Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: aIbybQFk1qSEZDbdMEYKIMI4MMGuDdeaqvDC0EHNLDs=
Subject key identifier: 6A:FE:3E:8F:07:B8:93:B1:EA:78:A4:BA:B0:89:01:50:58:2B:45:30
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 01A1DEA7C457A719BCC0D8FC7F96A838E02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 07EC
Signing time: Sun 15 Nov 2026 10:01:39 +0000
Manifest this update: Sun 15 Nov 2026 10:01:39 +0000
Manifest next update: Mon 16 Nov 2026 10:01:39 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: oUzpc1Q8dz8worR2OphBEs1wLmZtU7knJnt2DE7ah3k=)
2: 7c0qOePAFjgFuit0OKbCSUOlyYQ.roa (hash: GRgnDZCM0lDZlTgoE48q13kAFLwH7+egid7H4MoEjGA=)
3: _tgh7D8loaPDJ7r7Pxf9_WvTx34.roa (hash: xcNwVxfY4wqx0USwx2W9FdmwKxqPegHXOT+mDy7Il/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:c4:57:a7:19:bc:c0:d8:fc:7f:96:a8:38:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Nov 15 10:01:39 2026 GMT
Not After : Nov 16 10:01:39 2026 GMT
Subject: CN=6afe3e8f07b893b1ea78a4bab0890150582b4530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:3a:df:03:23:33:70:54:04:8b:25:cb:46:
83:9d:8b:f4:bc:ac:15:15:13:00:0f:26:eb:d1:d8:
6f:24:49:60:b1:de:b1:04:8b:0c:d4:4c:5b:af:a3:
dc:7e:be:dc:81:ef:ad:0c:f1:7c:b3:25:69:2b:f4:
e1:96:c4:8c:29:8d:a6:c3:59:8d:63:4d:f8:e6:8e:
46:0f:b4:7d:ad:31:ac:d1:00:25:ac:44:3b:a7:ee:
85:d5:eb:c3:06:74:c8:c4:84:a1:97:e6:2e:19:3b:
a3:38:9b:f4:67:30:c2:53:0a:1f:08:bd:39:b3:eb:
e3:d6:32:8c:b6:20:50:ee:ea:90:e0:4e:ab:e3:45:
13:a3:de:14:94:cc:59:2d:3b:bb:a8:fc:b4:aa:c6:
f8:31:fa:30:b6:b1:0c:9a:3d:4f:31:9e:fb:54:e0:
c5:5c:2a:ca:cb:4d:a8:db:d9:7f:5e:e9:72:62:5f:
80:06:36:d2:0b:9b:46:8f:a5:eb:4b:1f:1c:dc:4c:
f4:c0:ec:5f:bb:76:31:4c:61:88:28:0a:d5:f7:a0:
df:5b:16:b9:8b:7c:a8:10:7e:b1:b4:00:6e:59:a8:
5d:55:ce:d9:b8:61:72:fa:09:6f:02:02:7c:73:bf:
6d:39:05:b8:66:33:05:8d:ad:e4:98:69:bf:a1:34:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:3E:8F:07:B8:93:B1:EA:78:A4:BA:B0:89:01:50:58:2B:45:30
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:8d:a1:cf:f9:09:d0:1c:3a:1d:86:e6:cf:65:47:20:82:
2e:08:47:92:3b:f2:d8:25:89:4c:2f:89:de:d0:52:16:5b:bd:
75:b7:c7:5e:b7:48:26:68:a8:1e:ac:00:d8:33:c6:4d:40:6c:
5b:88:49:dd:47:3f:46:34:a9:9d:34:69:32:dd:0d:67:3e:a3:
38:6b:ef:b1:e5:c1:c5:ec:b5:1c:15:51:b7:79:a0:81:0f:c3:
6f:8f:56:1a:e9:4c:4a:92:53:b7:e0:85:d3:6d:05:08:d7:9e:
1c:63:07:86:78:8b:c3:67:a4:b4:84:31:cb:82:e2:85:f5:36:
7b:a4:4b:f0:88:d3:e7:92:e4:99:ff:47:03:a6:40:5e:a3:a1:
3f:a0:2e:30:3a:57:b6:ec:f7:11:d9:f2:00:9c:be:99:e2:5d:
0a:16:d4:78:04:be:da:3c:28:4c:a9:b5:78:51:eb:dd:4a:e0:
1b:63:d4:7a:ac:b6:c8:bd:ad:c1:20:52:25:6c:c2:e8:fa:5d:
8f:a2:07:d8:1c:63:0c:35:e3:3e:6b:b3:d2:1d:cd:48:97:9d:
dc:61:29:5f:de:d9:05:11:a0:98:f9:04:96:b1:c6:a9:c3:8d:
14:fe:46:97:f0:77:e3:15:28:e0:e5:80:e2:32:f2:d5:ae:5e:
27:57:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:23 2026 by rpki-client