Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: twssMPB8fyxxAEN8TONznBMDq0EqJBEAzDjD2y2JbkU=
Subject key identifier: 4A:73:B9:F2:6A:23:45:48:9D:C7:A9:67:69:AA:AE:78:B1:17:60:D4
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019D9C2C7448391CEB47AAA7B2959D9A52E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0547
Signing time: Fri 17 Apr 2026 16:00:52 +0000
Manifest this update: Fri 17 Apr 2026 16:00:52 +0000
Manifest next update: Sat 18 Apr 2026 16:00:52 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: vdS2pwMHvl0oWIhALgCnlqfq6GY4ZqlZsGS//Uj2Tcg=)
2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:74:48:39:1c:eb:47:aa:a7:b2:95:9d:9a:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Apr 17 16:00:52 2026 GMT
Not After : Apr 18 16:00:52 2026 GMT
Subject: CN=4a73b9f26a2345489dc7a96769aaae78b11760d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:20:68:08:bc:42:0f:36:b7:5f:b3:6b:c8:
34:32:5e:de:b6:0e:76:5f:5f:e5:eb:b5:7e:01:b3:
c2:c7:b7:5f:db:56:0d:2a:64:d2:c9:a9:0a:b9:16:
4f:99:6d:d1:c2:06:0d:ee:4b:83:da:aa:32:df:e5:
de:df:aa:4a:5e:ed:1f:01:08:40:bf:db:97:54:66:
fb:93:0f:ec:22:6f:27:84:d1:46:69:8a:c9:1a:48:
7d:81:9f:be:03:3a:9a:c1:d2:0f:c6:c6:ce:97:eb:
e0:72:a5:32:82:1d:01:5e:db:97:8f:ab:ab:b1:af:
30:77:22:64:9d:77:af:0a:2d:97:b8:a0:52:ca:35:
aa:0a:78:71:9e:44:96:86:99:ce:fe:89:a2:d7:cd:
67:c1:46:ac:a8:f0:d9:68:99:7e:82:8c:0c:8e:c3:
ec:9d:3f:0e:8a:cc:53:30:17:fc:b7:c7:b1:6c:fc:
09:a4:09:48:08:59:9e:1b:fc:df:95:e3:4b:d9:f5:
7c:c7:7d:72:75:2a:b3:5d:b2:87:e3:ac:d8:fd:52:
2f:7d:69:29:43:64:b2:be:2a:7e:00:81:f4:47:16:
e1:a9:db:81:e4:98:51:35:9a:fa:eb:4c:48:29:19:
85:d2:3e:23:2f:f2:c5:59:f5:de:59:9a:d1:64:53:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:B9:F2:6A:23:45:48:9D:C7:A9:67:69:AA:AE:78:B1:17:60:D4
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e8:fe:75:52:d6:5e:75:dd:62:5c:88:07:55:57:cf:e2:32:
6c:6c:43:6f:22:1c:53:d4:82:3d:c2:a6:b5:26:71:fc:42:58:
9a:c3:e5:95:a8:7b:5b:df:3e:01:35:5e:1a:01:2d:ae:e7:bf:
a4:f4:81:aa:ba:dc:bf:ae:a2:36:c4:0d:51:94:3a:88:1b:90:
9a:4c:9e:a3:96:25:1b:2f:db:d7:f6:45:c0:fc:5a:17:58:2e:
a0:e4:15:c4:b8:93:09:d1:65:60:ee:e3:f4:b6:ad:a4:60:36:
12:e2:e5:98:3b:f1:14:c6:f2:d7:11:e8:ad:27:4a:26:8b:09:
ba:e4:f9:2d:c7:60:37:53:c4:18:b1:27:dd:b9:7b:63:c7:46:
cb:35:4d:70:91:1a:a4:98:5f:d7:20:f5:d9:a2:0d:08:8e:72:
02:76:10:7d:d0:88:39:87:3f:67:e6:c5:46:a2:3f:3c:1b:34:
8d:35:27:8f:eb:df:e4:2b:56:79:cd:39:4c:50:53:2f:e8:c8:
30:86:7b:a7:6f:6d:78:f2:dd:54:5f:77:fe:7d:eb:72:31:d5:
13:b8:b6:80:d8:97:a1:fe:88:92:64:ec:b6:79:00:83:b1:54:
b4:88:92:c6:03:24:a1:f0:96:56:57:42:17:74:0e:bb:7a:d7:
93:cb:9f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:16 2026 by rpki-client