Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: XtFyS00DDq+SvDmZsePtIc+6hxD7JxdA/bfox8TVUjM=
Subject key identifier: EA:3F:8B:77:DE:A2:F6:CF:EF:BE:0B:C7:15:2D:28:64:D7:5D:54:84
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019DD57748B56102551A213FA5F57DAF9FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 05CD
Signing time: Tue 28 Apr 2026 19:00:57 +0000
Manifest this update: Tue 28 Apr 2026 19:00:57 +0000
Manifest next update: Wed 29 Apr 2026 19:00:57 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: mPq3Cu8Mz3CVX943RPiqmMvlntRp/+a5C3CI/GMY5Yo=)
2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:77:48:b5:61:02:55:1a:21:3f:a5:f5:7d:af:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Apr 28 19:00:57 2026 GMT
Not After : Apr 29 19:00:57 2026 GMT
Subject: CN=ea3f8b77dea2f6cfefbe0bc7152d2864d75d5484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:13:93:f1:27:b8:46:9c:cd:f3:79:1a:87:
bf:8a:da:89:21:d4:ea:03:03:0e:91:33:c4:4b:ce:
37:e0:19:ac:ce:9d:f4:cf:8e:1d:a0:d3:75:40:45:
fc:de:d6:fe:87:30:21:89:7e:56:3f:87:e7:6f:b1:
1c:4e:e1:ba:a2:5b:9e:0d:2a:b9:18:07:17:6d:55:
47:f5:03:61:97:79:36:f7:2c:b2:2a:59:b0:3e:5f:
b5:70:18:76:85:e2:79:9b:b2:ea:d9:f9:ef:dc:e6:
a4:9a:9f:1b:82:03:61:ef:b2:59:53:75:33:f4:6c:
ab:13:33:e1:65:45:54:ff:6c:43:af:e2:e2:d6:29:
9e:87:f5:c6:ca:fe:08:f6:a6:63:79:a9:91:dd:a2:
12:87:c6:af:87:a6:de:7f:ce:b0:df:a2:31:f6:46:
65:d3:13:f3:67:b2:bf:29:82:d2:ca:78:55:ba:d1:
19:45:b8:a9:2d:2d:a2:5b:30:f5:7d:17:82:b9:f7:
a6:0d:6f:0b:60:8d:2d:ea:aa:54:69:d6:a0:1a:f8:
a5:a6:d2:a7:3e:b3:db:7f:69:13:3b:59:3c:54:0f:
a3:87:c6:7a:4b:8c:18:7e:50:96:d8:e4:9e:65:73:
7a:fd:03:22:c7:9a:ac:d9:42:5c:bf:f5:50:02:0e:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:8B:77:DE:A2:F6:CF:EF:BE:0B:C7:15:2D:28:64:D7:5D:54:84
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:e9:91:24:6d:e2:91:03:75:40:d8:e4:48:6a:04:d7:59:
52:c1:b8:77:d2:16:a8:dc:c6:a6:89:41:01:94:7a:73:6d:e2:
65:96:2b:c3:98:c7:10:53:42:17:4b:44:14:c1:2e:f5:e1:4e:
3e:75:88:ce:0b:6d:65:56:0e:b4:ed:65:aa:23:61:df:ad:00:
9f:dc:07:d3:a3:49:00:d7:4f:44:71:e4:86:cb:1a:3e:65:42:
ed:16:21:4c:09:c3:59:9e:54:3e:75:f8:31:ee:9b:6c:9f:fd:
5b:32:e3:4a:36:7e:e0:71:86:76:7e:c0:43:01:10:27:91:a5:
3d:73:ea:59:c7:ea:de:76:b5:f6:45:1c:d6:85:cc:26:fa:59:
11:0f:00:c6:f5:03:b0:07:5f:46:90:32:c8:8b:c0:08:ae:e5:
35:50:3c:26:35:c0:20:7e:32:a3:c4:29:27:fb:73:ca:ec:a4:
c2:fd:b2:30:ae:6f:99:25:9e:34:6c:77:0e:4f:fc:aa:3e:ec:
2e:e8:fb:2d:75:b5:56:c0:31:0b:cb:29:fc:05:81:a5:76:0f:
52:e5:46:0f:50:39:1a:3a:52:b8:84:fb:a0:67:6d:83:b9:c1:
66:55:22:4e:82:06:8c:d5:75:0a:64:a9:49:6e:7a:6c:72:68:
3e:5c:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 02:56:00 2026 by rpki-client