Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: AS8BCx3Uf2aremynVbJcnltXltAvcBSnoxWF9/ksoLI=
Subject key identifier: 3C:E6:DA:DF:8F:0B:A5:51:38:B2:27:54:7B:62:5A:C3:0D:93:C7:2E
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019D9D76300AEF57D19DF9EFBD186C60AB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0C56
Signing time: Fri 17 Apr 2026 22:01:01 +0000
Manifest this update: Fri 17 Apr 2026 22:01:01 +0000
Manifest next update: Sat 18 Apr 2026 22:01:01 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: pVGaox/B5aHUMph2Y1IuDmZNW/GMVpEs8Sw3MZdPFeE=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:30:0a:ef:57:d1:9d:f9:ef:bd:18:6c:60:ab:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Apr 17 22:01:01 2026 GMT
Not After : Apr 18 22:01:01 2026 GMT
Subject: CN=3ce6dadf8f0ba55138b227547b625ac30d93c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:c9:23:65:e1:04:dd:47:93:d3:71:39:0f:
75:a1:19:65:85:ae:75:0d:d3:d0:37:e5:f4:bb:c8:
3a:51:f3:cf:79:11:f1:28:e7:a7:88:bf:5f:bf:eb:
c2:2b:d9:0c:40:d0:ff:39:0a:01:f4:41:58:32:ea:
77:ca:b0:56:05:f3:69:00:0f:0b:3d:90:72:cb:41:
f3:2e:bd:d3:41:1a:2d:40:ed:0e:54:82:c1:3e:35:
ed:80:ae:ed:b1:b8:61:7f:7e:fc:97:37:6e:60:46:
4e:44:41:0b:dd:86:d0:32:23:c9:cd:a1:23:bf:ad:
e1:cb:77:01:bb:08:62:a0:86:c9:88:82:ea:59:82:
af:0a:7f:6b:2f:ef:37:f5:33:81:d5:21:78:a1:10:
be:52:c7:d8:0f:09:c2:60:5e:0b:c4:5f:29:37:65:
85:72:67:27:de:aa:d8:94:90:ed:56:5b:89:a2:7b:
a2:54:68:d3:a7:b0:a4:bb:50:0c:61:55:b0:70:3c:
e2:cc:8d:c8:f0:ce:60:1e:9b:7c:53:6a:ba:3e:d3:
39:56:1d:ec:c0:66:3b:2a:89:b7:6a:71:d6:5a:de:
96:eb:41:a2:a6:cf:14:bd:67:63:d2:5e:f6:52:08:
aa:4c:43:36:d9:58:7e:d6:88:4d:98:67:57:8b:92:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E6:DA:DF:8F:0B:A5:51:38:B2:27:54:7B:62:5A:C3:0D:93:C7:2E
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bd:e0:83:0f:46:bb:03:11:5a:dc:d6:f4:67:8a:73:35:a8:
3b:6d:ef:13:5b:79:05:20:ba:fd:6f:21:15:7c:92:e7:cb:b0:
31:79:fb:e1:ac:4f:93:33:43:a0:a6:ec:9d:a6:7c:92:6e:3b:
9b:58:d7:60:47:0d:45:bc:99:17:97:52:be:d2:b2:cb:68:ce:
f8:31:f1:29:b1:c9:77:a3:89:ea:06:a3:82:3a:5d:9e:ef:52:
f4:c1:d2:db:f6:66:7e:f8:70:be:aa:2b:40:80:62:05:e6:91:
f6:40:73:5a:9d:bb:6c:fb:53:2c:c8:53:19:70:f3:4a:f9:b1:
6d:7d:69:0d:bb:91:e2:34:6e:52:44:ef:ed:fb:dc:7f:ab:3c:
08:e5:09:2f:3f:6e:9a:7f:b6:86:99:4b:67:21:f7:c7:75:a8:
d8:4d:2e:24:f7:62:c9:51:95:31:57:62:81:8f:4f:4e:c7:20:
e2:95:b4:a2:56:55:1c:bb:15:8f:d9:d8:11:65:9d:2d:f9:b4:
33:9e:25:af:1b:02:f8:4a:e6:e1:b1:a3:0c:c1:af:b5:99:2e:
e8:20:cf:58:32:c0:95:df:88:6b:cd:1b:27:f4:9b:e1:50:16:
20:7f:8e:42:cc:67:a3:f4:dc:3b:ba:cc:31:17:ad:74:31:48:
d4:48:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:29 2026 by rpki-client