Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: Msf/NGa9elxDFLjUHkwZ5HEi+PqchSlxcUuuXs8qMSk=
Subject key identifier: 9C:D3:52:0B:E1:4E:12:D7:ED:8C:7E:80:A7:04:EE:31:53:3D:F0:32
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019D9AAC4B293281D878564ABF32A7A11085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0CD0
Signing time: Fri 17 Apr 2026 09:01:15 +0000
Manifest this update: Fri 17 Apr 2026 09:01:15 +0000
Manifest next update: Sat 18 Apr 2026 09:01:15 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: pQvBvWTBULOgwBGL55ILEfuyddGkvrQ2YoxyUXvn9M4=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:4b:29:32:81:d8:78:56:4a:bf:32:a7:a1:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Apr 17 09:01:15 2026 GMT
Not After : Apr 18 09:01:15 2026 GMT
Subject: CN=9cd3520be14e12d7ed8c7e80a704ee31533df032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:02:1e:70:f6:74:96:6a:41:7a:03:f6:56:
b8:2e:b3:8d:c0:68:2a:98:9b:94:50:34:69:2e:70:
80:26:2e:27:3d:32:47:02:e4:67:d1:ab:ee:96:5b:
17:25:fc:90:54:b8:65:87:60:99:38:34:30:b2:46:
51:06:31:a3:2d:59:d8:59:ec:d1:ca:62:bb:75:c7:
0b:54:3d:d6:8f:d8:5d:26:50:4d:b0:f4:05:de:8a:
7f:18:6b:b8:5b:99:e8:0d:d5:80:79:c9:fb:b5:25:
aa:49:58:37:95:db:6e:7d:03:a7:70:9c:00:c0:41:
7a:37:8b:a8:b0:b2:51:99:7e:d3:ff:9f:c5:07:5a:
75:15:8f:67:f4:83:9b:1c:65:e3:17:2c:30:77:49:
2a:06:b8:82:b5:b6:eb:5f:92:33:ec:2c:49:67:76:
b6:68:68:ac:8c:b2:92:28:42:44:c5:b0:95:96:5b:
1e:f5:1b:40:e4:66:94:bf:07:a7:30:7e:56:9b:11:
73:ea:a8:cd:84:d5:e5:2c:3b:38:59:2d:08:65:30:
ee:7a:ac:35:a4:a7:10:c6:a0:0c:54:6e:de:db:56:
ac:71:6f:28:59:ff:21:31:96:6e:6c:6b:e5:d5:72:
63:c3:13:45:61:f1:55:9a:64:80:fe:21:94:26:14:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:52:0B:E1:4E:12:D7:ED:8C:7E:80:A7:04:EE:31:53:3D:F0:32
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:5f:1f:c9:6c:a5:33:b7:b5:14:7c:98:ad:4d:09:bd:2d:
de:cf:cf:2c:ff:87:cc:9b:f9:bd:70:a9:38:63:b8:54:e3:ad:
5a:ae:36:c0:98:94:2d:0f:bc:7a:b9:8d:4d:3c:6e:18:73:93:
54:00:76:94:a4:ff:bb:80:09:31:3a:02:7b:6e:7a:8c:f1:fd:
26:57:00:56:47:3f:61:b5:6c:31:c0:77:c0:fb:79:a7:9c:c4:
32:5a:fd:85:d9:4e:13:a5:b5:b4:3a:fc:20:25:1e:62:7c:b2:
88:03:41:df:41:41:bb:0c:85:b8:b2:bf:9e:b9:98:dc:30:d2:
93:db:97:3b:5b:fc:03:0b:c3:90:4f:e2:a2:e1:1d:0d:21:ad:
31:c8:3e:96:09:71:fb:21:5f:5c:c1:97:d9:87:f3:81:02:1c:
a4:53:b0:a2:be:5c:4c:42:16:e6:30:d3:fd:01:9f:30:1a:96:
65:f8:01:83:e1:b6:d6:0f:bb:9f:07:6b:9c:b1:e6:fb:b3:46:
97:45:5a:f6:27:cf:21:8c:e0:e9:7f:bb:63:5c:ff:a9:82:36:
da:5e:43:0e:39:89:4a:b5:c1:80:a2:58:91:73:a5:00:78:c3:
7f:a0:40:ec:96:d9:52:1d:16:ea:df:ff:1a:2f:23:a3:3b:ef:
23:02:ee:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arEspMoHYeFZKvzKnoRCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx
NTRhMWEwHhcNMjYwNDE3MDkwMTE1WhcNMjYwNDE4MDkwMTE1WjAzMTEwLwYDVQQD
Eyg5Y2QzNTIwYmUxNGUxMmQ3ZWQ4YzdlODBhNzA0ZWUzMTUzM2RmMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnkCHnD2dJZqQXoD9la4LrONwGgq
mJuUUDRpLnCAJi4nPTJHAuRn0avullsXJfyQVLhlh2CZODQwskZRBjGjLVnYWezR
ymK7dccLVD3Wj9hdJlBNsPQF3op/GGu4W5noDdWAecn7tSWqSVg3ldtufQOncJwA
wEF6N4uosLJRmX7T/5/FB1p1FY9n9IObHGXjFywwd0kqBriCtbbrX5Iz7CxJZ3a2
aGisjLKSKEJExbCVllse9RtA5GaUvwenMH5WmxFz6qjNhNXlLDs4WS0IZTDueqw1
pKcQxqAMVG7e21ascW8oWf8hMZZubGvl1XJjwxNFYfFVmmSA/iGUJhSJ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzTUgvhThLX7Yx+gKcE7jFTPfAyMB8GA1UdIwQY
MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt
ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1
LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqhfH8ls
pTO3tRR8mK1NCb0t3s/PLP+HzJv5vXCpOGO4VOOtWq42wJiULQ+8ermNTTxuGHOT
VAB2lKT/u4AJMToCe256jPH9JlcAVkc/YbVsMcB3wPt5p5zEMlr9hdlOE6W1tDr8
ICUeYnyyiANB30FBuwyFuLK/nrmY3DDSk9uXO1v8AwvDkE/iouEdDSGtMcg+lglx
+yFfXMGX2YfzgQIcpFOwor5cTEIW5jDT/QGfMBqWZfgBg+G21g+7nwdrnLHm+7NG
l0Va9ifPIYzg6X+7Y1z/qYI22l5DDjmJSrXBgKJYkXOlAHjDf6BA7JbZUh0W6t//
Gi8jozvvIwLu5A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:06 2026 by rpki-client