
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: y1g+RaFjGSjSg/aiC8SD0WJlsStqfe1198S08ReEoF0=
Subject key identifier: 08:8B:43:81:25:9B:DC:04:86:48:01:ED:3D:0B:C3:8B:EF:D1:6A:D7
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 01A0BDD4BED5E81AF5049C3C7B01E8EFEFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 0594
Signing time: Sun 20 Sep 2026 08:00:31 +0000
Manifest this update: Sun 20 Sep 2026 08:00:31 +0000
Manifest next update: Mon 21 Sep 2026 08:00:31 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: hDMa0ZsEgEg1g9HJzv6sJPcUe+Dne4b/UjoqzAxkfp4=)
2: SMH2Oc24_m72oqPVd7XOf3_OyRU.roa (hash: WsgzmpsbvE0g6zXQzhps2wgMNgXJq/ibUvwvE7MedyM=)
3: hS-zp-zfmueU5iHRFKC0O06b_Y8.roa (hash: bQDlMMAMtH4O8JePaz3JngoNBpURtKGCYa9QelbxBc8=)
4: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:be:d5:e8:1a:f5:04:9c:3c:7b:01:e8:ef:ef:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Sep 20 08:00:31 2026 GMT
Not After : Sep 21 08:00:31 2026 GMT
Subject: CN=088b4381259bdc04864801ed3d0bc38befd16ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:6f:28:f0:ba:22:40:17:79:48:07:eb:88:
82:d5:70:b5:d4:ab:28:2f:16:08:9b:cc:24:ef:dd:
56:50:1d:77:4f:ac:5d:6d:f9:8f:93:cf:1c:97:e1:
9e:65:64:9d:8b:89:97:98:2c:a4:c5:6b:a5:1d:6e:
b9:6b:fe:0d:82:6d:a6:53:94:1e:a7:d5:4b:7f:c7:
84:a7:8c:ea:63:c7:84:fb:6f:59:d9:ae:69:e6:63:
7f:22:09:34:d2:8e:91:4a:c7:c6:16:a9:9f:91:dc:
f3:91:c5:fb:d2:7d:98:e0:6b:5e:e9:52:38:da:6f:
a8:04:56:d2:08:bb:08:27:55:92:bc:db:bc:92:e1:
66:b1:76:ae:19:6c:2d:12:b1:a7:6e:89:bc:50:4b:
71:91:f2:49:de:e3:1c:f5:59:c0:ec:b5:f1:3c:9e:
72:34:77:9b:a9:2b:1e:29:3a:46:2d:79:93:eb:e1:
c8:96:da:b1:24:a1:89:69:99:7d:4e:4b:d2:7b:39:
de:9f:33:60:dd:2a:5b:15:26:57:95:b0:a0:fe:c9:
63:b6:e5:45:69:a7:13:c3:58:9b:21:ad:88:b8:db:
98:e9:36:2c:41:ef:66:f0:70:d8:ae:cd:68:dc:6e:
43:0b:5b:8b:9d:9d:52:5e:40:49:9b:2e:85:2c:db:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:43:81:25:9B:DC:04:86:48:01:ED:3D:0B:C3:8B:EF:D1:6A:D7
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:40:8a:e1:82:b9:3e:d7:fb:87:21:65:2c:66:24:23:1f:73:
61:6f:ab:42:41:8c:dc:c4:47:b4:60:c8:d1:54:ed:3b:1b:b4:
73:54:6f:b1:23:a9:db:89:bf:85:d9:51:aa:8a:7e:d3:9b:30:
53:f7:5b:43:b0:46:1a:c4:ce:8f:f7:aa:63:b6:c2:93:ed:81:
e5:04:e2:a8:82:a9:71:1f:33:ea:ef:f8:06:4d:1a:fc:6d:a3:
06:2d:d6:28:57:80:8e:c3:07:81:52:7f:a2:c9:6d:5a:ec:c9:
36:3e:70:ff:99:b5:c8:02:2e:2d:bf:f8:77:a8:e6:c5:7e:1b:
63:27:a0:5f:b4:47:ae:b3:15:69:31:25:d1:a5:96:e9:cf:7f:
0e:81:fe:52:c1:5c:c9:ed:a8:78:d5:43:b2:d5:c2:88:c7:84:
12:ca:76:8a:2d:01:16:3a:ef:92:0e:ca:9e:f3:c4:be:4b:b6:
24:84:f7:a4:b0:c2:cd:16:ae:20:b3:f0:c4:ae:c5:20:da:f5:
51:e1:9a:45:93:c5:9f:93:3e:35:a8:c5:98:87:0b:77:6f:72:
49:1f:2f:f6:ab:80:56:ea:62:96:cc:34:92:0c:25:dd:46:2c:
d8:ba:68:71:dc:90:f4:e8:90:65:5c:31:a2:c8:31:9f:95:13:
61:94:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:47 2026 by rpki-client