Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: BF2JHbcT6sWmKXi4LQ7PRof1inbT8VE7Y1rtdyEEVE8=
Subject key identifier: 59:73:E4:62:20:6D:9F:2D:21:71:8D:CC:CD:B2:28:04:E7:2D:88:7C
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019CACB538AD959D348869737DA4DBDDA744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 04CB
Signing time: Mon 02 Mar 2026 04:01:23 +0000
Manifest this update: Mon 02 Mar 2026 04:01:23 +0000
Manifest next update: Tue 03 Mar 2026 04:01:23 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: ku3QmwY74Ynob9taN3WFJnAGuaGZ/No3cdulOp+KpLs=)
2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:38:ad:95:9d:34:88:69:73:7d:a4:db:dd:a7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Mar 2 04:01:23 2026 GMT
Not After : Mar 3 04:01:23 2026 GMT
Subject: CN=5973e462206d9f2d21718dcccdb22804e72d887c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:49:10:08:c7:a6:e5:5f:57:a7:21:39:f2:
b1:97:42:b7:97:c1:b8:09:8a:b3:20:cf:b3:0e:3d:
d3:a9:ce:3c:02:01:7b:a3:05:47:9a:26:de:94:9a:
be:81:5e:5f:ee:58:e5:7e:98:76:e5:0b:0e:0d:94:
34:8a:d2:08:ee:b5:d3:41:73:40:bf:e6:76:7c:c2:
b2:b7:98:aa:b6:86:46:5b:e3:ee:68:ac:e7:b4:8e:
bc:8d:55:52:50:65:d6:d9:1e:03:e3:dd:ba:95:02:
73:31:cd:b1:21:3c:31:33:82:e3:20:01:66:18:00:
9d:27:e2:aa:34:92:28:56:3a:13:7f:d7:42:7e:e1:
d1:36:42:9c:94:a1:1d:10:cf:be:9c:61:14:ae:97:
18:d0:e5:50:ab:7b:30:71:b6:67:b7:04:6e:5c:ee:
67:69:ad:8c:6c:61:18:e9:f6:61:c2:80:dc:fa:5a:
84:63:ed:e5:b5:a8:24:f0:c3:3e:18:98:b9:dc:29:
69:28:0c:43:ff:af:23:1f:82:33:64:f5:d0:ca:1c:
d2:62:e1:dc:68:84:35:78:0e:e9:62:16:9e:13:c4:
5d:3c:ec:04:cf:1c:14:74:14:c6:bd:37:54:f1:42:
b4:8e:4a:20:7a:d5:68:ce:04:39:b0:8e:c6:9a:cc:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:E4:62:20:6D:9F:2D:21:71:8D:CC:CD:B2:28:04:E7:2D:88:7C
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:b3:55:3c:8e:db:d5:86:50:9f:bd:ea:60:d1:80:3c:77:
ec:95:4f:a8:fe:ad:c2:14:fd:e9:66:4e:f7:59:da:63:0e:a0:
e5:ca:1a:3b:23:d8:99:7d:7d:dd:4a:e7:4f:dc:3e:b4:da:f1:
8c:09:9d:16:76:c3:fd:74:9a:ef:c0:85:44:e2:d0:9b:50:2e:
76:de:23:e7:b2:a3:0c:15:47:69:de:56:17:2d:36:b6:0a:bc:
42:0e:e0:e3:de:fd:d8:58:f2:e7:4e:22:ce:d2:eb:ad:42:51:
95:c6:41:65:92:a3:a5:64:85:47:82:3c:58:0c:89:9b:99:5e:
40:1e:c4:f7:40:17:91:7e:10:e2:49:af:13:a8:c3:4e:85:65:
d6:8e:4e:b3:14:32:15:d6:4b:0c:92:ce:fa:ab:8f:50:8d:f7:
cd:6d:e2:d9:8e:1e:45:51:76:2e:16:b0:4b:0c:f4:7b:4c:94:
2d:b2:8f:7d:a0:a6:19:0c:3b:78:82:99:dd:15:62:3a:cb:1f:
5c:a1:83:c3:2f:cb:a2:3b:c2:88:91:76:bb:0f:99:db:eb:e0:
a7:a1:f1:ea:df:69:97:96:2a:d3:d8:e8:f1:a6:c6:b3:69:b0:
56:41:51:54:0b:9b:6b:50:6d:7c:1d:98:0b:23:0e:f5:c8:83:
b8:2d:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:16 2026 by rpki-client