Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: MsOuqTHo8TTtaNJMNbjUwL8B3/Mex20NvWABVdS03wU=
Subject key identifier: 5E:CB:83:E6:25:0D:06:DA:9B:6F:FE:0D:52:74:56:64:0E:D3:0C:3E
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019CE7ED8E52E93575874E07F6128A6B6878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0552
Signing time: Fri 13 Mar 2026 16:00:31 +0000
Manifest this update: Fri 13 Mar 2026 16:00:31 +0000
Manifest next update: Sat 14 Mar 2026 16:00:31 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: q87urnThh+3KUzd/meOZVVvvWIBrE5d1UStiTBizjck=)
2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:8e:52:e9:35:75:87:4e:07:f6:12:8a:6b:68:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Mar 13 16:00:31 2026 GMT
Not After : Mar 14 16:00:31 2026 GMT
Subject: CN=5ecb83e6250d06da9b6ffe0d527456640ed30c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:5d:d1:66:68:d5:bc:02:b8:7e:dc:12:aa:
11:fb:cc:36:f9:41:e5:73:aa:87:6f:16:8b:d5:76:
69:0f:2b:f4:c5:d4:32:8d:61:3b:95:67:43:9b:c9:
d0:98:cf:3b:a9:cc:85:10:82:08:2b:80:d3:2d:1d:
24:8c:a7:47:09:97:54:0d:10:15:03:6c:fd:7c:b8:
89:75:58:8c:32:31:06:59:a6:57:ef:e5:38:c3:56:
e6:f8:87:b4:4c:56:5c:5e:d7:01:35:1e:c8:86:d1:
2b:63:fc:7d:6c:aa:fc:ee:3b:a5:de:19:75:e0:4b:
db:dd:da:4e:32:32:2a:ee:49:c8:5e:a9:82:d6:1e:
e6:bb:12:22:e7:d3:f3:3c:56:a2:72:68:72:7c:ae:
a9:10:de:58:f2:70:4e:18:bb:d8:49:ea:49:c3:2f:
ec:90:51:eb:3d:04:27:84:b5:dd:27:ee:9e:c0:2f:
26:73:4e:39:07:1d:e0:81:1e:6e:66:75:63:54:97:
a0:74:a1:99:06:a6:59:7b:6e:ae:51:e2:1d:fa:39:
6e:f2:41:ac:fc:45:39:61:0e:4e:1f:38:43:a4:ed:
4a:f5:8d:2e:63:47:74:52:3a:69:46:0d:aa:ff:a7:
f0:e0:87:61:f4:ed:de:75:71:ea:b5:18:71:66:7f:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:83:E6:25:0D:06:DA:9B:6F:FE:0D:52:74:56:64:0E:D3:0C:3E
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:82:cb:40:07:09:38:15:e2:ca:7e:68:6f:1f:da:98:5d:2b:
94:0c:60:6d:f6:4a:bd:12:75:7e:ed:34:15:73:84:4c:67:f6:
ca:c3:44:7b:f7:cf:95:40:51:5a:b1:53:cc:09:71:54:85:29:
a4:e0:b4:25:5d:af:5b:85:c6:b2:2a:7b:29:09:63:e0:61:a3:
c8:9a:1e:be:df:44:64:c8:d9:bb:7d:58:72:92:d1:eb:0d:75:
d4:d1:3e:6d:dd:15:4f:67:73:92:27:ce:80:47:3b:f4:d6:d6:
9b:5a:d5:c0:ed:4e:f2:f7:53:db:84:e9:96:fd:06:71:e0:80:
8f:7f:23:e4:93:13:c6:9c:ba:e2:f9:75:c3:a2:ee:06:d7:23:
94:b8:85:46:78:23:d2:dc:1e:f6:4f:bb:ac:f9:8c:4e:74:6b:
62:2e:7a:5b:29:ff:b5:06:10:30:89:c5:37:3a:6c:7e:54:91:
75:50:a3:51:48:2e:de:55:50:86:15:50:84:24:9c:e2:47:98:
ba:9d:37:26:56:fe:03:25:e0:f8:83:f0:09:cf:ea:b1:1f:13:
4d:cd:10:98:ea:25:5b:c3:76:17:9b:37:4b:11:30:80:da:7a:
d8:4d:e8:a3:53:09:bd:2b:bb:88:48:84:b0:27:bf:7c:64:b9:
99:1d:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:48:04 2026 by rpki-client