Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: oNPs7Jik/8uY4HPd343q6GkrpKHO46OzRElSvoUM8w0=
Subject key identifier: DE:F7:0F:6E:17:E2:85:24:DC:9F:DE:C9:56:04:08:69:A6:68:5B:52
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019E299494DB9829C5270CDBEA7F0BD45085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 043E
Signing time: Fri 15 May 2026 03:01:03 +0000
Manifest this update: Fri 15 May 2026 03:01:03 +0000
Manifest next update: Sat 16 May 2026 03:01:03 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: nG0pDY686z+Pym4jMFiOlu8ZFO0JFNXyjNotqC0lCv4=)
2: SMH2Oc24_m72oqPVd7XOf3_OyRU.roa (hash: WsgzmpsbvE0g6zXQzhps2wgMNgXJq/ibUvwvE7MedyM=)
3: hS-zp-zfmueU5iHRFKC0O06b_Y8.roa (hash: bQDlMMAMtH4O8JePaz3JngoNBpURtKGCYa9QelbxBc8=)
4: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:94:db:98:29:c5:27:0c:db:ea:7f:0b:d4:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: May 15 03:01:03 2026 GMT
Not After : May 16 03:01:03 2026 GMT
Subject: CN=def70f6e17e28524dc9fdec956040869a6685b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:ca:a3:fd:56:1e:74:97:06:99:83:dd:f9:
df:40:2e:e5:0f:1f:f0:80:4b:18:6f:3c:f0:71:90:
cc:40:1d:89:14:43:39:2f:d7:68:5b:72:36:49:84:
e5:ec:25:61:4a:2e:6f:ef:c5:be:69:ae:ea:58:e4:
86:f9:46:fb:27:16:9b:a5:3a:51:e2:e8:62:02:dc:
12:aa:b5:92:17:1d:b1:80:23:fe:11:25:9b:0c:47:
cc:95:af:68:ac:11:49:06:ba:15:8f:46:00:a4:3c:
be:2e:0d:dc:4d:f3:db:47:5a:64:79:1d:8c:6e:60:
dd:d8:ed:54:ec:0d:1e:4f:ba:86:b7:71:b3:dd:1f:
9a:a1:27:fb:50:51:b2:f5:00:e4:e0:2b:74:4c:af:
9b:64:12:20:c2:c6:2c:a1:9d:2c:be:a5:b7:1d:28:
af:10:3b:d1:32:f5:58:2d:1a:ff:12:eb:a5:b5:78:
98:d0:03:97:5e:09:e3:b6:f9:03:b4:87:c9:65:30:
91:87:74:37:50:db:ea:4d:ea:07:cd:f6:69:17:d9:
57:b2:cb:66:aa:49:0c:39:c9:a7:1e:4d:c0:c9:24:
23:9e:19:e3:fc:4c:bc:7f:42:27:46:0b:9c:5b:d2:
f1:df:83:a6:1c:fa:f8:d4:f4:ab:2d:d4:94:61:02:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:0F:6E:17:E2:85:24:DC:9F:DE:C9:56:04:08:69:A6:68:5B:52
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8f:7f:f2:f7:11:62:96:d3:3a:08:2e:ac:4e:2a:6a:5c:ef:
e6:21:a4:ab:26:fc:fe:85:1a:2d:2a:90:9e:00:ac:91:67:ee:
74:82:e1:a9:b1:8b:a3:50:48:3e:a0:8b:42:ad:5d:25:29:8e:
82:c2:64:55:30:cf:77:65:a1:2a:b3:16:9f:ee:37:b7:59:a3:
ad:19:38:b8:4a:9b:c1:0c:59:39:55:7e:e7:69:91:94:a4:0b:
9d:1b:5c:aa:54:35:74:60:a9:f0:77:6a:f4:7a:c6:6b:d6:83:
6d:e5:b0:ee:3f:c3:34:5b:21:f9:dc:56:39:11:84:35:9b:7c:
0a:f5:d6:d1:64:47:ad:40:81:18:e8:b4:df:d6:96:f5:9e:5d:
ea:87:a8:6d:40:90:e6:5f:d1:eb:e7:76:a9:2b:f3:5c:24:e3:
32:75:de:b6:a1:ee:29:f4:f0:ad:90:ff:21:6a:70:ca:40:18:
c0:d7:f9:33:ce:e9:12:dd:de:be:f8:ec:ca:69:8e:52:16:5e:
79:53:c2:26:b0:28:d2:77:e3:b4:50:9a:22:9b:9b:a5:83:2b:
1b:d5:66:2a:0e:68:65:96:8b:ac:1d:25:84:d2:fc:88:f3:fc:
ef:69:87:be:c5:49:d2:94:24:9c:99:1c:9d:98:bc:97:d2:1e:
2e:d5:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:01 2026 by rpki-client