d9:a9:08:68:71:cb:83:
a9:1c:7f:32:7b:74:9e:a8:f6:5c:b2:f1:b4:83:15:
af:b8:4b:e1:c0:e8:8a:de:d3:58:ac:de:c6:61:53:
f6:8e:66:e2:c1:10:e4:e8:27:ef:61:69:35:01:44:
d0:8c:90:2a:16:93:37:db:51:2e:33:3b:37:31:4a:
9a:78:b4:72:81:8a:1d:74:19:55:e0:0e:5d:65:bd:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4F:2F:3E:34:FB:57:EA:AD:F8:6C:34:B7:39:A0:A3:0F:A9:AB:90
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5b:30:5d:c1:e5:f8:4a:31:17:43:7b:f8:c4:e0:b3:00:9e:
01:e5:0f:59:42:77:6c:98:7b:26:63:dd:ea:50:34:9b:77:2a:
f9:3f:4f:c7:f8:46:27:ef:e8:52:f5:93:39:ab:79:79:d2:67:
45:21:b6:16:32:d0:05:c6:7d:72:7b:22:03:6c:a9:d5:59:9b:
7b:d2:55:8a:98:53:b5:bc:39:d0:40:52:6d:f0:98:74:4e:f9:
54:b7:9a:f3:63:35:f3:c1:3d:e9:aa:2f:10:4d:b3:99:9b:24:
9f:c5:7e:93:b8:69:3f:ea:3f:fe:68:60:58:a5:fa:c9:78:6c:
1f:7d:bf:68:79:f3:4a:d0:ba:90:4b:b8:02:1a:dc:47:98:e0:
0a:dc:fe:25:97:0a:96:63:21:6e:e6:df:96:e0:ab:d7:85:c6:
cb:4e:6e:03:17:e2:17:13:ee:bd:85:e8:a9:8a:90:42:ff:fe:
bd:86:ce:00:11:36:69:b2:a4:81:ca:c9:6c:26:2f:f6:2d:19:
e1:b4:10:d7:44:f7:f9:63:11:eb:ee:cb:45:ce:8e:25:61:1c:
91:cc:1d:86:c8:fe:57:05:2d:e3:2f:29:3b:38:fb:e1:d5:e1:
9a:17:29:90:82:92:0a:fe:18:c1:b1:46:80:8e:0a:61:c1:2e:
a3:4f:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:49 2026 by rpki-client