Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: bBqEDsHG93uzc+cRIL6X/09fev7jr3PccI1+VmqD24Y=
Subject key identifier: 81:73:12:35:0A:96:B4:42:AE:9A:DA:FA:5C:97:50:D5:CC:56:59:B9
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019D375320830FDD49E8A41C03847FD54C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:01:27 +0000
Manifest this update: Sun 29 Mar 2026 02:01:27 +0000
Manifest next update: Mon 30 Mar 2026 02:01:27 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: K0qNWpaK5XLnMi+lBqt0ueny07BxUeARtN9Ckc8Ubv8=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:20:83:0f:dd:49:e8:a4:1c:03:84:7f:d5:4c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Mar 29 02:01:27 2026 GMT
Not After : Mar 30 02:01:27 2026 GMT
Subject: CN=817312350a96b442ae9adafa5c9750d5cc5659b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:01:98:6d:0e:79:eb:53:54:75:3d:d3:5c:
92:3f:e2:db:3a:7e:a2:e0:76:21:38:dc:4f:c5:03:
13:79:5b:aa:f8:93:58:bc:5e:ea:0b:60:45:99:6e:
f4:1e:21:fa:bb:63:e2:2d:d7:90:4c:01:99:ca:fd:
b1:69:2a:50:94:f5:3f:80:e2:85:cf:c8:e3:b6:7e:
cf:d3:ba:d3:75:14:43:53:bf:66:97:97:63:a4:0d:
36:77:3c:85:b1:fc:d4:87:13:13:63:98:0e:c8:b7:
c3:50:9e:84:48:42:ff:52:f5:1a:92:99:aa:71:4e:
c8:d2:13:9c:86:2a:9a:b0:3b:c7:a5:0c:30:fa:1d:
63:99:1e:95:24:5d:16:18:26:0f:25:a9:49:12:97:
ea:0c:1f:bb:29:38:a9:b4:bd:9a:f2:88:22:da:60:
1a:19:e0:d1:4c:55:59:ad:4f:8d:68:3a:34:e9:66:
d4:6b:28:dd:9e:4f:20:0d:59:00:7f:a2:7c:ed:ce:
b5:5a:52:a5:37:6a:f9:00:a5:4f:d2:73:23:8b:5a:
6e:04:a0:81:4f:88:56:7f:71:6f:bf:3c:59:60:1e:
0b:0f:6f:c8:53:d1:57:78:ec:c4:0e:31:9b:00:24:
35:55:30:c2:ac:d4:67:76:ee:2c:1f:26:e9:64:38:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:12:35:0A:96:B4:42:AE:9A:DA:FA:5C:97:50:D5:CC:56:59:B9
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2a:c9:b4:99:6b:46:c1:c4:d9:e0:e9:d0:a6:43:36:15:12:
82:d9:11:7a:ef:49:99:44:d8:a3:ba:34:d9:69:d1:51:7d:e3:
67:ce:0b:4d:ad:b7:f4:e1:41:3b:c8:78:91:2d:fe:dc:c3:1f:
59:e9:eb:1d:aa:37:73:4d:1d:5c:00:9a:b2:9f:b0:a9:c0:af:
34:0e:0f:96:12:6a:f7:e6:ea:b1:01:62:34:f5:09:0f:56:48:
5f:81:e1:0a:97:16:f2:c6:03:a1:5b:bf:8f:7b:79:c7:50:45:
85:37:47:1d:2f:a5:8c:b0:e5:cc:6a:8e:e0:0b:21:ba:ab:e1:
16:bf:a6:3e:16:42:09:83:1a:a1:73:d7:ca:f3:18:e6:95:e4:
2c:c4:56:e5:7e:88:11:71:e5:34:54:79:06:ec:69:a5:f9:a4:
f3:6b:5f:5e:92:0e:06:83:65:72:74:40:5a:5e:a6:8d:b4:fa:
9a:a9:67:4f:dd:ec:59:60:2e:44:ec:9a:c5:b5:8c:1a:3b:65:
50:8d:f4:17:3a:13:a9:20:f0:36:b0:03:67:7e:1a:34:bf:6e:
49:4d:c9:f9:23:6d:29:db:ee:45:4e:df:7a:16:57:29:a6:52:
bb:1e:17:b2:1c:d9:8d:9c:25:e5:b2:bb:f7:94:71:68:35:ce:
cf:43:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:29 2026 by rpki-client