Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: CWw1UfsrSf3WqAMgnNG1fFfJ6vluNtOUBPnF6mCEFdU=
Subject key identifier: 73:1D:FA:83:42:ED:17:36:23:0A:5F:BD:B8:4B:65:95:71:94:FF:8D
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019CAC0FA9DDCBF36807EB239191E524F715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0533
Signing time: Mon 02 Mar 2026 01:00:33 +0000
Manifest this update: Mon 02 Mar 2026 01:00:33 +0000
Manifest next update: Tue 03 Mar 2026 01:00:33 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: zM+jxMUOamtCknZBV9jVhVB3aENY0xnOLjjqxqear0M=)
2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a9:dd:cb:f3:68:07:eb:23:91:91:e5:24:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Mar 2 01:00:33 2026 GMT
Not After : Mar 3 01:00:33 2026 GMT
Subject: CN=731dfa8342ed1736230a5fbdb84b65957194ff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:0d:9f:3d:b0:22:fb:18:02:f0:69:d0:71:
ea:ae:f9:67:d0:ef:94:0c:e1:78:f3:17:2c:1f:1e:
bf:c6:b0:8e:ef:d2:06:12:1a:dd:72:55:68:22:5f:
06:dd:7f:55:8d:8e:cb:84:4c:b2:b1:4a:01:e8:40:
b6:44:7d:80:55:b1:05:f7:c7:39:29:b0:be:7d:76:
47:10:ea:a9:d3:09:6d:7d:b2:5a:9e:9c:2d:af:3b:
e0:a5:a6:f9:4b:1c:23:d5:2d:a1:24:b7:fc:1b:74:
a8:83:3f:02:64:34:a5:ec:7d:8a:99:e9:e6:9b:70:
f0:16:e6:05:ff:b3:cd:8a:40:f4:04:60:3e:f2:02:
f5:b4:b5:2d:72:e3:dd:d8:85:8a:4c:6e:37:86:d7:
81:b6:83:73:91:41:da:fa:69:b9:41:cc:57:3a:e8:
51:31:6c:82:3e:53:92:bf:51:79:02:58:25:8e:b1:
33:03:26:7d:92:79:d4:13:db:86:0f:86:14:77:ec:
e9:8f:07:86:db:6d:a9:85:a1:88:e8:83:5a:d2:58:
4b:31:c9:aa:5a:53:02:0b:41:f9:70:b5:5d:32:fb:
64:8c:2c:fb:0c:d3:0c:99:c5:cc:6c:32:09:24:d9:
88:11:04:69:53:35:e8:05:b4:0f:cc:2c:70:fc:81:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1D:FA:83:42:ED:17:36:23:0A:5F:BD:B8:4B:65:95:71:94:FF:8D
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:f3:03:41:4d:68:f0:35:05:f4:b1:46:d4:f1:73:dd:d3:
e9:97:8b:f5:bc:52:ec:37:de:8b:2f:72:66:26:05:2f:30:87:
01:d0:ab:06:35:10:ec:25:3e:67:b5:55:22:14:b5:7c:41:8a:
2d:66:b6:43:a2:4f:0c:7e:93:77:78:76:7c:3c:67:fd:d9:bf:
0c:ff:4f:ab:37:81:a0:de:95:4d:33:8a:04:d5:01:01:98:28:
1c:ac:bd:0d:09:1d:0e:b5:95:16:18:39:5c:88:d6:58:fa:6a:
37:76:77:8e:fa:7b:6e:9d:74:16:6c:05:f2:ae:8c:60:70:72:
b0:18:d0:61:64:62:cd:5f:e8:32:58:6b:15:45:83:66:f1:8f:
ae:a7:13:0b:3f:77:ad:89:be:8c:e9:2f:fe:62:d5:61:18:ed:
01:26:2b:15:58:59:c4:c2:c0:34:ba:c7:e4:e8:a5:a6:c4:b4:
9a:87:46:a8:30:56:60:46:f3:08:4b:34:29:60:0a:f4:c3:80:
56:88:b2:e2:02:35:c0:79:f2:35:86:c2:19:9a:7a:ce:94:0b:
29:4c:bc:d8:90:e8:91:22:50:a8:ca:24:4f:1e:0b:f3:6f:64:
f0:12:4b:72:d0:dc:9f:6c:27:2b:9f:74:6e:5c:fd:e0:83:84:
5d:48:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:22 2026 by rpki-client