Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: RUxqKWJs+cPlgUcbIgsAk1+EUgKYkREXMPi9+DjML4I=
Subject key identifier: 77:C0:24:C5:CB:37:12:61:02:57:6E:5D:28:51:98:F5:FE:3C:6D:00
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 01A0DCF2E274EBDE2F93AD63D423049C5BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0E80
Signing time: Sat 26 Sep 2026 09:01:40 +0000
Manifest this update: Sat 26 Sep 2026 09:01:40 +0000
Manifest next update: Sun 27 Sep 2026 09:01:40 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: ozlsM50XmrbsClyHav9+QIml5961Gk6MvvgsBHxqbW8=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:e2:74:eb:de:2f:93:ad:63:d4:23:04:9c:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Sep 26 09:01:40 2026 GMT
Not After : Sep 27 09:01:40 2026 GMT
Subject: CN=77c024c5cb37126102576e5d285198f5fe3c6d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:e6:70:86:5a:20:21:db:b1:b9:00:bc:5e:
d3:78:d6:12:db:0f:96:ed:5c:80:a3:4c:2b:6e:5a:
56:d7:0a:b2:67:46:33:46:2a:a6:17:06:47:68:d8:
55:86:b8:d7:4e:43:9f:05:e0:6d:54:05:ec:79:2b:
05:30:ad:82:14:83:65:d9:56:7d:c9:ea:27:50:73:
53:27:94:83:5c:84:d0:71:11:8e:47:ba:c3:40:a0:
c5:f6:b2:b9:78:23:9c:ad:70:a0:23:c1:1d:b2:14:
e9:92:a0:2f:e2:d4:1d:06:ce:8a:f1:39:db:50:e4:
b5:4c:6c:02:9a:52:2b:57:54:c6:07:e8:1d:75:c9:
9e:c3:6b:8b:64:86:f3:58:27:79:c1:e5:5c:8c:82:
a6:90:bd:8e:ff:2d:1e:88:ea:78:b5:2b:9c:91:8b:
6d:d9:49:f9:fe:91:66:b2:9d:5d:ad:28:21:b1:15:
2c:12:dc:bd:2d:96:6a:b3:d0:b2:ae:d6:b3:08:95:
0a:01:67:80:38:0b:bb:18:b2:85:cd:cf:07:aa:8e:
b3:95:85:cf:60:51:16:16:9a:e4:1a:aa:a5:ef:12:
c9:ed:3b:8f:42:b5:b5:f9:fe:ef:c5:a8:34:bd:80:
d1:4f:25:ce:af:fb:a3:9c:78:d8:69:0e:f6:ec:ff:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C0:24:C5:CB:37:12:61:02:57:6E:5D:28:51:98:F5:FE:3C:6D:00
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:27:e9:5b:6a:0d:05:09:00:f8:e1:e0:ca:66:13:a1:02:d2:
43:1b:9c:63:e4:df:c6:26:ea:02:99:36:bd:dd:f6:12:81:d9:
26:08:d1:aa:0c:b0:cc:af:dc:0f:c6:c4:0d:e0:25:95:ee:51:
eb:27:47:c8:c1:3d:f9:80:bc:10:14:e4:80:d2:3d:72:32:f4:
26:86:51:33:7f:41:d9:f2:14:34:fc:42:22:6e:dc:59:02:fc:
d0:d9:67:dc:ce:6a:12:d7:6b:4d:38:d6:41:14:cd:f4:43:b6:
f4:e2:e5:7c:b8:fd:73:ae:84:db:f7:53:67:77:06:60:84:29:
42:a3:18:8d:81:3b:fc:66:2b:1d:1a:35:76:1e:0d:93:0e:d7:
a0:0b:e0:fe:d1:09:e4:59:ab:f5:4b:be:8f:c7:68:31:80:fc:
4c:47:5a:3d:20:b4:f5:7e:08:c7:f0:c6:77:92:f4:4c:61:64:
bf:87:7f:9d:e3:d8:f6:df:83:8c:0b:ea:56:7b:0f:30:09:79:
1e:16:61:7a:93:d4:45:e4:4d:f7:12:4f:f0:bb:2b:a5:5b:87:
4b:9e:52:27:b5:40:97:5b:9e:ba:a8:db:ab:8e:e0:a7:0a:66:
94:89:ab:8f:37:4c:23:cf:45:c6:c6:2a:a2:de:99:9f:10:1d:
e1:8c:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:47:11 2026 by rpki-client