Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: 1/WIFRJ4lYIbPK3yiqa3uGn5TzqYJBaMAHm3bB8Pa0w=
Subject key identifier: 75:FF:17:AD:F4:CB:BE:5B:50:AD:0D:A7:7A:6E:25:4F:66:66:E2:F3
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019EC035CD0955B8CF0E7D951C33D145FD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0D68
Signing time: Sat 13 Jun 2026 09:00:11 +0000
Manifest this update: Sat 13 Jun 2026 09:00:11 +0000
Manifest next update: Sun 14 Jun 2026 09:00:11 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: 4Ei4IN7QwlT0O0qq2u2F/zxuhDqIU+S+RGK1AA03w+c=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:cd:09:55:b8:cf:0e:7d:95:1c:33:d1:45:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jun 13 09:00:11 2026 GMT
Not After : Jun 14 09:00:11 2026 GMT
Subject: CN=75ff17adf4cbbe5b50ad0da77a6e254f6666e2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:39:44:86:ca:ff:9c:91:63:ad:b9:ba:ef:
b5:33:21:d3:07:a9:0f:02:a6:4f:c0:a1:2f:30:35:
22:41:5a:bd:7b:23:e3:94:b7:75:0d:fb:39:00:94:
0b:75:be:dd:4f:fd:e2:26:cb:e9:e1:b7:cc:88:76:
26:b3:f1:4b:35:f3:77:5f:1f:27:1b:0b:e3:13:ca:
e2:10:dc:67:b7:ed:84:b4:15:e1:04:14:75:b4:f9:
b0:0f:e0:40:f7:03:39:49:71:3d:21:73:0d:47:77:
d5:c7:28:b7:7d:b3:2b:2a:87:3c:20:cd:24:3b:cf:
66:fe:5e:6e:48:83:31:17:f2:4d:5e:83:91:80:03:
a2:a0:ee:40:2c:4d:1c:99:94:75:39:70:93:60:1b:
0a:90:eb:8e:44:16:c8:4f:44:20:31:1a:37:9b:dd:
14:cf:49:f5:9f:fa:6a:e7:9c:a0:f2:90:0c:cd:c8:
5a:4e:38:ed:e6:fd:dc:7f:9d:28:b7:99:18:0c:56:
bb:08:d5:79:0c:7f:bf:18:4c:27:fd:03:b9:9c:2b:
f7:05:8b:24:85:f4:f6:4a:42:53:8a:ca:74:11:f9:
27:bb:41:a5:d9:9e:5d:1f:b4:81:a3:5e:3c:c7:ca:
b9:09:d1:25:39:9a:b3:fd:bf:6a:d6:49:2c:6a:26:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FF:17:AD:F4:CB:BE:5B:50:AD:0D:A7:7A:6E:25:4F:66:66:E2:F3
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:17:34:b4:8f:88:23:fa:97:05:30:7d:08:3a:24:58:49:
67:d4:be:1f:ce:08:9d:43:c3:a7:cb:5c:02:12:61:6e:63:26:
ad:ee:f1:06:a0:54:06:d0:d9:0a:87:c6:15:bc:50:5b:53:e0:
3d:dd:06:19:6e:c4:44:2f:56:c1:b1:83:6f:17:6b:47:e3:f0:
2d:14:d3:38:61:a2:53:fd:0a:18:11:11:7a:54:14:8e:50:59:
74:9c:ae:60:d0:9e:2b:1f:03:9e:73:23:5c:b1:d6:10:34:b2:
fb:62:5e:f1:0f:6b:49:bb:7d:b5:58:e0:43:59:9f:e2:81:d2:
49:6d:5c:69:9c:e0:a6:aa:c7:6f:73:af:24:2b:16:c3:d1:72:
8e:5a:47:3f:42:73:04:e5:63:bc:a7:a6:3b:09:24:2b:b9:7d:
26:40:fd:5d:49:31:fa:6f:28:48:e8:a5:45:20:aa:a3:8a:c8:
ad:24:6a:e2:e8:44:93:9b:18:fc:73:e2:a5:e0:26:dc:b4:1b:
7d:58:4f:cb:0c:61:44:ce:e5:b0:ea:54:be:23:3a:44:72:fe:
b0:9d:ec:87:7c:a0:61:f3:c0:a4:a3:25:f6:cd:e5:1a:3c:03:
61:cb:97:8e:f3:68:59:9b:75:78:eb:3c:65:b9:32:ec:4d:8b:
b7:94:3c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANc0JVbjPDn2VHDPRRf1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx
NTRhMWEwHhcNMjYwNjEzMDkwMDExWhcNMjYwNjE0MDkwMDExWjAzMTEwLwYDVQQD
Eyg3NWZmMTdhZGY0Y2JiZTViNTBhZDBkYTc3YTZlMjU0ZjY2NjZlMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mc5RIbK/5yRY625uu+1MyHTB6kP
AqZPwKEvMDUiQVq9eyPjlLd1Dfs5AJQLdb7dT/3iJsvp4bfMiHYms/FLNfN3Xx8n
GwvjE8riENxnt+2EtBXhBBR1tPmwD+BA9wM5SXE9IXMNR3fVxyi3fbMrKoc8IM0k
O89m/l5uSIMxF/JNXoORgAOioO5ALE0cmZR1OXCTYBsKkOuORBbIT0QgMRo3m90U
z0n1n/pq55yg8pAMzchaTjjt5v3cf50ot5kYDFa7CNV5DH+/GEwn/QO5nCv3BYsk
hfT2SkJTisp0Efknu0Gl2Z5dH7SBo148x8q5CdElOZqz/b9q1kksaiaT4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX/F630y75bUK0Np3puJU9mZuLzMB8GA1UdIwQY
MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt
ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1
LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM4XNLSP
iCP6lwUwfQg6JFhJZ9S+H84InUPDp8tcAhJhbmMmre7xBqBUBtDZCofGFbxQW1Pg
Pd0GGW7ERC9WwbGDbxdrR+PwLRTTOGGiU/0KGBERelQUjlBZdJyuYNCeKx8DnnMj
XLHWEDSy+2Je8Q9rSbt9tVjgQ1mf4oHSSW1caZzgpqrHb3OvJCsWw9FyjlpHP0Jz
BOVjvKemOwkkK7l9JkD9XUkx+m8oSOilRSCqo4rIrSRq4uhEk5sY/HPipeAm3LQb
fVhPywxhRM7lsOpUviM6RHL+sJ3sh3ygYfPApKMl9s3lGjwDYcuXjvNoWZt1eOs8
Zbky7E2Lt5Q8bg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:22 2026 by rpki-client