Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: 4ayJ9xESOIC8+qQUCCuMVN0x9tVE18g5clAqWllC3HI=
Subject key identifier: 69:90:0D:DC:61:9E:EE:70:0F:D5:7D:AA:5D:F9:09:2E:5F:73:97:90
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019EBD6C608913F498FAD7C5F23AD6DE9ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 195D
Signing time: Fri 12 Jun 2026 20:00:56 +0000
Manifest this update: Fri 12 Jun 2026 20:00:56 +0000
Manifest next update: Sat 13 Jun 2026 20:00:56 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: 5eFfZBa8Hs1RKYNWZjwEOfwcrvnAOVNAUrV7BHUQD74=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6c:60:89:13:f4:98:fa:d7:c5:f2:3a:d6:de:9a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Jun 12 20:00:56 2026 GMT
Not After : Jun 13 20:00:56 2026 GMT
Subject: CN=69900ddc619eee700fd57daa5df9092e5f739790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:1a:1c:b0:28:7c:9b:67:10:4c:fc:30:31:
34:85:21:9c:d5:ee:1e:61:4e:29:8e:4f:2e:9d:71:
4c:35:d3:2b:4f:49:ad:b1:15:84:77:37:4f:26:bc:
e5:60:3d:62:3a:50:7b:fc:23:3b:21:9a:0c:cd:26:
2d:81:18:2c:b8:d3:36:f8:39:47:93:38:e6:b6:1a:
0d:be:4f:e2:03:f1:f7:08:28:2c:17:84:da:16:d4:
62:ec:cb:b1:15:35:0f:94:67:25:e5:c1:5e:45:00:
fa:91:7b:61:66:9c:a7:cf:07:e5:38:24:80:63:22:
25:da:64:0a:b8:eb:5c:50:a5:71:a0:b9:ff:65:bc:
bf:65:db:0d:26:d4:21:de:2d:03:59:f8:a9:5d:71:
8a:fd:4d:6e:18:da:5c:34:70:79:6c:94:89:5a:94:
9b:7f:21:67:29:6e:bb:b1:a8:f3:95:19:79:6c:8c:
a0:55:6b:c2:9d:d6:77:f1:e2:5a:f1:d2:fb:0a:48:
0e:82:e4:7f:a2:3d:d5:d5:a1:18:89:82:d8:89:37:
2c:20:5a:27:1b:28:ec:d2:17:1d:e7:0b:df:e9:c7:
ed:b4:37:30:6c:d3:7f:c1:8e:c1:0a:3c:5c:9d:da:
30:d5:21:48:85:23:55:3a:86:49:90:ea:8b:9e:21:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:90:0D:DC:61:9E:EE:70:0F:D5:7D:AA:5D:F9:09:2E:5F:73:97:90
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d6:d9:b0:fc:4a:d7:a8:4f:5c:8b:92:a5:30:c5:3d:bf:b0:
92:ac:f5:8e:ba:e6:7e:23:47:c8:e0:7c:c8:a3:2f:c6:92:70:
42:c3:bd:cd:26:ab:0a:63:ae:0c:cb:5a:8c:2f:78:95:05:4e:
ab:b3:13:15:fb:fd:f5:38:46:4b:99:5a:97:13:cc:60:88:c0:
6e:43:70:60:37:8a:2e:0c:d0:9c:94:46:1e:99:6e:25:dc:c6:
16:ff:c1:2e:8c:07:10:09:2c:ce:96:ae:cd:84:4a:33:42:37:
ca:82:7a:91:3e:26:e3:08:9b:a6:ae:1f:8c:fc:77:45:13:35:
42:12:bc:52:31:d8:19:f1:80:d0:03:3a:c3:e9:ab:7d:d6:c7:
b7:07:f9:68:22:97:8b:9d:43:c0:15:e6:37:64:f3:f5:d5:b2:
86:d6:c6:9e:10:5a:47:38:c6:cc:e4:97:f3:5a:4a:6d:92:de:
b2:1a:a0:bd:c9:3c:70:76:dc:97:86:ee:c1:c4:50:51:71:0d:
d1:82:08:e7:b1:e3:73:35:e3:e1:15:8e:a6:bc:5f:c4:5c:2c:
83:a5:41:f9:73:f4:a0:1d:61:0e:2f:27:8f:5a:d7:5b:0b:f0:
99:78:2b:e5:5c:f2:03:b8:22:ad:75:4b:7e:cb:3d:98:ec:df:
f3:8f:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:33 2026 by rpki-client