Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: vxrSyZIFNtsUsGzWNc03YwfIf540LM/vIK3CHD8NIAY=
Subject key identifier: D4:E6:93:EF:DD:65:AD:9E:30:8E:73:28:56:7E:E6:DE:84:25:52:FF
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019FAAF60430AD7FCB685FE4BE2B69559030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:01:17 +0000
Manifest this update: Tue 28 Jul 2026 23:01:17 +0000
Manifest next update: Wed 29 Jul 2026 23:01:17 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: O8Q164DwW+VB176tj2/L2Z+kmHtpC4hzbjgdeODm4x0=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:04:30:ad:7f:cb:68:5f:e4:be:2b:69:55:90:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Jul 28 23:01:17 2026 GMT
Not After : Jul 29 23:01:17 2026 GMT
Subject: CN=d4e693efdd65ad9e308e7328567ee6de842552ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:96:17:20:29:f3:77:a5:f4:2a:43:c5:9e:
39:ce:d2:c6:bf:64:9c:0f:d5:a6:a6:b5:02:7d:97:
68:e1:46:68:7f:f4:a8:28:fa:35:4a:62:24:10:e6:
90:9a:b8:da:fb:89:13:2d:4b:8f:70:3a:de:45:4d:
fa:82:eb:f1:f3:d8:ee:78:4c:52:67:0e:0d:da:58:
8d:78:7d:21:83:78:ab:63:b0:aa:15:10:6e:69:d4:
02:6e:e3:a5:2f:22:75:6d:a3:e9:14:19:ae:d7:24:
3a:55:9e:2f:ca:1c:45:2f:be:ac:78:f3:ed:a2:4a:
19:43:16:cd:42:83:62:3f:02:37:08:85:44:ba:8b:
73:71:3a:29:21:ed:64:ae:7f:96:00:6e:38:fa:e1:
97:eb:95:9c:31:4e:ca:2c:8c:a4:c3:15:8d:99:fe:
73:bf:3d:b1:a0:5c:a9:61:dd:bb:6e:72:60:e8:cf:
ba:c9:b6:0f:f5:99:0d:95:96:e6:cc:e5:da:7c:ab:
9a:d0:b6:2e:3e:92:81:99:dc:e1:87:33:cb:08:18:
05:fb:c4:2e:7b:76:2a:ce:3b:17:c6:9c:94:fa:bf:
fc:be:f1:18:e5:7b:ac:90:df:fa:6e:3b:d4:cf:76:
f6:84:02:3d:40:2a:8e:3a:8b:40:cf:52:d0:79:fc:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:93:EF:DD:65:AD:9E:30:8E:73:28:56:7E:E6:DE:84:25:52:FF
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:55:59:44:4d:86:e3:02:68:83:d4:18:e1:52:af:d2:5c:
1e:73:43:61:67:19:2e:52:5d:22:a6:d3:25:28:5d:4b:01:8d:
cc:30:78:0e:d0:c3:83:ca:8e:3a:d2:bc:a1:dc:77:0c:50:93:
d1:60:6d:76:96:1b:7b:6d:ce:a5:ee:22:38:46:af:ce:24:59:
6d:0f:ac:d5:66:16:eb:93:99:86:d4:99:2c:66:92:70:e9:f7:
4c:6a:fe:9a:4c:33:7d:57:12:29:f9:14:67:f2:8f:c1:01:0f:
09:20:5c:22:f3:81:4e:ab:5c:de:7e:90:a4:c8:fb:6b:a3:1c:
38:00:3d:f9:a2:7d:cd:08:40:96:32:d2:bf:78:8d:ec:b4:a2:
d9:3d:3a:32:cf:df:6c:bc:ea:ed:1d:b5:9d:ea:6f:3e:0b:97:
7b:7f:3d:34:29:f5:35:5a:7f:bf:cd:9d:09:92:46:5a:3d:e2:
98:82:c0:4d:5a:a8:2d:7e:9f:05:b3:dc:c6:fe:bb:f4:fe:f9:
bb:de:90:47:e5:31:9b:c7:bd:a7:05:e6:6a:56:76:91:6e:8a:
e0:72:7e:2d:6d:f9:36:3b:83:9f:7e:04:6f:7d:35:e1:31:60:
80:8e:52:06:94:43:55:de:a1:30:c7:0b:20:e3:4b:be:ca:24:
9d:d3:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:05:18 2026 by rpki-client