Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: YUwlQV/osHsuQT602sS3bEOO9+fBeBZI/lKY8VHp4cU=
Subject key identifier: 29:0B:18:0B:BF:A2:0D:C9:E0:94:AD:96:ED:55:99:D2:9C:87:30:C4
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 01A14083730C2A4465EBA10ADC3C58E16675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 17:01:58 +0000
Manifest this update: Thu 15 Oct 2026 17:01:58 +0000
Manifest next update: Fri 16 Oct 2026 17:01:58 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: XHeB1ql0u+JmDD0wHiM+iTMkpkzZrt43ue3nEHW3KFY=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:73:0c:2a:44:65:eb:a1:0a:dc:3c:58:e1:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Oct 15 17:01:58 2026 GMT
Not After : Oct 16 17:01:58 2026 GMT
Subject: CN=290b180bbfa20dc9e094ad96ed5599d29c8730c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:d6:0d:77:4c:de:f8:85:95:da:9e:84:5c:
c5:05:81:73:8a:81:71:25:fa:07:87:e6:df:63:d2:
59:60:c6:ed:57:bf:82:e6:cf:b9:be:ad:12:59:36:
e4:82:30:89:2f:55:5a:99:6f:32:3e:2b:40:93:a6:
40:48:c6:81:28:38:2a:51:4f:ab:19:3f:04:cc:eb:
c4:33:82:6d:e8:b1:4b:d9:9f:b0:05:ca:5c:c3:11:
0d:62:10:0a:c7:a2:a0:8b:3d:46:d8:a2:87:5d:08:
ad:d7:4f:6d:7c:35:86:e3:23:51:db:3f:e1:6c:60:
da:47:8c:4d:e9:c4:70:8b:60:64:31:ac:ac:cf:7e:
74:e3:22:19:0f:cc:0e:42:39:4f:48:da:36:b8:41:
b6:42:60:34:46:96:23:cc:c9:8f:c1:85:b6:c2:64:
f0:cd:48:7a:a7:cc:dc:62:1e:25:fb:00:58:25:56:
8f:fa:53:28:65:3b:16:57:0e:e2:55:b5:3b:f4:80:
1c:c6:32:77:1e:e8:d7:dc:1a:b3:71:69:49:67:27:
7d:8f:47:14:e3:40:65:5d:9b:ae:06:c2:d9:0d:0a:
f4:24:f9:28:be:08:3d:c7:13:7d:37:1c:74:10:71:
0c:ce:20:27:ec:79:b6:cc:24:fb:63:ad:6d:68:08:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:18:0B:BF:A2:0D:C9:E0:94:AD:96:ED:55:99:D2:9C:87:30:C4
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:07:04:7a:33:31:fc:3b:de:e6:45:43:49:86:c6:9e:04:60:
fb:9e:13:83:c1:2c:1e:52:64:e6:98:64:43:4e:7d:31:ea:d1:
7b:53:64:87:8f:83:21:88:63:43:12:f3:3f:a2:1f:9c:75:90:
cc:76:b0:cb:5a:d6:e4:d5:aa:88:1b:db:5e:60:5a:82:2e:49:
e0:76:d8:6f:b9:8c:7d:6c:f5:f2:9d:a9:be:dd:90:44:c7:d6:
bb:62:9e:aa:7d:19:37:78:0b:12:bc:fb:fa:4f:39:ba:bb:21:
c6:f7:e2:db:2c:9f:1d:fd:7a:87:65:77:62:c0:e4:8a:fd:c3:
c3:7c:b8:ad:19:6c:df:6e:a6:0d:f6:29:08:55:09:58:fb:90:
cc:0b:f1:ef:dd:57:43:f5:68:df:18:56:d5:98:92:60:b5:a9:
40:eb:46:da:ff:03:ea:45:08:01:a4:cc:88:06:77:32:92:78:
25:ff:5d:76:e6:5c:21:7e:5a:91:0f:45:18:46:c2:b6:be:c0:
8b:41:0e:e3:a7:5c:19:7d:f9:ea:8a:a7:5f:82:6f:13:f2:07:
4c:0b:0b:41:94:27:09:a6:8e:35:01:f6:a4:4c:d8:f3:a4:ee:
b8:3e:bd:5d:57:88:70:76:bb:2f:a9:4b:ad:9e:7b:28:5c:95:
16:4d:ae:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAg3MMKkRl66EK3DxY4WZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTI5ZGVjNWMwZjIzYWRkOWJhZWVlYTdiYjM5YWM4N2E3
MjkwODMwHhcNMjYxMDE1MTcwMTU4WhcNMjYxMDE2MTcwMTU4WjAzMTEwLwYDVQQD
EygyOTBiMTgwYmJmYTIwZGM5ZTA5NGFkOTZlZDU1OTlkMjljODczMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPDWDXdM3viFldqehFzFBYFzioFx
JfoHh+bfY9JZYMbtV7+C5s+5vq0SWTbkgjCJL1VamW8yPitAk6ZASMaBKDgqUU+r
GT8EzOvEM4Jt6LFL2Z+wBcpcwxENYhAKx6Kgiz1G2KKHXQit109tfDWG4yNR2z/h
bGDaR4xN6cRwi2BkMaysz3504yIZD8wOQjlPSNo2uEG2QmA0RpYjzMmPwYW2wmTw
zUh6p8zcYh4l+wBYJVaP+lMoZTsWVw7iVbU79IAcxjJ3HujX3BqzcWlJZyd9j0cU
40BlXZuuBsLZDQr0JPkovgg9xxN9Nxx0EHEMziAn7Hm2zCT7Y61taAhfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkLGAu/og3J4JStlu1VmdKchzDEMB8GA1UdIwQY
MBaAFNuSnexcDyOt2bru6nuzmsh6cpCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMt
ZDMwYjdlMjVhZTBiLzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMtZDMwYjdlMjVhZTBi
LzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgcEejMx
/Dve5kVDSYbGngRg+54Tg8EsHlJk5phkQ059MerRe1Nkh4+DIYhjQxLzP6IfnHWQ
zHawy1rW5NWqiBvbXmBagi5J4HbYb7mMfWz18p2pvt2QRMfWu2Keqn0ZN3gLErz7
+k85urshxvfi2yyfHf16h2V3YsDkiv3Dw3y4rRls326mDfYpCFUJWPuQzAvx791X
Q/Vo3xhW1ZiSYLWpQOtG2v8D6kUIAaTMiAZ3MpJ4Jf9dduZcIX5akQ9FGEbCtr7A
i0EO46dcGX356oqnX4JvE/IHTAsLQZQnCaaONQH2pEzY86TuuD69XVeIcHa7L6lL
rZ57KFyVFk2uxA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:17 2026 by rpki-client