Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: vbk6qzKeXU0Sum5EpqCV4WlckA7HeL8klh9GIgY7kFc=
Subject key identifier: 42:ED:B7:75:58:87:12:04:8A:38:A1:7C:76:46:47:34:5E:02:39:C2
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019D99991C550075E70C60A703D48911960B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 05AE
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: Nad7HLOCF+j6Fn4v27AsLs3qDEqySJ0gR+duvyTrRkY=)
2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1c:55:00:75:e7:0c:60:a7:03:d4:89:11:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=42edb775588712048a38a17c764647345e0239c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:01:a1:21:f8:d4:06:4e:e6:e5:24:94:d1:
a7:ae:ff:4f:33:6f:96:3b:8c:89:2a:ec:f1:7a:99:
15:d5:ff:a2:f8:69:c7:fc:c6:ce:14:32:95:18:9d:
d0:91:bc:b7:43:bc:65:e3:8a:13:ff:03:d6:ac:1d:
72:76:69:95:55:59:68:d0:c9:42:2a:a2:bf:f9:b1:
e6:41:f9:97:76:9e:7f:ca:2b:9f:b2:25:d1:bd:6d:
2c:9d:85:4c:11:34:70:42:e9:c7:75:e3:68:71:d0:
28:b5:9b:99:db:ad:cb:11:09:f5:8c:f7:4c:14:42:
1e:0f:03:02:60:c9:98:fb:1a:75:96:7a:fb:04:4e:
02:ea:13:4c:d8:52:85:76:cf:85:04:c3:20:db:95:
5f:70:cf:72:9f:8f:45:36:7d:56:47:85:73:83:40:
53:e2:ce:3a:38:39:97:a7:07:e2:4b:4f:4d:ec:06:
df:ce:c3:82:ca:e7:5b:cb:e6:2f:17:4e:5b:e6:55:
9b:5d:42:f0:75:6b:ac:b7:89:aa:99:39:56:61:73:
54:2a:d7:ca:c6:78:93:dc:4e:22:2f:11:ab:15:eb:
9b:fb:74:81:a1:bf:69:e5:bf:28:2b:c5:c5:26:76:
09:90:e3:ba:d1:1a:7f:71:d4:1e:3f:30:f4:4c:72:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:ED:B7:75:58:87:12:04:8A:38:A1:7C:76:46:47:34:5E:02:39:C2
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ec:a4:33:e8:1c:ee:c2:30:b1:45:17:ab:92:9f:57:01:db:
10:ce:8f:36:5a:d5:4c:da:55:72:b2:2b:15:58:83:13:48:ca:
bc:78:92:24:e2:6c:91:36:05:63:7e:b9:0a:45:ac:f6:b6:dc:
52:0e:b6:20:20:f5:b4:c2:66:24:09:19:79:56:59:12:0a:15:
52:1e:c6:72:c7:42:86:69:6f:75:a4:25:02:59:7b:4e:57:cb:
47:31:a1:0b:b8:e3:04:cc:28:73:24:d9:04:49:41:c9:85:51:
1f:9a:ce:fa:1e:06:2c:4a:99:50:a1:2b:05:49:a2:3e:c8:ec:
4d:90:76:a7:2d:f2:52:d8:75:21:81:b7:c9:78:df:a1:fc:31:
26:ec:a6:1c:4e:f2:db:c2:be:14:6b:9d:a9:b8:5d:63:51:de:
0c:bf:30:37:01:42:fb:b7:6f:b0:84:19:a8:1d:fa:56:89:2a:
1a:f4:70:d1:5c:a5:2d:8b:58:87:0d:54:88:c4:e5:46:d8:bb:
d2:a9:ff:05:7a:b5:39:5c:2b:e4:36:56:70:ff:2f:17:bb:cb:
79:58:0b:fd:60:7a:fc:90:6b:b3:24:c7:43:6e:58:59:3a:f1:
35:cd:f2:42:ed:a3:09:0a:e4:d6:9e:01:ac:fc:51:9f:4c:6b:
f9:6a:41:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:10 2026 by rpki-client