Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: QZEdCyeibhyF1I8UmTRtPtbqDWEE6kKPLXzcZwbN0gw=
Subject key identifier: 15:DF:1A:F2:8C:95:1A:44:B0:11:07:19:B2:99:4F:7F:35:74:D3:4B
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019CADFE54B567FCA8D089A1A2208367E8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0BDA
Signing time: Mon 02 Mar 2026 10:00:52 +0000
Manifest this update: Mon 02 Mar 2026 10:00:52 +0000
Manifest next update: Tue 03 Mar 2026 10:00:52 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: RiXm+W780Yk1qhp83X/ofYpcf+3iDJOqGZZGUZQ4sAg=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:54:b5:67:fc:a8:d0:89:a1:a2:20:83:67:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Mar 2 10:00:52 2026 GMT
Not After : Mar 3 10:00:52 2026 GMT
Subject: CN=15df1af28c951a44b0110719b2994f7f3574d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:13:85:44:3a:e1:25:ae:11:34:2e:06:d7:
99:90:24:93:70:0d:8c:5c:fd:30:a7:6c:c2:68:33:
72:41:8d:29:00:be:b3:41:ea:d6:87:c5:30:a7:54:
52:c8:5d:57:8c:3f:d1:a8:d9:e9:1b:d5:51:01:69:
6f:c9:25:63:56:53:a5:b3:7b:b3:83:05:88:33:93:
0c:66:a4:f8:bf:b2:1a:a7:19:9a:83:f1:f7:f8:af:
f7:a2:27:a6:26:64:57:05:73:17:d0:d8:3b:7c:ce:
8d:eb:2d:01:02:53:34:f7:e9:32:54:fd:fb:25:8d:
ed:8d:6c:4a:1d:11:75:c4:7f:69:69:d8:2a:58:5d:
d2:8c:bc:75:30:b7:01:07:cb:17:63:c9:42:c5:90:
01:01:f8:5b:b1:e3:64:ed:ac:e6:76:6f:12:35:84:
8c:71:04:d2:e6:dd:40:36:72:e3:7f:59:c0:e0:39:
57:9d:35:1c:9a:fb:c9:f8:f3:a4:65:39:a0:e1:3f:
9b:86:7e:50:8e:5c:cb:d7:87:cb:22:98:06:43:5c:
87:91:76:ba:11:ad:56:29:d8:6a:31:14:65:94:cf:
68:c1:59:5c:6a:77:e1:93:14:3d:f1:83:47:df:f4:
10:9f:c4:b2:bd:be:60:ea:6d:55:a5:05:5f:3c:37:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:1A:F2:8C:95:1A:44:B0:11:07:19:B2:99:4F:7F:35:74:D3:4B
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:75:af:33:56:45:e8:90:90:4c:dd:97:61:c9:37:82:c7:68:
8f:d0:26:e0:3d:df:87:0b:c3:7b:9e:51:fd:2d:48:ba:89:bf:
be:ae:71:4a:d0:2c:03:f1:73:ff:cd:e8:78:69:36:6c:33:ef:
a0:ae:49:0a:30:a8:7b:22:6d:8e:6b:9a:23:d5:67:a5:74:b7:
9c:b3:d1:79:84:37:d0:ba:99:88:51:cf:8d:cf:c2:a1:c8:09:
04:5a:36:7a:b2:d6:2b:78:3f:08:85:f1:2d:78:14:d2:75:e9:
51:bb:6c:d1:9d:0a:df:20:a4:5f:c2:6e:5e:f2:e8:43:1f:b6:
db:4e:95:b2:57:d9:80:1f:b3:40:2f:c0:5f:7e:b7:fe:f3:cf:
27:68:e3:80:8a:3d:8d:60:96:f8:61:74:86:db:0b:75:1d:76:
1a:fa:25:3b:27:09:79:73:3b:c0:33:8e:6d:ee:a0:17:33:93:
06:1d:96:30:2e:2e:bc:72:6f:2a:f8:91:2f:2d:6e:39:dd:32:
56:e3:f3:6b:77:5d:55:96:72:5f:56:7f:40:6e:9f:64:b6:e5:
df:4e:f6:05:28:23:7e:20:3e:08:12:c1:0c:7a:e2:e8:f7:78:
24:f8:4b:20:91:42:d6:9d:ce:76:76:f4:d6:16:4a:9d:4c:cd:
2e:e6:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:00 2026 by rpki-client