Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: tzzhfT2lrsDm7mluAp+a1yOydm7B7qqLBgdHZ8GKsGI=
Subject key identifier: BB:FC:25:BE:A3:C7:5F:0D:A8:5E:26:FC:BB:82:D2:15:9F:0D:DF:F8
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019CA9B37FAA732DED0B9B2E44B1FE08701F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 036F
Signing time: Sun 01 Mar 2026 14:00:38 +0000
Manifest this update: Sun 01 Mar 2026 14:00:38 +0000
Manifest next update: Mon 02 Mar 2026 14:00:38 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: PEQYJi12o0Sj4sLqyhLtFhX3Xcrfm7UG00g7ExoSgM8=)
2: MUCk0SPtOpnrCSsonRUiNf-3RDI.roa (hash: cldvRgqMPrIXa052aZpFy3AIu+aiC2LgD9YfPfUmyIQ=)
3: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:7f:aa:73:2d:ed:0b:9b:2e:44:b1:fe:08:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Mar 1 14:00:38 2026 GMT
Not After : Mar 2 14:00:38 2026 GMT
Subject: CN=bbfc25bea3c75f0da85e26fcbb82d2159f0ddff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:91:71:02:bb:4e:1c:6d:64:6c:f0:4f:2b:
a2:4e:47:d1:36:58:12:6d:d0:47:8d:61:52:a4:10:
3c:66:9b:57:c0:c2:1d:24:8c:80:04:f9:cf:91:cd:
f8:bf:ef:8a:d3:d5:1a:04:d0:ec:57:5a:fc:f8:33:
6f:8f:06:3c:f5:e0:ce:e4:5b:68:12:33:90:82:1e:
8e:f3:f5:bc:ea:58:be:82:b9:75:2b:aa:c9:8f:38:
ce:2e:11:88:26:f7:ba:69:40:7d:23:90:99:ac:ac:
18:1b:bf:a7:c6:a5:6a:f8:69:94:01:18:bc:54:7e:
81:6b:47:f1:94:b2:68:33:e4:ce:f3:88:23:fa:15:
c2:14:bd:3f:8b:52:3b:19:3e:ec:c6:d6:86:f3:89:
2b:c6:84:5d:26:d5:a4:c0:7b:7a:af:f3:52:f5:c9:
ba:ed:e4:8b:77:46:3c:2a:00:ca:6a:13:0a:f5:75:
b4:91:2f:bf:16:4f:b0:84:a4:b3:75:59:ec:4f:e4:
31:4d:70:df:eb:03:8c:d2:c9:75:1c:b9:a7:be:fc:
b0:dd:21:70:eb:3d:c2:98:7e:2e:47:b9:81:f7:db:
b6:79:56:15:b7:04:c1:81:99:22:1a:31:5e:0a:12:
b5:26:09:b0:90:f7:be:04:40:d9:01:86:a4:81:5c:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:25:BE:A3:C7:5F:0D:A8:5E:26:FC:BB:82:D2:15:9F:0D:DF:F8
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:f5:3c:54:87:d1:e1:66:ef:41:00:42:a6:81:14:57:dd:
68:d2:96:1d:e3:1a:a0:a8:0c:71:87:af:56:15:b6:40:3a:03:
40:ef:09:cd:1d:56:3a:54:9c:09:97:56:62:9d:08:62:0e:c0:
91:60:de:15:56:28:a4:4b:c6:28:44:32:f8:55:b8:8b:f4:81:
94:e5:66:54:cb:46:a2:6b:35:c0:14:c0:cc:53:ec:83:78:26:
7f:bc:35:c8:24:b9:95:be:b4:1a:f3:28:05:ce:8e:37:28:9d:
67:23:b2:24:35:e5:95:58:1e:98:aa:0a:a2:d7:f9:e8:52:c4:
33:cd:61:9f:eb:0b:cc:bc:94:df:9c:99:26:66:95:e5:96:15:
19:4b:5d:22:65:e4:ea:30:54:7a:e4:a7:59:19:11:6d:bb:73:
06:b0:ba:00:d8:6b:85:d7:0f:b4:28:19:3b:69:a9:09:30:2a:
47:9d:d0:29:be:b9:f2:ce:d8:1d:2b:1c:82:6f:81:4d:a6:69:
2e:8a:55:80:6b:8a:0d:7c:13:e7:30:6b:6c:9f:f8:88:11:7a:
b6:69:fd:d1:5d:99:20:5a:53:ed:e1:f6:25:4c:d7:aa:3e:b0:
f2:d7:bf:13:8e:20:71:0b:91:e4:72:5e:52:a0:66:95:ef:79:
fc:44:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:30:45 2026 by rpki-client