Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: DY1rTLRvZ+gxPuL1BTbjUziDJANsEw1yfaGph5/+Cuc=
Subject key identifier: 2F:AE:42:1B:E3:E3:24:AA:A8:B5:E0:1A:59:EE:43:05:3E:04:D1:5E
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019D99630C03FFD3EB9E5C202416E7D09C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:38 +0000
Manifest this update: Fri 17 Apr 2026 03:01:38 +0000
Manifest next update: Sat 18 Apr 2026 03:01:38 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: lvnto3LK6nKwlpM+G8uOHnsj9WtzzfJdvxGJbNVNKcE=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0c:03:ff:d3:eb:9e:5c:20:24:16:e7:d0:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Apr 17 03:01:38 2026 GMT
Not After : Apr 18 03:01:38 2026 GMT
Subject: CN=2fae421be3e324aaa8b5e01a59ee43053e04d15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:c2:25:03:12:3d:9b:0d:34:94:70:ba:e4:
1a:4e:47:bf:5e:9d:70:d4:55:c6:fa:1c:5f:cf:7e:
ec:af:3b:59:95:69:e0:83:9f:96:bf:07:82:46:93:
27:ef:25:c8:d3:c8:73:a2:ae:c8:22:e4:4a:76:99:
ee:7f:e5:b1:36:c4:be:e4:35:12:9e:4f:e6:ee:f6:
e2:0b:d4:9e:eb:30:f4:31:00:81:06:9a:e4:ef:9a:
d3:2a:87:9e:b5:4e:ba:b5:f3:09:9b:85:00:6c:63:
4d:7b:e5:1f:0a:5d:c0:e2:b0:3c:9f:79:50:60:41:
9c:6b:3a:a9:a9:20:19:93:7b:32:40:30:15:50:95:
58:04:5d:bb:bf:45:6b:de:37:c9:53:67:76:c1:5b:
b6:2e:e4:62:68:a6:27:9a:33:54:9b:e4:6c:6d:7e:
21:33:1e:9a:c2:10:b0:0e:fa:e7:39:f9:3d:26:e0:
36:7b:1f:82:e0:64:55:a1:0d:f1:80:57:d7:7c:15:
45:7f:97:8f:49:c3:21:4c:7c:29:eb:c5:de:9f:2e:
d2:a8:fb:1d:7f:47:33:26:b5:ac:ca:ab:a5:fb:46:
5d:05:d1:07:6f:db:6d:8c:48:d1:cc:8b:e2:73:8c:
02:bc:ed:49:89:c9:f3:cb:4d:d6:95:06:e8:c9:a2:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:42:1B:E3:E3:24:AA:A8:B5:E0:1A:59:EE:43:05:3E:04:D1:5E
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b7:1c:51:03:9f:e5:f6:6d:c4:69:7f:fb:53:6e:21:c2:f4:
8a:b5:1d:fb:ca:c3:2b:c0:9d:63:1d:31:84:1d:46:8d:ce:74:
7c:2e:f5:0f:3e:a7:6e:2c:1d:5f:f6:c8:a6:99:44:ad:66:6a:
63:a2:e8:92:2b:23:9b:cc:56:49:c9:c4:81:0c:50:b0:5e:c9:
65:5d:64:50:0e:53:ac:be:bc:2a:9d:d1:cb:e6:c6:d4:e3:5a:
70:58:4f:d5:0e:74:18:52:0f:b2:e7:31:cc:ee:62:4e:75:01:
9e:a5:ed:1d:3a:ba:bd:c3:dd:ff:09:8f:be:02:9f:ce:f1:44:
d3:28:d6:d1:95:df:7a:27:c0:33:ba:7e:f4:30:fb:c3:ef:43:
a2:17:62:45:c2:fd:a9:9b:bf:fa:91:d5:60:59:1f:18:3d:59:
67:38:e9:f5:fe:25:2f:45:da:c6:f5:47:bc:3b:15:67:6f:ad:
5a:50:25:d3:ca:ac:e0:a2:9c:4a:dc:26:be:f2:2e:24:2e:e0:
7a:89:54:d0:18:46:ec:e8:e9:b1:99:49:66:e5:c8:47:3b:9b:
8a:90:88:45:b6:3a:73:c8:e8:db:d7:ce:34:ee:12:7e:23:91:
db:02:fc:d2:d9:a8:2d:58:ec:ac:70:cd:f7:7e:90:d2:81:93:
56:1a:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:45 2026 by rpki-client