Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: 1lEcKqs9q8JSpw5xyx46LWXVUe5c8CGjtOdnWnmwuh8=
Subject key identifier: 5B:FB:5A:36:68:BB:DC:BD:5D:26:E4:7A:42:A7:AB:AB:49:4B:91:70
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019CABD903C6B8916006BB70A6E5D2AE5E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:00:52 +0000
Manifest this update: Mon 02 Mar 2026 00:00:52 +0000
Manifest next update: Tue 03 Mar 2026 00:00:52 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: FupSmuqNSxUuOsJQhGba9n3kuvMnYb50qrFhTNFFkEQ=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:03:c6:b8:91:60:06:bb:70:a6:e5:d2:ae:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Mar 2 00:00:52 2026 GMT
Not After : Mar 3 00:00:52 2026 GMT
Subject: CN=5bfb5a3668bbdcbd5d26e47a42a7abab494b9170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:ce:9f:1f:d2:29:16:8a:d5:9a:18:95:2b:
52:a1:f5:ca:8e:3c:21:0d:e5:89:90:ac:f7:c3:b5:
75:b1:69:cc:50:8e:97:1c:7b:e1:6b:5b:69:38:7b:
32:fc:55:e8:07:a3:bf:b0:f5:ba:3b:a7:0c:c2:19:
9c:59:21:0b:12:a2:bf:9d:41:57:b2:94:f5:51:e8:
f3:b2:33:6a:e7:92:63:37:f0:be:0e:d5:5f:fa:db:
1b:cf:2e:f8:aa:4a:f3:59:d7:50:c9:2c:db:1f:0b:
59:94:e1:9a:25:8a:11:cf:04:b2:ee:12:65:d8:f3:
e5:4f:22:8b:c4:59:7d:a7:bb:ae:6b:91:fd:cc:e2:
a5:65:36:b1:b0:97:18:02:71:0c:ff:dc:2f:bf:db:
95:c4:08:6b:68:c2:ad:92:8e:bc:de:2d:a3:62:93:
6b:2b:10:ae:6e:eb:80:a0:7e:b7:84:f3:70:e3:3e:
4f:b6:37:cb:09:b2:1a:58:2b:27:3b:40:1a:ed:40:
a1:32:53:48:e3:45:af:52:29:d3:62:45:14:8d:92:
c7:87:4d:f3:f3:16:d2:21:08:d5:80:ff:48:05:a0:
09:66:95:ed:64:a3:71:91:64:0c:60:8e:13:36:a9:
f4:46:20:9d:32:db:5b:00:a7:66:eb:81:71:05:df:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:5A:36:68:BB:DC:BD:5D:26:E4:7A:42:A7:AB:AB:49:4B:91:70
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:cc:4e:66:80:eb:e3:d3:eb:cc:49:45:ed:30:ed:76:ac:
ff:e7:72:64:99:47:23:1e:66:ea:22:3f:59:d3:bc:59:82:f4:
42:99:e5:07:9a:71:90:e6:14:1d:ba:c4:ca:e9:fa:1a:b7:91:
a2:2e:62:d0:68:26:75:af:2b:3a:2f:5e:52:0d:66:de:7e:6e:
88:e3:34:8f:76:cd:40:e3:d3:32:3a:e8:b4:50:ab:cc:24:b2:
f3:3b:57:07:e0:7f:de:a1:34:b7:3e:c2:c4:ff:c3:68:9c:cd:
57:cf:1a:fd:c9:54:61:1b:c2:0b:48:15:81:9a:94:71:0d:35:
45:bc:30:06:eb:2e:dd:8d:bb:9a:12:c1:4c:37:8d:b0:c6:82:
e9:96:dc:29:c2:ea:27:df:16:da:20:f2:e3:f6:1c:50:61:5f:
23:fa:ef:24:e5:aa:24:7f:89:0c:b8:89:a3:91:bd:cb:5e:c5:
b2:b3:ec:8e:3b:2f:03:a1:86:c0:55:de:fd:94:a9:ef:c0:f7:
0c:dd:25:df:d4:5e:01:9a:4b:d4:59:a5:d5:af:7f:f8:bc:2f:
4b:37:97:95:61:77:1c:20:cc:42:54:fa:74:57:b1:ab:78:fe:
66:9b:f2:0e:cb:62:1a:83:cd:08:36:fb:be:be:45:a1:9a:ef:
db:72:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:10 2026 by rpki-client