Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: ODOUV0Nww8sRG0ty/S2DXqWxN+iRgR7MoqHU0zjzBeE=
Subject key identifier: DF:80:76:61:8D:3C:EA:12:07:06:4D:B5:9A:ED:C3:99:BA:94:D5:CB
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 01A001DD63790E4FDBB1C4EB03F71D30F18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 20:01:21 +0000
Manifest this update: Fri 14 Aug 2026 20:01:21 +0000
Manifest next update: Sat 15 Aug 2026 20:01:21 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: GXy0t9sBoqj31c+9CwgyuYVfZVXGkE+O9Pn75M4H8sU=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:63:79:0e:4f:db:b1:c4:eb:03:f7:1d:30:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Aug 14 20:01:21 2026 GMT
Not After : Aug 15 20:01:21 2026 GMT
Subject: CN=df8076618d3cea1207064db59aedc399ba94d5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:82:07:0d:40:54:57:cf:fe:b8:59:b5:16:
a4:3b:c1:82:32:f8:de:75:00:60:99:69:0c:e9:64:
97:0f:24:4a:ca:a5:98:bf:d3:b9:b0:f2:b1:ba:36:
56:de:ce:e5:9b:f1:83:81:48:37:ca:3d:52:7a:93:
39:26:54:ce:80:da:16:3a:60:85:10:69:1f:da:e0:
6d:30:0b:b3:9d:f3:6b:8b:eb:60:68:c0:e0:83:4d:
dd:5e:d7:53:30:f5:82:b1:cf:1c:45:c5:c5:a9:f2:
b3:ac:dc:26:9d:9c:2a:2a:bd:96:d3:cb:fe:78:f5:
8c:f3:22:3f:cf:fd:03:87:b0:44:58:e3:eb:3f:eb:
49:e6:aa:59:57:4f:24:38:90:c7:e9:10:19:58:4b:
84:96:f8:cc:dc:62:42:29:9f:6b:ae:f3:fa:28:4d:
d4:12:dd:0f:63:8e:09:65:17:0f:ca:16:b0:29:8e:
8f:20:41:cc:5e:1f:4c:d9:11:c4:b6:f6:86:c7:37:
19:2e:47:15:b7:a4:f5:01:74:6b:ec:a6:d2:73:d6:
e0:fb:fc:05:6a:e4:62:e0:46:62:3e:cb:e6:43:0b:
17:2f:cd:fa:68:1b:3b:9b:0a:de:7d:18:62:83:e4:
49:e3:6c:3a:80:a8:cf:dc:74:dc:02:b8:c9:6c:b3:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:76:61:8D:3C:EA:12:07:06:4D:B5:9A:ED:C3:99:BA:94:D5:CB
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f0:c8:ce:ad:72:60:5b:25:71:1d:c4:62:09:64:de:09:cb:
2e:e0:8a:b0:2f:c3:df:59:be:ec:b9:8c:f2:04:63:4e:9a:8d:
17:5d:8b:f5:19:90:09:d8:cd:fe:57:ea:72:cc:17:7d:44:51:
21:4d:27:fa:8b:0f:86:57:78:c3:71:cb:a0:97:f8:00:83:f5:
40:7d:02:d0:b5:2e:2c:bc:c3:43:94:f1:f8:cd:6f:21:7d:7f:
14:c8:7f:e5:dc:6e:4a:e8:f6:f7:38:97:92:c4:38:98:0c:3a:
0c:e2:5a:33:b0:5a:4e:90:d3:c7:94:61:60:67:24:80:01:e6:
fb:a5:c3:70:bd:3e:4e:21:42:a3:98:e6:95:d3:9c:22:b5:d6:
55:7f:04:17:1d:6a:f5:76:cc:22:af:7d:ca:f0:ea:5f:ba:5f:
ce:a6:bc:39:d2:d5:a2:ab:11:e1:0d:de:e0:d4:00:02:1f:96:
48:21:53:2b:93:a8:ee:be:fb:4c:75:4b:98:e3:67:36:5a:d4:
c2:00:01:9e:71:c3:35:b5:d4:1a:27:8d:de:ae:a8:5b:7c:e5:
fb:f1:8f:5f:40:83:33:01:b9:93:e7:88:4e:7b:b0:39:6c:98:
63:c9:c8:4c:db:14:b2:21:af:74:fb:0e:89:82:6d:d3:ac:89:
b7:2c:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:56 2026 by rpki-client