Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: Z0UaP0ffWHM/Cpe8Zt5O2D69GmIsCFE0oAOsA8XnR9I=
Subject key identifier: 1F:EA:1C:6A:74:55:94:D7:32:88:CA:C7:62:D4:73:18:C5:CE:39:1E
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 01A0C2FB5DE62AA7564FF8716A74606FF0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 08:00:48 +0000
Manifest this update: Mon 21 Sep 2026 08:00:48 +0000
Manifest next update: Tue 22 Sep 2026 08:00:48 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: hcvTOIQPIrdzKG6G1TAmFImW3XEwjEUlEQZXKGaEGqQ=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:5d:e6:2a:a7:56:4f:f8:71:6a:74:60:6f:f0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Sep 21 08:00:48 2026 GMT
Not After : Sep 22 08:00:48 2026 GMT
Subject: CN=1fea1c6a745594d73288cac762d47318c5ce391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:2f:35:35:8d:3e:5c:e4:8c:cb:0a:dc:9d:
d4:7a:a4:4d:07:75:d1:c2:6b:aa:23:1e:5a:1c:c4:
e7:85:75:ca:1d:15:c5:59:01:a7:a2:d3:94:87:a6:
e5:7c:55:97:29:b3:75:2f:aa:3f:be:4e:f9:c7:b8:
a6:db:c4:de:4b:1c:ae:92:1b:ab:5a:e6:be:4a:7e:
2c:73:bf:51:3a:10:70:4f:bd:8c:10:6c:29:12:e8:
05:51:c9:5c:f9:c0:71:ad:2c:2a:b5:95:f4:cb:f1:
53:3b:51:0f:9b:d9:02:36:c0:95:6c:c3:f1:7d:e4:
4d:57:9d:8c:d0:e3:0f:8d:08:9d:2a:24:ce:86:2c:
e4:11:7a:7b:16:53:f7:3b:da:e9:fa:2d:bf:ba:49:
4c:8f:6d:88:79:91:89:e4:f6:aa:ff:80:81:f1:2c:
28:29:cc:1a:58:32:e6:4e:75:6f:3b:6e:fe:1f:fe:
fc:cc:fa:8a:d4:47:eb:25:39:49:e3:ea:4e:96:f9:
fd:c7:14:18:7c:d1:71:70:48:80:9a:2d:d9:77:60:
f5:d1:a0:f0:81:4d:66:11:45:39:8f:3b:03:cc:ae:
f9:ba:57:e0:f4:cf:2c:bc:fc:cf:0b:cd:f4:d4:52:
1c:a0:0f:ac:9c:97:10:e3:43:9e:41:e4:4a:ea:ce:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:1C:6A:74:55:94:D7:32:88:CA:C7:62:D4:73:18:C5:CE:39:1E
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:78:e9:fb:bf:9a:56:ae:18:2c:1b:98:a2:0d:af:71:e3:
62:b1:12:e6:69:4d:b0:23:cf:15:c7:26:95:33:4e:92:97:4b:
e2:05:5b:67:ca:6a:ce:e6:b3:6b:17:a9:20:8b:8e:cc:0d:46:
3e:27:eb:9e:0b:46:7d:78:bb:3e:af:02:a2:41:86:47:12:d7:
b1:35:fa:7f:47:84:cc:7e:3f:3e:0f:87:a2:ea:36:d9:eb:1e:
2d:0e:d0:a3:bb:a9:0f:62:c3:77:45:40:83:d5:3b:e9:d8:5d:
12:cd:d6:25:ed:b6:e9:b7:28:41:9c:08:36:6e:56:be:98:70:
e6:6e:1d:58:8b:10:e7:f1:19:ef:bd:37:48:57:76:a6:e1:7b:
eb:ac:71:d6:e5:ba:39:b8:ad:2e:04:7d:8b:63:ac:65:83:6a:
9c:0b:99:75:71:8a:1e:a4:26:81:87:43:2a:15:64:6b:76:15:
1a:02:d3:b4:a8:8b:47:09:ca:75:46:0a:42:de:6c:c8:23:c7:
05:87:8e:d5:a4:2d:f2:9d:ac:25:ad:6f:9a:07:e3:f7:7d:ab:
5b:8d:2d:1e:35:84:83:5d:43:85:bc:31:d2:b5:6c:16:87:cb:
8a:cf:c2:dc:15:c0:f2:b2:64:ce:39:9c:f4:e5:cd:c9:3a:e7:
3c:c1:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:31:17 2026 by rpki-client