Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: HDzP9bYcjJ8XITnzZFPBtJmDaoaJuVddvNb3TbWqNaE=
Subject key identifier: BE:7F:02:9B:E6:06:DA:24:8E:75:F7:92:5D:67:9B:77:F5:F0:7B:13
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 01A0C2C4266277DBC9285DB73ACB68AC1C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0752
Signing time: Mon 21 Sep 2026 07:00:29 +0000
Manifest this update: Mon 21 Sep 2026 07:00:29 +0000
Manifest next update: Tue 22 Sep 2026 07:00:29 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: 0P+KBuRp3MdHzUeCiGpItVao5H2qgeL3d4cGrSvZ79Y=)
2: XBji1wvFGdJSRKGHAuv-z87ZKv0.roa (hash: +vvqUnTon4CrLAZnScSQr1zxyNsLsp1x+AMPRSFSlEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:26:62:77:db:c9:28:5d:b7:3a:cb:68:ac:1c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Sep 21 07:00:29 2026 GMT
Not After : Sep 22 07:00:29 2026 GMT
Subject: CN=be7f029be606da248e75f7925d679b77f5f07b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:f6:a0:37:b7:a5:17:98:2a:e4:f4:e2:df:
7c:cb:9f:f2:ca:d7:0b:2d:f0:d7:04:51:8b:ef:3b:
73:8b:81:68:c3:f8:64:11:e0:52:d7:ca:be:36:8c:
76:88:1f:bb:c5:ec:fa:c5:34:8a:0d:13:45:74:64:
da:80:cf:8d:38:5a:8c:fb:93:f1:22:cf:86:ae:35:
d9:5b:19:c0:0f:21:dc:ef:08:30:0c:3b:de:34:cc:
72:a1:d9:24:73:66:a2:9a:0c:e9:d6:ff:9b:e5:f4:
3d:a0:da:37:6a:3a:c7:43:95:9e:0f:cc:33:70:3c:
fe:53:b1:5c:2e:38:b4:2b:68:38:87:41:bc:60:fe:
5d:3a:03:b5:6d:14:63:9e:88:78:6a:27:6d:47:6b:
f1:5d:fc:34:82:92:88:05:9e:ff:63:cc:08:db:b3:
4a:c0:c9:a4:2b:76:9e:d1:c2:10:5c:1e:75:f6:4d:
4e:13:8a:2c:eb:43:49:a4:74:78:64:1c:c3:21:2f:
e2:d0:06:7a:61:69:d2:8e:fc:28:c7:e5:ce:db:21:
5a:2a:08:09:d2:4f:f4:35:1b:1b:8c:73:a0:57:87:
b8:ae:cb:a9:fd:3f:79:9d:98:85:03:7d:ca:31:94:
d0:48:a8:87:32:35:84:a6:d4:f1:a6:96:83:be:bf:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:02:9B:E6:06:DA:24:8E:75:F7:92:5D:67:9B:77:F5:F0:7B:13
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:58:ac:30:cd:c8:82:8b:c7:d1:be:3a:6c:ee:31:41:c1:5e:
ae:11:ec:07:ec:30:74:fb:e4:47:b0:3f:83:11:bf:41:53:5a:
95:bb:92:c2:8a:08:89:aa:3a:0b:1b:c7:c7:82:33:8f:7f:15:
9e:3c:ae:eb:a4:2f:dd:9d:a1:2d:a1:7f:be:89:1f:cb:c4:97:
f1:28:b1:de:31:4c:a2:e8:7a:e2:aa:5c:9b:59:c0:1a:18:1a:
c8:86:7b:a8:71:b9:21:d6:c9:6b:c7:a6:c0:d2:fb:71:d6:89:
e3:d8:0e:00:21:6f:f7:7b:02:26:8f:b9:5a:75:56:51:4b:30:
7d:53:00:46:c4:54:9c:15:85:22:6e:11:8a:68:87:46:3a:a0:
e5:e1:3e:00:b2:e5:5f:a1:39:8f:ad:f6:60:7c:21:a2:2f:f7:
4f:17:c3:d4:6a:00:b9:36:e2:cb:27:34:46:42:5a:93:8f:f8:
4d:ad:ba:aa:76:96:ad:34:49:50:97:4b:1c:47:b8:4e:75:87:
52:41:36:11:46:53:ab:e8:20:4f:da:9a:82:d4:4d:28:32:46:
de:15:3e:f4:dc:a4:41:26:0d:2b:1e:a8:e7:1a:8c:ed:37:6b:
b1:bd:d4:40:78:f1:bb:fa:00:92:d3:d6:dd:ec:e2:d8:be:d8:
ce:cd:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:28:02 2026 by rpki-client