Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: F+bf7LXxdI+Y1m4V1Yh+WXkwahBsXWBhIZOtPF93mRk=
Subject key identifier: B3:BE:ED:33:D9:9E:14:33:76:55:02:16:FA:86:C3:0F:FC:E2:17:35
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01A0D3EF483FEB843D51E44DD920A4213DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 15:01:09 +0000
Manifest this update: Thu 24 Sep 2026 15:01:09 +0000
Manifest next update: Fri 25 Sep 2026 15:01:09 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: rKicmLFsCBcDH0nyY4Tp0oDJ/QYvAPvpUx3A4WdJD+Q=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:48:3f:eb:84:3d:51:e4:4d:d9:20:a4:21:3d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Sep 24 15:01:09 2026 GMT
Not After : Sep 25 15:01:09 2026 GMT
Subject: CN=b3beed33d99e143376550216fa86c30ffce21735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:6f:ec:67:77:76:9a:94:2e:5c:b9:6d:0a:
62:55:26:f1:70:7b:5c:7a:fe:40:e6:15:10:2f:9d:
ec:ed:6e:3e:e1:f7:d7:ba:96:51:30:2a:62:60:2a:
75:91:85:93:81:98:c3:06:ae:8d:a7:91:56:53:8e:
1b:9f:04:03:18:ef:54:7a:bf:1c:9f:95:6b:04:5d:
73:df:3a:87:c6:d7:b0:d8:cf:9d:08:7e:05:73:a6:
73:c5:e2:7f:a5:e9:de:79:a8:c1:47:e5:15:0c:f2:
4f:bd:62:42:21:fa:fb:ce:c4:56:d5:c3:92:88:4a:
66:92:fd:d0:90:e1:0c:a6:f9:c8:5b:73:63:be:4b:
61:f2:a2:ff:99:f6:4e:df:23:48:5f:17:51:c9:d5:
17:6b:9d:49:bf:ca:84:ba:07:31:c2:75:de:18:89:
32:e9:a7:40:39:60:71:d8:35:f1:84:b1:97:03:66:
ba:d0:6c:42:6c:3c:c1:2b:79:84:0d:da:64:d9:38:
8c:54:29:6f:24:c5:50:49:f9:f1:90:e3:02:b0:0f:
71:b5:61:74:2d:0b:a5:fe:67:23:96:f4:0b:aa:f6:
cc:dd:e6:af:e6:3a:bc:67:7f:f2:e9:47:40:cb:79:
11:fb:c8:c5:b6:2d:88:5d:8a:71:5f:b2:21:5d:55:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:ED:33:D9:9E:14:33:76:55:02:16:FA:86:C3:0F:FC:E2:17:35
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:16:90:53:e0:54:37:8c:11:a5:cf:62:07:37:c8:96:14:
70:e9:4f:c3:f7:67:77:94:94:c3:37:2f:fe:cc:78:3f:3f:b1:
e8:42:06:9e:0f:6f:b2:06:22:5b:c1:54:c1:92:1e:2b:a6:2c:
24:dd:c3:28:6c:bf:ce:11:35:28:13:50:8e:63:5a:db:ad:57:
65:2d:d6:fd:6b:c3:64:24:4b:84:3d:46:bc:7e:59:a6:a1:9d:
8a:72:d7:d8:57:dd:ac:f7:89:11:36:cc:ca:72:f8:17:e2:04:
4b:d5:aa:b7:6b:38:22:34:d3:c4:7e:05:67:48:9d:11:d4:45:
ca:a9:1c:0d:f1:3b:07:a0:0a:06:4a:46:6b:07:7e:8e:dc:92:
57:de:6d:8e:61:ce:8b:54:a9:03:7f:a0:06:3b:24:5b:ba:b6:
ac:88:5b:10:38:14:67:4a:80:57:7d:33:c1:70:ef:cb:07:26:
14:7c:23:eb:cf:f9:ad:b1:57:b6:3d:7d:19:20:8e:8e:d3:0e:
74:ee:f1:33:52:63:45:0f:71:5b:a8:1d:1a:1c:91:91:95:33:
a7:04:d3:87:7c:29:d7:ea:59:6b:22:67:1b:7f:89:43:c1:e2:
2f:91:4e:f3:6e:99:82:3c:d6:17:f5:39:e5:a4:5e:36:a0:55:
30:8f:39:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT70g/64Q9UeRN2SCkIT22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3
YTBlY2UwHhcNMjYwOTI0MTUwMTA5WhcNMjYwOTI1MTUwMTA5WjAzMTEwLwYDVQQD
EyhiM2JlZWQzM2Q5OWUxNDMzNzY1NTAyMTZmYTg2YzMwZmZjZTIxNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcNv7Gd3dpqULly5bQpiVSbxcHtc
ev5A5hUQL53s7W4+4ffXupZRMCpiYCp1kYWTgZjDBq6Np5FWU44bnwQDGO9Uer8c
n5VrBF1z3zqHxtew2M+dCH4Fc6ZzxeJ/peneeajBR+UVDPJPvWJCIfr7zsRW1cOS
iEpmkv3QkOEMpvnIW3Njvkth8qL/mfZO3yNIXxdRydUXa51Jv8qEugcxwnXeGIky
6adAOWBx2DXxhLGXA2a60GxCbDzBK3mEDdpk2TiMVClvJMVQSfnxkOMCsA9xtWF0
LQul/mcjlvQLqvbM3eav5jq8Z3/y6UdAy3kR+8jFti2IXYpxX7IhXVUO/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO+7TPZnhQzdlUCFvqGww/84hc1MB8GA1UdIwQY
MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt
YTY5YzViYzdlZDU3LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3
LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKIWkFPg
VDeMEaXPYgc3yJYUcOlPw/dnd5SUwzcv/sx4Pz+x6EIGng9vsgYiW8FUwZIeK6Ys
JN3DKGy/zhE1KBNQjmNa261XZS3W/WvDZCRLhD1GvH5ZpqGdinLX2FfdrPeJETbM
ynL4F+IES9Wqt2s4IjTTxH4FZ0idEdRFyqkcDfE7B6AKBkpGawd+jtySV95tjmHO
i1SpA3+gBjskW7q2rIhbEDgUZ0qAV30zwXDvywcmFHwj68/5rbFXtj19GSCOjtMO
dO7xM1JjRQ9xW6gdGhyRkZUzpwTTh3wp1+pZayJnG3+JQ8HiL5FO826ZgjzWF/U5
5aReNqBVMI85AA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:20:39 2026 by rpki-client