Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
File: 25ksue1Yj0M3zLP7Eby5qy7KL0o.mft (raw, json)
Hash identifier: 9WbPHn9awcygrYoPAaiQAhCqccyVdmJ4Mc7QIwD3nkY=
Subject key identifier: 50:C7:8C:EA:F0:02:DC:C1:6E:50:1A:FF:B7:C8:51:E5:7E:A7:A5:40
Authority key identifier: DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
Certificate issuer: /CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Certificate serial: 019D38D3C05DD453D8D7EDE6717038D7C326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: 25ksue1Yj0M3zLP7Eby5qy7KL0o.crl (hash: Hjp8fE6T33FMdYjxD0G7xsYMnYJnaWgZgiVxTge0MRM=)
2: lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa (hash: IGnpPw3ahwQuaJhVH+cw2ULWyqjDG7gfjxfW66UmWow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c0:5d:d4:53:d8:d7:ed:e6:71:70:38:d7:c3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=50c78ceaf002dcc16e501affb7c851e57ea7a540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:24:59:c1:c7:41:b2:f0:15:27:e4:23:82:6b:
89:59:d6:20:bd:b6:8e:a8:a6:35:61:7d:55:50:01:
9e:89:59:51:48:92:9e:c0:b4:c4:18:08:4c:ce:d4:
24:f5:96:1e:a2:da:52:08:df:f7:4e:25:45:b5:90:
a6:e3:dc:b7:6c:73:9e:44:85:e0:e3:40:32:1a:e5:
a8:fe:9b:5e:2b:59:c2:2c:01:37:db:9d:19:19:79:
83:b4:3d:73:f2:c1:a7:24:7f:7b:01:67:69:83:b6:
b4:7e:a6:40:68:60:43:9f:16:84:c5:12:0d:7e:41:
be:36:67:68:32:06:10:52:cb:bd:b1:d1:71:6b:ee:
16:49:d5:1c:2e:a3:10:e5:0d:33:1c:8a:8f:0f:5a:
fc:cf:f7:b2:7e:59:e3:29:3e:36:58:41:1d:8f:cd:
5b:58:ce:4a:69:09:eb:20:ab:f3:c4:33:ba:16:61:
93:ca:ea:6b:b8:70:97:da:23:c0:50:47:8f:6c:ec:
cb:c8:59:18:68:54:7f:60:2a:0c:a4:ed:58:0b:ed:
eb:a2:1f:d1:67:f1:8c:0a:aa:80:78:e1:5f:13:25:
4d:f3:02:ee:ad:c4:2e:44:d0:18:75:cd:a0:6b:7c:
d1:57:b4:15:da:80:17:13:ec:63:0c:41:86:b4:14:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:8C:EA:F0:02:DC:C1:6E:50:1A:FF:B7:C8:51:E5:7E:A7:A5:40
X509v3 Authority Key Identifier:
keyid:DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ea:ff:d1:57:7b:58:9d:19:8e:11:7b:05:d8:01:43:6c:cf:
67:f6:68:4e:a6:a1:43:b0:5c:c0:91:97:0d:ca:13:f2:5f:59:
45:1a:6e:01:8f:4b:14:cb:61:28:95:14:9a:76:5f:8b:7d:32:
20:86:83:bd:67:06:43:c7:08:af:30:b2:92:0b:fd:11:d1:cd:
b4:0d:2c:5c:a2:1e:d7:a1:ce:9d:a0:aa:24:56:c4:2c:95:bc:
80:31:2c:d4:ad:fe:9e:36:ce:61:46:fb:6f:ae:e7:27:71:a3:
d3:79:8d:aa:e4:ca:e5:8d:d7:64:83:4d:0f:f1:1a:d1:43:3b:
eb:57:be:d2:d1:1f:f7:71:6b:51:7f:aa:1a:14:91:b6:7e:19:
10:1b:91:8e:b3:bd:98:de:78:0d:18:3c:9d:21:a7:03:84:91:
42:b6:c1:98:b4:7c:8e:a3:2b:ab:7a:45:8c:e0:78:3b:d5:a7:
9d:a8:31:23:fc:a3:90:b7:3a:e3:a4:b5:67:f0:de:78:7f:21:
71:e8:ea:bd:f5:98:40:d9:2c:9b:b5:63:ed:ab:77:2d:7c:6e:
d3:c2:32:67:bf:39:f5:7e:97:93:e6:fa:20:98:67:1c:77:fa:
3e:03:76:56:1d:8b:b7:3b:42:95:37:14:fb:28:24:45:2b:a8:
df:9f:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:29 2026 by rpki-client