Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: XDXHn4VrMd+KM5LTILXSvKhURIk2Kto/kseqX5jsRnM=
Subject key identifier: F5:19:B3:B6:6F:E8:29:2F:A2:36:2C:19:D2:9A:39:E9:C8:D0:6B:C4
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019D97E20BD2AE33FF219DD9DEAAC9D72651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 20:01:06 +0000
Manifest this update: Thu 16 Apr 2026 20:01:06 +0000
Manifest next update: Fri 17 Apr 2026 20:01:06 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: J+Wb2iog4GMNz/5b7rg8dG9Kpt+7ZG5Fyz4e/y7r9mo=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:0b:d2:ae:33:ff:21:9d:d9:de:aa:c9:d7:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Apr 16 20:01:06 2026 GMT
Not After : Apr 17 20:01:06 2026 GMT
Subject: CN=f519b3b66fe8292fa2362c19d29a39e9c8d06bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:c6:54:90:2c:39:9c:88:05:02:78:34:fe:
a7:bd:c6:5d:7b:b8:31:7d:6f:a6:cf:56:f5:7e:90:
2d:c8:61:b9:49:cc:b9:00:5d:53:80:ee:fc:9f:27:
d3:3c:a1:da:23:ae:c6:b7:3a:3d:51:87:79:a5:e1:
1a:ea:89:1e:64:30:1f:1a:8f:ab:3d:5b:00:6f:d5:
99:1e:8c:76:09:7c:0a:aa:b5:f0:0e:0f:e8:65:6a:
65:ef:4b:97:92:68:37:e2:22:ca:a5:fd:df:97:61:
f7:90:47:e9:b7:50:22:29:1c:3a:ec:d1:48:00:5f:
4c:22:14:1c:6f:96:c1:b2:ac:99:10:c9:3e:3b:66:
c7:04:53:20:3b:2d:94:8f:e3:4a:b0:23:4a:06:22:
c2:9c:6e:1e:ef:e7:54:08:23:2f:f8:b0:fc:f9:f0:
52:ed:c1:af:69:0e:21:be:12:c0:cf:ad:33:b1:68:
6a:36:3f:2b:ea:65:ef:e2:96:24:75:a8:63:43:46:
38:bf:a8:84:69:31:58:7a:51:58:60:aa:f9:a0:57:
00:c0:54:2a:e3:ad:00:58:d4:44:d7:1f:e9:60:e9:
c5:51:15:00:6b:28:af:76:e2:0e:b8:80:e4:75:cc:
39:6c:4a:60:0d:b2:76:8d:ec:c3:e7:32:b8:17:88:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:19:B3:B6:6F:E8:29:2F:A2:36:2C:19:D2:9A:39:E9:C8:D0:6B:C4
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:83:7a:96:3c:4a:a6:fc:c5:5b:28:69:7c:2b:21:a7:a3:
84:47:08:24:a4:0f:b2:a7:37:53:a4:4e:e0:1e:03:9c:1e:22:
2d:d6:58:e6:24:2a:33:91:a9:87:d1:95:03:86:e3:cd:bf:4d:
67:1b:0f:55:4e:27:73:c9:b0:92:dd:89:56:d9:a7:03:99:3c:
48:2f:92:be:6e:c0:20:39:13:34:a1:ff:6a:e7:e5:bc:5f:a9:
29:2b:73:3e:c4:38:07:cf:02:4f:2f:08:26:03:26:8a:da:da:
38:21:e5:ef:11:69:cb:b0:40:73:a1:d4:5b:23:71:3f:63:43:
77:2c:dd:6c:a1:12:b3:56:cd:ad:77:a6:a0:41:d0:30:46:78:
2e:fa:9f:99:02:e2:ba:89:7d:c1:8a:f4:28:06:7c:5e:b9:1e:
02:e3:d8:56:97:81:87:12:04:9e:e0:d0:e8:cb:ab:7b:7f:0d:
a0:0a:00:f3:6b:b7:86:02:d9:88:79:cd:97:bb:e9:78:43:fc:
82:1d:eb:11:67:d0:60:8a:3d:aa:3b:fe:6f:1b:b5:8d:05:b6:
81:25:17:39:7b:6f:36:c1:cd:e9:da:aa:c4:7e:b3:f5:f9:b7:
2b:2f:94:42:d1:a9:61:9b:b2:e4:2c:ef:03:6b:b1:d3:02:5c:
ee:6b:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:02 2026 by rpki-client