Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: xIrbFTr0d4Bbq1J5CR3vttiGdQ3QZiQRXe/XmzjAGbQ=
Subject key identifier: E8:0F:8C:00:CE:CE:20:23:68:7B:C4:89:3F:40:C9:F0:AE:CB:34:28
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019CAB34279D63D5E72F17A6282D02BED2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: ovP/6rr2sp52UAdLLQkxBQZR5ZkacP+LtmDEUSvhD+o=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:27:9d:63:d5:e7:2f:17:a6:28:2d:02:be:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=e80f8c00cece2023687bc4893f40c9f0aecb3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:fc:fe:28:ff:75:ad:ee:74:e7:d9:13:fb:
35:62:38:dd:fb:9c:dc:27:42:89:1d:df:d6:40:fd:
80:c4:f1:00:81:0b:e5:a1:2c:99:a3:c6:2c:8e:05:
b0:d0:54:e0:1c:6e:77:c5:6d:7a:ef:dc:11:c2:e7:
01:0b:87:47:30:62:0c:a3:51:d1:65:6c:33:b5:2c:
69:ac:e2:7e:66:28:a5:f8:80:bb:3c:11:71:e6:bb:
7b:03:82:ee:e9:59:b1:70:8a:bd:35:95:20:f6:7d:
7f:84:10:e7:f2:00:61:d2:61:86:23:70:45:e5:34:
1d:a4:7f:9d:bb:28:a5:98:61:94:2b:8d:51:18:33:
98:8f:e4:8b:8d:db:58:e7:b2:80:72:b2:9f:73:8f:
d9:0a:a8:98:f3:33:70:fe:48:83:0b:ff:36:61:45:
48:b9:22:4c:8f:27:80:16:a0:89:94:79:ac:c2:65:
7c:f8:68:f2:8a:a5:60:f2:bb:9a:11:1d:0e:39:38:
f6:ef:70:ca:fa:d8:6e:a1:e6:4f:3f:1a:c1:cf:2c:
eb:58:8d:09:5e:66:9b:fc:54:3b:3c:bd:b3:9d:b1:
f6:ce:42:4d:06:c2:1a:4d:b3:76:d4:23:7e:a2:7f:
7a:28:e0:aa:5b:72:ca:55:8f:a0:e8:f4:1f:ba:9e:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0F:8C:00:CE:CE:20:23:68:7B:C4:89:3F:40:C9:F0:AE:CB:34:28
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:6f:a2:f3:22:e4:f2:28:7e:23:8e:07:34:0b:b0:cb:73:
83:63:a4:4d:4a:40:b4:d9:27:6f:7e:b6:81:54:d4:60:6e:a2:
68:32:a3:1c:bb:d3:98:e4:9f:bd:9c:90:82:da:2c:41:49:cf:
bf:28:31:6e:e1:4d:e8:32:ad:41:30:5d:0d:ab:07:7a:c9:94:
19:74:7b:ab:48:73:e8:b3:4d:fa:8f:34:12:b3:cd:f0:54:1b:
14:ee:66:15:e9:43:cf:ef:df:3c:fd:50:54:f9:b7:1a:50:16:
cb:98:22:32:60:49:c9:c4:a0:39:5a:85:22:07:6b:fc:df:d1:
82:85:f6:04:de:57:ea:2e:20:e8:4e:5f:31:a6:35:38:f9:67:
c2:4c:ee:d6:1c:e7:2b:87:8d:7c:a6:4c:d3:5c:75:3d:17:ce:
c2:4a:7d:28:2e:f3:90:cd:da:30:7f:44:3e:e5:76:02:2a:b8:
0f:7f:61:fa:7e:dc:e5:bc:b0:9f:aa:99:b9:74:d9:ec:f0:80:
b4:7a:17:14:52:0b:93:d5:75:b9:de:32:84:67:81:de:36:1c:
3e:c8:26:03:31:38:5b:f0:cf:a9:3d:b2:2d:31:1c:a3:c3:5a:
ef:d1:71:de:45:50:50:bc:c7:26:0c:7b:e4:b7:33:6e:ca:4c:
2e:5a:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:53 2026 by rpki-client