Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: WI6l0ysAXxvgka8pkXAv1TNkDlMLPmvW8CAAEaw0fds=
Subject key identifier: 44:3F:BD:53:0E:16:2F:C7:24:8B:A4:41:58:86:F7:3D:7E:A1:2B:2D
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019FA9E30106D9F65A15A31709275A3C07B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0DE1
Signing time: Tue 28 Jul 2026 18:00:54 +0000
Manifest this update: Tue 28 Jul 2026 18:00:54 +0000
Manifest next update: Wed 29 Jul 2026 18:00:54 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: SLcDU5F6u5ZENAsA71WgcbhO9Ne7TRUnOMXa1p7UKMg=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:01:06:d9:f6:5a:15:a3:17:09:27:5a:3c:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jul 28 18:00:54 2026 GMT
Not After : Jul 29 18:00:54 2026 GMT
Subject: CN=443fbd530e162fc7248ba4415886f73d7ea12b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:1b:d1:2e:df:0f:0b:9d:6e:a4:3c:04:57:
dc:8d:ec:dc:86:ad:21:0a:a6:8c:2c:a5:40:20:5e:
05:10:52:bb:3e:5d:a1:46:21:5a:57:35:7c:2e:79:
01:51:e4:1e:2e:c9:d4:f7:34:e5:ee:e0:76:fb:74:
1a:97:f3:80:bc:9a:58:c1:bf:60:30:b7:54:35:ef:
76:e7:90:bd:3e:29:c0:92:81:ba:7b:a8:a8:1f:20:
1b:94:74:e2:7d:a2:82:b1:96:92:49:04:1c:19:6e:
2f:81:93:37:e6:e2:d5:18:27:32:08:b6:c9:2f:7f:
b5:00:2c:4b:a8:64:4f:06:02:b8:38:5a:d7:c3:4f:
51:c0:53:2c:82:8c:ed:47:2f:2c:d6:68:61:13:ae:
6e:c0:05:ec:b0:95:16:f4:33:24:d7:85:fe:24:dc:
e8:21:2f:a2:52:2d:09:8c:45:3f:dd:0a:9b:94:22:
0f:c2:f8:c1:12:ff:7a:9a:a6:27:27:77:5d:b6:e0:
2f:5f:7c:a0:b8:6e:1a:2c:3f:6e:67:e2:5e:c6:f4:
3f:e7:9e:87:04:03:f1:19:d0:9e:27:be:40:4e:19:
b7:59:30:12:33:8e:a5:3d:c5:57:96:63:7b:1c:e3:
76:38:79:dd:cc:85:55:28:76:86:7d:f3:7b:2e:bf:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:BD:53:0E:16:2F:C7:24:8B:A4:41:58:86:F7:3D:7E:A1:2B:2D
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:89:4e:34:2a:df:21:16:e5:c9:ff:44:d8:51:cd:19:96:
03:ab:4c:b9:ad:ef:51:58:31:e1:e9:2d:a0:3f:a4:e7:fb:14:
6d:dd:9f:e3:4f:aa:33:d4:c4:c4:a9:2f:74:63:f4:f8:12:e1:
93:0c:39:07:84:2b:29:ac:e6:a6:29:c0:a0:35:d1:12:22:00:
34:79:0e:b1:a1:c7:52:f6:4c:c9:fa:63:9f:0d:1b:e3:4f:bb:
eb:0e:0e:84:a9:15:46:28:b8:df:9c:68:88:4d:e9:13:1d:0a:
9b:8f:99:e5:4a:e2:0c:f1:3b:75:a7:8a:00:91:18:eb:0d:23:
d5:4e:2a:b1:f3:b2:12:04:db:1a:aa:d3:6b:cd:b9:2d:2a:cd:
df:35:39:f0:50:99:e5:e5:30:a2:c6:b2:3a:0c:cf:03:1f:84:
fe:7f:df:83:5a:f2:13:c3:af:de:26:14:28:5b:f6:c5:7a:4d:
ae:09:d8:d3:c9:be:e6:09:0b:86:fa:45:d6:95:9f:6e:9f:7c:
db:92:e2:19:b8:aa:60:fb:4a:59:a0:c2:a6:4f:d9:95:45:21:
77:50:ec:ed:56:a5:0a:cc:93:39:a0:8e:7d:94:f1:44:63:55:
87:6c:a5:45:26:8e:be:27:21:4f:8b:d5:26:94:a8:ad:4c:35:
a5:52:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:29:30 2026 by rpki-client