
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
File: 25ksue1Yj0M3zLP7Eby5qy7KL0o.mft (raw, json)
Hash identifier: IaqPIFfyC8rAM8dYw5GLAh85aLtef7VOLKWxQO1gzgI=
Subject key identifier: 83:5A:FD:CC:DC:F6:4B:C2:31:7B:65:B5:D0:E3:3A:EE:97:9E:B4:BE
Authority key identifier: DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
Certificate issuer: /CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Certificate serial: 01A04129A5227271C31F330BC89C5A8D8834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
Manifest number: 0239
Signing time: Thu 27 Aug 2026 03:00:43 +0000
Manifest this update: Thu 27 Aug 2026 03:00:43 +0000
Manifest next update: Fri 28 Aug 2026 03:00:43 +0000
Files and hashes: 1: 25ksue1Yj0M3zLP7Eby5qy7KL0o.crl (hash: AqQLNvtYS0eKKUf1QFqM8T6FdDQa7eS1x7zytQG4e1o=)
2: lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa (hash: IGnpPw3ahwQuaJhVH+cw2ULWyqjDG7gfjxfW66UmWow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:a5:22:72:71:c3:1f:33:0b:c8:9c:5a:8d:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Validity
Not Before: Aug 27 03:00:43 2026 GMT
Not After : Aug 28 03:00:43 2026 GMT
Subject: CN=835afdccdcf64bc2317b65b5d0e33aee979eb4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:77:16:56:57:9e:6c:d7:76:1d:37:a0:bb:
6d:f4:fc:77:92:d1:d6:17:24:4f:c9:87:23:fd:34:
bc:3f:4d:a3:f3:19:d2:ea:1f:45:37:fe:34:c2:e9:
93:f2:5b:0f:6c:3f:04:c3:18:3c:85:70:b9:83:fc:
93:e5:75:20:f8:93:7c:da:0b:5b:ef:10:b9:0f:25:
cf:26:da:7a:a4:d8:d1:ad:96:fb:fc:be:4e:ac:4c:
b8:44:47:09:84:27:70:a0:a5:06:21:c5:93:94:74:
7d:ea:93:fc:d5:27:94:99:f0:eb:a8:92:e7:af:ab:
ef:78:81:26:88:45:e5:46:fc:e4:4d:04:ca:81:12:
61:24:b6:7a:59:cc:41:a3:66:4c:e4:cc:6c:a8:d8:
a1:47:c7:44:87:75:ef:09:74:15:61:58:5b:a5:21:
2f:21:47:95:41:b1:1f:b4:cd:63:b4:10:a0:00:c9:
82:b0:c1:ca:47:22:87:e4:fb:66:b5:5e:bb:63:15:
44:4a:00:12:af:1b:64:5c:9a:b7:7a:f4:13:9f:5d:
3a:8d:ed:22:14:2a:18:c7:18:f6:13:98:d7:ed:51:
79:05:0d:a7:60:07:0a:d0:da:83:29:95:5b:db:fe:
65:81:b4:76:cd:d6:38:43:eb:b6:1f:bb:cd:b4:d8:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:FD:CC:DC:F6:4B:C2:31:7B:65:B5:D0:E3:3A:EE:97:9E:B4:BE
X509v3 Authority Key Identifier:
keyid:DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:0c:0e:f3:e4:d9:56:9e:b0:f2:14:05:22:67:b2:61:7c:
b6:35:99:aa:b8:11:58:9e:d9:e8:bb:79:38:f3:ca:76:bf:76:
d8:6d:24:16:a2:64:86:1e:1a:8e:6c:a7:20:f1:76:75:4d:8c:
28:59:5e:09:37:5f:9d:54:d1:2d:c6:83:41:07:26:95:94:8a:
f2:a4:42:b5:49:e5:c3:b4:9b:d2:4e:61:66:07:f8:8a:4c:18:
30:e2:02:2e:9c:37:8d:9b:04:be:87:71:15:6e:6d:c7:7e:f0:
83:ed:14:9e:9e:ac:77:28:c5:68:10:53:bd:f3:3f:84:f5:8a:
ae:77:88:56:ad:98:1c:37:2b:49:0a:14:f0:ac:2c:5e:db:15:
a3:f2:ac:2b:62:07:c1:6b:e8:16:3a:9a:45:a9:d3:0b:e1:b2:
4f:63:f5:15:68:b0:7f:5f:82:b1:ec:f0:32:71:31:07:ac:7a:
a8:ea:9c:10:b8:a5:96:52:7c:a9:35:d9:80:b5:8f:b3:2b:58:
5b:a7:e2:d7:64:a2:d7:e7:e3:36:89:12:ac:c3:c3:0d:18:69:
90:31:ec:bc:c3:eb:07:14:b1:0e:99:6c:6c:3c:9c:2e:c7:ee:
a6:a3:2c:3c:8d:ab:20:cb:7e:6c:04:67:6f:d8:81:ca:ac:2b:
da:9d:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:58 2026 by rpki-client