Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: qZtIh+7YMpiOw0ihFdTutK1Qvatvv0qFIb46c9EFBB0=
Subject key identifier: 4C:A1:FA:34:EA:F6:D7:40:5D:96:4F:E0:37:70:9F:5E:61:A7:60:16
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019CAA589A893EC99F632CC02A36E8AD68B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: ej2k64Es+ymK7xnqOklz6Nx5AFM9W44/r6yfc0Dd7L4=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9a:89:3e:c9:9f:63:2c:c0:2a:36:e8:ad:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=4ca1fa34eaf6d7405d964fe037709f5e61a76016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:ca:94:60:4c:ce:93:d8:ed:5d:25:e0:bb:
a1:16:55:58:d3:ad:09:04:4d:d0:d7:f8:e3:a5:5f:
bc:c3:b7:30:80:4b:63:88:77:e8:2a:ab:39:a8:41:
46:c6:b2:ab:16:9d:f2:65:bb:33:7e:8c:38:bc:2a:
cb:aa:96:3b:fb:a1:7c:65:97:f3:93:5d:59:44:20:
05:c5:c6:bd:d3:9d:5d:eb:15:d5:33:1b:9e:49:b2:
4e:8e:46:11:10:a2:70:13:b2:a6:c6:d0:2b:91:ae:
27:1f:7a:eb:64:d5:a7:0b:da:d9:ed:53:33:97:50:
a0:6e:b4:ae:6e:73:de:03:e6:34:c7:cb:12:49:05:
d3:d3:9d:bb:9e:07:d2:f1:9d:9e:ce:cc:b4:dd:41:
66:7a:34:da:37:c7:a5:f4:8d:16:3e:aa:95:46:61:
d5:26:c6:77:27:ac:b4:7a:1b:00:e7:f2:4b:2e:dc:
c8:4e:e4:48:28:43:b7:cb:4e:06:de:35:09:7c:ea:
ba:37:7a:4d:aa:57:e7:59:ce:e0:0b:7f:4d:c1:0a:
a6:4e:84:8f:92:25:b8:0a:36:7a:b8:49:af:2d:59:
2a:07:76:8f:a8:de:dc:c5:2c:61:fc:f8:69:43:20:
ee:81:77:d1:81:90:9c:43:c6:17:6e:63:dc:cb:90:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:FA:34:EA:F6:D7:40:5D:96:4F:E0:37:70:9F:5E:61:A7:60:16
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:29:88:5a:ec:71:32:6d:57:61:a2:e7:84:20:bf:11:7c:
45:7c:3f:ce:54:fc:94:40:2e:5d:b4:c4:38:54:7a:b7:79:c0:
63:96:d9:8d:66:95:c1:3f:2a:8e:b0:05:7e:fa:78:52:90:d4:
bd:0f:2e:6d:cf:2b:b9:f3:e7:4b:54:36:a0:5d:2f:f9:7c:c6:
d4:be:a5:42:bc:64:4f:bb:be:17:05:f3:5a:76:98:eb:b0:a1:
7c:b2:c7:96:8b:09:37:6a:b8:b9:d0:dd:b6:c8:eb:60:96:19:
fe:f6:ad:11:fc:eb:1c:aa:37:09:2c:c3:27:74:65:6c:b7:e6:
ab:57:15:e9:27:ff:e7:10:7e:5f:74:4b:94:83:b9:8f:c1:4d:
d7:a8:34:0f:b7:f6:5b:f1:e8:f5:f8:f0:fb:1b:29:a8:9b:a9:
03:41:51:a8:9b:70:28:cf:f7:20:28:8b:58:21:29:4a:a7:99:
18:80:80:aa:e3:f9:10:5b:9a:84:b5:f7:c8:06:f7:f3:21:ef:
5a:8c:c1:e8:05:43:20:42:d9:41:9a:1b:94:1c:81:82:ae:2c:
05:1c:4b:86:9c:33:4b:4b:92:31:53:e7:99:ea:71:d4:92:ad:
82:4c:86:ca:1b:5c:7b:48:3b:e8:af:71:a4:98:c2:c8:83:15:
6a:42:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:30 2026 by rpki-client