Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: 5zzdXz+NSQEuXFuqtiI2/hz44ADA784Ue55U5W++ynY=
Subject key identifier: AD:85:9B:E4:78:01:41:A7:B8:66:6C:5B:1D:F4:DF:71:BA:49:BD:EF
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019E30723C923ED854080A2F157F131ED71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 11:00:53 +0000
Manifest this update: Sat 16 May 2026 11:00:53 +0000
Manifest next update: Sun 17 May 2026 11:00:53 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: 6BgfPFq3EuagNEfVl4cHbnQBc8LXyzCfIIS6g1wdHtE=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:3c:92:3e:d8:54:08:0a:2f:15:7f:13:1e:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: May 16 11:00:53 2026 GMT
Not After : May 17 11:00:53 2026 GMT
Subject: CN=ad859be4780141a7b8666c5b1df4df71ba49bdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:fa:4b:dc:15:43:30:4f:fe:b9:00:03:a1:
d4:e5:20:73:e5:b2:15:4f:15:84:99:fb:54:21:12:
78:75:bd:41:32:60:a9:95:b0:9a:13:44:bd:11:13:
75:5e:8b:27:1d:e9:ca:1d:4d:9b:b2:ef:c6:91:03:
f1:d6:02:62:dd:37:90:59:e0:2b:2e:25:a0:3c:3f:
d5:29:13:ec:72:71:d3:e6:8c:ae:e7:a2:f3:8c:02:
05:03:a6:9c:e1:e4:c8:a6:3f:b0:e0:22:42:9d:dd:
d2:0d:38:47:e5:8b:07:cc:01:12:50:d4:12:b0:02:
62:37:e2:77:f0:02:0b:ea:f6:6d:97:08:9e:b2:59:
ce:60:04:fd:8e:a9:da:76:54:a4:fb:40:f1:63:2c:
97:82:b1:53:28:3d:cc:72:79:c1:82:46:7d:c2:31:
b1:9a:ca:ce:c4:de:36:76:11:2a:68:49:20:a5:23:
b6:77:c4:14:32:ee:b7:a7:94:31:2a:b7:f6:ea:aa:
0a:47:3f:a6:bc:0e:7a:75:2a:6b:0a:df:b4:b0:85:
94:8f:da:c5:67:06:3d:15:62:15:d3:90:ea:db:ef:
fb:e1:b7:8e:9e:f0:09:89:c9:32:2d:e0:7b:f8:b1:
e9:15:4c:74:f1:f2:80:60:dc:be:aa:9c:8b:5a:10:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:9B:E4:78:01:41:A7:B8:66:6C:5B:1D:F4:DF:71:BA:49:BD:EF
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:7e:72:c1:2c:1b:67:6e:f8:44:96:4a:27:eb:6c:b4:33:
e8:28:13:5a:d1:c2:e8:0a:56:36:17:6f:a6:93:eb:a7:e4:3e:
45:4f:43:65:15:70:fb:84:2d:1c:e1:b9:b0:21:dd:08:6b:86:
02:a5:18:7b:87:7f:98:06:a8:e0:89:d9:54:0c:fa:bb:e8:9e:
a2:bc:66:0f:91:8e:bf:97:67:50:56:44:f7:38:75:e3:ec:fc:
73:c5:81:f2:91:d1:8e:72:2e:36:9d:a4:05:d1:7c:e4:4d:a4:
81:70:99:8c:28:65:52:4d:1a:35:93:bc:63:2e:e3:ea:83:73:
25:ab:88:2d:bd:de:7a:bb:fe:ea:7b:8a:de:d0:6a:a8:e3:be:
66:d1:92:02:64:9b:89:9a:fd:06:26:4b:3b:32:c2:86:58:09:
99:34:89:39:97:3c:8d:2d:8b:23:a7:2f:7a:b4:c7:ba:cb:f2:
6f:55:be:ac:d4:8d:d2:9d:46:82:b8:3b:6c:f4:01:25:67:6e:
e3:1c:e7:e3:3e:e9:33:19:90:b9:74:ef:40:49:e6:6f:f7:31:
30:a5:cf:27:8e:a9:aa:1b:05:03:fe:45:63:8a:84:88:45:66:
a5:2e:df:28:92:d2:c3:cc:5b:16:14:12:d6:f1:ea:36:8b:64:
81:f5:00:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcjySPthUCAovFX8THtccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTI5ZGVjNWMwZjIzYWRkOWJhZWVlYTdiYjM5YWM4N2E3
MjkwODMwHhcNMjYwNTE2MTEwMDUzWhcNMjYwNTE3MTEwMDUzWjAzMTEwLwYDVQQD
EyhhZDg1OWJlNDc4MDE0MWE3Yjg2NjZjNWIxZGY0ZGY3MWJhNDliZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9T6S9wVQzBP/rkAA6HU5SBz5bIV
TxWEmftUIRJ4db1BMmCplbCaE0S9ERN1XosnHenKHU2bsu/GkQPx1gJi3TeQWeAr
LiWgPD/VKRPscnHT5oyu56LzjAIFA6ac4eTIpj+w4CJCnd3SDThH5YsHzAESUNQS
sAJiN+J38AIL6vZtlwieslnOYAT9jqnadlSk+0DxYyyXgrFTKD3McnnBgkZ9wjGx
msrOxN42dhEqaEkgpSO2d8QUMu63p5QxKrf26qoKRz+mvA56dSprCt+0sIWUj9rF
ZwY9FWIV05Dq2+/74beOnvAJickyLeB7+LHpFUx08fKAYNy+qpyLWhDdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2Fm+R4AUGnuGZsWx3033G6Sb3vMB8GA1UdIwQY
MBaAFNuSnexcDyOt2bru6nuzmsh6cpCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMt
ZDMwYjdlMjVhZTBiLzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMtZDMwYjdlMjVhZTBi
LzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtJ+csEs
G2du+ESWSifrbLQz6CgTWtHC6ApWNhdvppPrp+Q+RU9DZRVw+4QtHOG5sCHdCGuG
AqUYe4d/mAao4InZVAz6u+ieorxmD5GOv5dnUFZE9zh14+z8c8WB8pHRjnIuNp2k
BdF85E2kgXCZjChlUk0aNZO8Yy7j6oNzJauILb3eerv+6nuK3tBqqOO+ZtGSAmSb
iZr9BiZLOzLChlgJmTSJOZc8jS2LI6cverTHusvyb1W+rNSN0p1Ggrg7bPQBJWdu
4xzn4z7pMxmQuXTvQEnmb/cxMKXPJ46pqhsFA/5FY4qEiEVmpS7fKJLSw8xbFhQS
1vHqNotkgfUA5A==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:09 2026 by rpki-client