Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: PyJlna2zKUJpo5SBHbPVid4ASX15nGWhw1jirsuANnE=
Subject key identifier: 23:96:9B:C2:29:D6:92:31:11:9D:8F:1E:05:8D:53:80:A8:C3:4B:33
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019FAABE7E491429973944237160012698FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0D66
Signing time: Tue 28 Jul 2026 22:00:38 +0000
Manifest this update: Tue 28 Jul 2026 22:00:38 +0000
Manifest next update: Wed 29 Jul 2026 22:00:38 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: WVkzhRwXgzP2hqqWfSySoSexcxZTVOp1uMGQOAawltk=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:7e:49:14:29:97:39:44:23:71:60:01:26:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Jul 28 22:00:38 2026 GMT
Not After : Jul 29 22:00:38 2026 GMT
Subject: CN=23969bc229d69231119d8f1e058d5380a8c34b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:d1:f3:fc:ba:fb:ee:32:33:26:d8:2b:85:
e3:5f:8c:cf:43:11:a8:16:1e:0c:b6:fd:6e:7d:0d:
60:fb:2d:d1:c7:d5:09:63:47:fc:c8:f7:4d:ca:23:
41:7b:8b:19:7d:55:2a:ab:d0:36:df:fe:c5:47:fc:
fc:43:75:33:ab:ca:ef:55:df:a9:0d:3d:06:da:e0:
ee:d9:76:b6:cf:17:19:2f:86:bb:51:a3:96:67:78:
24:77:af:ca:94:2b:ab:de:e0:50:e4:68:4c:ca:29:
05:cf:ae:b2:da:21:b4:c9:e0:87:fd:9e:4e:9d:16:
d4:ff:c4:26:0e:6c:4e:29:91:ef:0f:aa:d4:d4:b3:
f2:df:00:2d:8d:9d:a5:40:3d:80:ad:dd:5f:10:d3:
5c:d6:e2:21:c4:93:33:21:80:85:ee:1b:cb:4d:b5:
1d:e3:e3:57:1c:d7:8e:f7:86:15:9f:45:4e:9b:54:
53:4e:77:36:f1:f9:4f:83:1c:16:37:16:7f:90:7b:
fe:50:cf:26:71:7b:3c:ab:cc:24:b1:fa:3e:0a:9e:
61:b3:53:75:d3:60:7d:09:60:b0:63:5c:9e:32:96:
a6:2f:de:0f:3f:ac:6f:c2:d6:d9:f0:86:a5:a2:4a:
0d:65:b7:f7:a6:d8:3e:7b:d3:bc:0e:53:07:f7:52:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:9B:C2:29:D6:92:31:11:9D:8F:1E:05:8D:53:80:A8:C3:4B:33
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:42:a7:8b:3c:ad:e0:96:5e:2d:b0:91:c8:ce:de:65:44:ec:
28:d9:da:0f:c1:f4:6f:d3:86:9d:77:bf:12:e1:e7:30:e4:28:
70:59:14:b0:7e:e0:73:f3:15:d6:3c:0a:3e:90:85:8c:0d:1a:
5a:82:77:41:30:75:23:51:28:c0:e8:9b:87:76:11:ca:39:50:
01:d1:71:f9:39:11:c7:e7:07:0c:e8:d2:8f:24:6e:11:a3:b7:
56:1b:7c:1b:02:8e:59:2b:24:bd:e6:a7:d0:9d:3a:26:06:7c:
68:5c:84:80:38:0d:41:b5:c6:37:e0:e5:c8:0f:07:5a:95:53:
64:43:4b:90:5b:4d:04:a7:9a:b5:62:49:e9:d5:dd:ce:f6:43:
24:e6:6c:13:19:4e:74:34:c3:df:54:5e:68:d0:f1:cc:7a:4b:
16:94:f1:32:49:96:fa:28:e1:49:50:99:2b:d2:75:d7:f0:07:
aa:60:cd:9d:e7:fd:7c:bf:69:1b:31:06:56:35:df:a1:c9:1e:
ab:2b:47:5a:6e:15:cf:4f:33:42:45:a0:cb:a5:6c:f3:de:ed:
b3:a4:83:ac:a1:b7:8a:9f:e3:90:29:df:bb:db:b5:d1:f4:96:
49:71:46:ec:7c:c9:f7:68:e0:74:ca:f6:ac:d3:21:a9:3b:a5:
ba:09:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:46 2026 by rpki-client