Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: rxmVX62QGiiJCVnuVIpiBXb5OtC2DHTp72FZDwZMd1Y=
Subject key identifier: 3E:88:1B:CE:E6:FD:19:E4:92:18:9A:6C:01:96:CF:E2:FD:A7:DD:57
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 01A148E0E1F8477DC9A578A1923823816B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 079D
Signing time: Sat 17 Oct 2026 08:00:59 +0000
Manifest this update: Sat 17 Oct 2026 08:00:59 +0000
Manifest next update: Sun 18 Oct 2026 08:00:59 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: taw3V2k/EBuH9Lo4iQylZTLu5aC8X/rX9WWUB2XPLc8=)
2: D1MjY2dgI854Vrql-2sCQNqc_lM.roa (hash: OLcuGasHeRlkhgtJyRPIcd1KKR1gIAesFmUc+dmwf6Q=)
3: _tgh7D8loaPDJ7r7Pxf9_WvTx34.roa (hash: xcNwVxfY4wqx0USwx2W9FdmwKxqPegHXOT+mDy7Il/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:e1:f8:47:7d:c9:a5:78:a1:92:38:23:81:6b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Oct 17 08:00:59 2026 GMT
Not After : Oct 18 08:00:59 2026 GMT
Subject: CN=3e881bcee6fd19e492189a6c0196cfe2fda7dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:c8:49:09:08:a0:74:c0:6d:62:ed:10:ca:
0f:e8:46:7b:6b:be:34:6d:eb:34:60:64:44:41:73:
fc:05:dc:fd:d5:26:f8:b1:31:7a:5a:43:f0:c1:da:
fe:78:89:af:fe:65:d6:73:b5:5d:54:4c:3a:67:3b:
6b:9d:d1:59:f4:cf:2c:f0:f3:bd:14:df:e9:ea:96:
59:7f:e9:0d:51:5f:a9:d7:c7:3c:00:28:49:b7:8c:
a7:26:a1:ed:66:86:1e:6d:e1:ce:fa:ed:f7:8f:e4:
6b:8c:6a:43:b3:31:7f:15:27:77:7c:78:c3:0f:02:
f8:4d:f9:b2:f1:5e:e9:8e:b2:ad:12:18:a1:4a:cf:
44:78:4f:83:39:05:16:2e:16:b0:9f:32:db:77:4f:
c0:25:5b:9f:3d:1f:fc:20:d8:ce:a2:fb:02:48:bc:
60:0e:f8:1d:bd:36:f8:04:00:54:86:87:2c:35:6b:
93:75:89:99:f6:32:38:b1:da:a0:cd:84:00:20:0c:
75:ec:ef:e5:de:79:34:eb:ed:90:9f:bf:ee:16:a0:
b0:9b:50:64:c0:35:3a:06:05:63:a5:9c:2e:04:fe:
b0:57:99:3c:b3:30:d1:4a:a3:36:14:0f:39:76:14:
25:b5:3e:c7:b0:ce:b1:7d:98:52:1d:c0:92:4b:9d:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:88:1B:CE:E6:FD:19:E4:92:18:9A:6C:01:96:CF:E2:FD:A7:DD:57
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:1d:08:9f:29:81:4a:07:c1:2c:28:c3:bf:b0:a8:90:2c:
ad:76:94:5c:4b:73:f5:26:7c:fb:63:96:88:73:f7:8f:ed:c7:
d9:40:9c:cd:11:20:82:ed:3d:ec:67:2e:b2:69:7d:ed:9b:fd:
a6:71:3b:f0:63:9f:67:9a:52:4f:f2:fe:b6:29:82:31:b1:fe:
74:cd:d0:66:74:73:c1:53:d3:57:e0:bd:8f:00:01:64:e5:01:
4e:b4:e2:32:46:6f:44:6b:2e:7f:df:d9:34:5d:53:cd:3b:d9:
f1:14:ff:44:3e:f7:89:70:b8:7d:81:f5:6c:72:ed:7d:f1:bc:
cb:6b:ef:63:7c:f2:07:ad:5b:a0:26:94:b0:b6:bc:42:ec:da:
46:76:56:32:f9:d4:07:78:b9:bf:83:c0:ae:f3:c6:dd:bf:09:
4f:76:03:cc:cc:cf:a1:67:a5:45:76:bc:05:68:5f:72:07:0d:
67:9b:f3:94:e8:c7:e0:78:55:4b:9d:d5:b9:93:ea:5d:c2:74:
1b:1a:43:aa:70:dd:a0:5d:dd:99:cb:93:58:fe:02:20:f4:6c:
f7:fb:bc:2c:31:e7:de:70:cc:22:84:c9:f4:29:86:79:26:30:
a1:79:ea:98:39:84:81:26:c0:c4:8a:64:53:bc:2b:19:a6:86:
91:84:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:26:23 2026 by rpki-client