Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: lVyQtSdBryZPCPdn3KIhjQgIDYhcdYWXCTti74/NKg0=
Subject key identifier: 4B:CB:4E:C9:D3:F5:F9:4A:01:8A:23:EB:79:1D:D6:7A:E4:4D:BD:E3
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019D9AAC25FB75BDF3630B3F7E675B23AA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 03F4
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: rH1qv4TnB+yfTGRYvyE7OW73vTPSIbdJ82jOXff6q9o=)
2: SMH2Oc24_m72oqPVd7XOf3_OyRU.roa (hash: WsgzmpsbvE0g6zXQzhps2wgMNgXJq/ibUvwvE7MedyM=)
3: hS-zp-zfmueU5iHRFKC0O06b_Y8.roa (hash: bQDlMMAMtH4O8JePaz3JngoNBpURtKGCYa9QelbxBc8=)
4: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:25:fb:75:bd:f3:63:0b:3f:7e:67:5b:23:aa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=4bcb4ec9d3f5f94a018a23eb791dd67ae44dbde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:21:56:0f:da:8f:8a:be:15:d2:e8:0e:da:
e7:24:01:20:1c:77:f2:a9:0e:68:5c:0c:52:3b:5e:
8e:7c:74:6c:aa:ba:c3:44:13:d3:51:a4:ca:24:f8:
48:e0:25:ec:81:41:dd:38:a9:2e:e2:89:ea:4a:8b:
cd:56:fd:29:13:e8:fc:aa:46:7d:b4:7c:8f:dc:84:
49:b2:ca:1d:7e:9e:99:c3:a8:9a:8c:b3:d9:43:73:
93:ef:a3:74:86:08:ef:b7:0b:b7:88:e2:1e:16:68:
42:19:6d:33:c3:ff:6d:c6:f7:aa:39:d0:f6:8e:9f:
8e:4b:5a:26:70:86:93:39:cc:bb:19:53:aa:ba:56:
73:38:26:b9:b9:79:1a:8f:c9:20:e4:5b:61:76:52:
68:cf:09:42:b4:7f:a7:49:47:82:f2:e1:27:a7:e9:
96:62:a4:f3:23:04:56:87:7b:6d:a3:49:e0:dd:dc:
fb:c1:9c:c2:cb:ff:62:07:59:ef:29:d6:39:15:32:
af:32:35:84:cc:3f:cc:10:89:a7:a4:e5:b3:23:1d:
c6:b5:f2:cd:a3:84:e2:50:1b:4a:18:37:cd:ee:d0:
0a:a2:c3:17:f5:18:c3:92:35:fd:0c:fc:08:c1:d0:
6e:d5:ed:16:4e:33:7e:1e:fd:71:da:74:86:0d:68:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:4E:C9:D3:F5:F9:4A:01:8A:23:EB:79:1D:D6:7A:E4:4D:BD:E3
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:27:1a:0d:77:17:e2:63:7f:50:95:69:21:91:8f:37:22:4f:
ff:fc:08:69:35:1a:e9:3c:da:79:f0:6f:8a:fa:8a:5b:7e:5e:
bb:99:97:08:3d:64:98:31:01:e6:f8:f9:b5:d1:1f:15:ce:04:
b6:9a:b4:15:e5:4a:ce:f3:09:07:78:c8:d7:f0:d9:cb:bc:50:
fa:05:e2:13:42:02:fe:74:ac:4f:c1:c5:23:9f:3d:20:14:15:
29:33:04:58:58:ab:b7:e2:41:2d:cf:1b:ef:f5:93:64:08:71:
99:c7:29:21:f4:48:11:db:55:90:b9:e4:af:28:b8:52:7d:3e:
bd:dd:8e:98:f1:31:e3:4d:79:fd:59:e5:1d:a1:1a:19:63:35:
11:eb:4e:52:be:c9:18:b2:71:f4:8e:5c:31:13:63:e0:6c:80:
03:d0:4c:69:c2:03:96:78:23:25:4b:52:8a:21:f6:e3:1a:62:
41:b7:cd:88:d6:ef:53:0f:b5:aa:2a:00:e6:d7:32:62:39:71:
f5:45:ab:57:f3:ab:97:2a:36:f0:51:ef:3b:ee:76:0a:34:58:
87:e8:d1:92:b8:2f:16:2b:b6:46:22:b1:85:70:50:c7:b7:4c:
32:89:2d:a5:af:b2:46:08:a0:f5:0a:24:a3:5f:fb:6e:de:d6:
d9:b6:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:13 2026 by rpki-client