Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: Yg6aC/6UAcFZCrvVgCUk+bL78uguQdr6AqZimS/9GV8=
Subject key identifier: 63:2E:B3:B3:C8:AB:DE:AD:2F:10:B0:A5:9D:3A:33:29:14:CA:BB:E7
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 4C5F7D207B62AB3C5C6E039E204149281B9B9664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 0559
Signing time: Fri 17 Apr 2026 00:28:25 +0000
Manifest this update: Fri 17 Apr 2026 00:23:25 +0000
Manifest next update: Sat 18 Apr 2026 00:34:25 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: cQrmoyoD2vEl7WGzBukaGUMZxrS7DJXWdKNTuSc+MO8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5f:7d:20:7b:62:ab:3c:5c:6e:03:9e:20:41:49:28:1b:9b:96:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Apr 17 00:23:25 2026 GMT
Not After : Apr 18 00:34:25 2026 GMT
Subject: CN=632EB3B3C8ABDEAD2F10B0A59D3A332914CABBE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:df:19:43:9b:83:ef:c1:e3:2d:3f:7a:f2:
4b:3c:69:2e:72:c1:13:68:55:31:03:31:79:f7:c8:
f3:d0:1f:29:4b:19:03:22:1c:5e:02:65:30:a5:ed:
af:fe:ec:73:45:56:3b:26:7e:b3:25:de:09:ff:87:
d2:3a:46:3a:5f:f4:92:e6:60:9e:64:fb:b9:c5:5b:
e9:a6:6f:9f:0d:a1:07:c0:ed:26:87:19:44:03:e6:
5c:1e:16:9b:bf:18:0d:75:47:90:13:dc:62:d5:c9:
83:d9:2a:f2:00:61:9a:d2:9b:d8:23:b8:60:70:2c:
3a:08:99:8d:c0:a5:c7:eb:a5:31:0d:4a:b9:f1:55:
60:87:03:08:66:6a:c6:ff:d9:f7:6c:da:07:dc:68:
d6:ee:e8:90:d4:d2:b7:13:2e:63:55:55:28:c5:4b:
91:02:8d:88:bd:66:05:21:07:b0:31:7e:e3:35:e6:
30:e8:1d:50:07:82:78:d6:34:fa:24:f6:18:ac:b7:
5f:18:33:e5:5a:47:0e:b2:c3:22:24:53:ad:06:96:
e3:54:a0:a9:41:b8:d4:01:83:02:e8:56:2b:f9:4e:
14:32:66:49:b6:41:9f:fa:9c:26:b0:b1:5c:6c:b6:
7a:56:f8:12:38:dd:2b:f3:63:a0:7e:15:b6:17:f7:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:B3:B3:C8:AB:DE:AD:2F:10:B0:A5:9D:3A:33:29:14:CA:BB:E7
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3e:95:d4:4b:09:4b:16:e5:73:f3:ca:94:d0:da:ff:f2:45:
70:64:bf:9f:ca:40:77:33:4d:1f:c2:f5:da:60:86:fa:8e:b3:
ff:fe:9a:79:3c:84:36:01:30:49:cc:e4:ac:bf:30:ef:35:ae:
91:66:08:9c:ad:05:cd:7b:0f:8e:cf:95:9c:76:a8:e5:f4:48:
9e:9e:41:86:96:2c:03:af:60:ab:fc:fd:62:d0:96:60:be:b3:
86:7b:fe:6c:16:83:30:9a:5f:b8:2e:e0:09:a4:58:20:80:bd:
de:42:b8:c9:13:b0:e3:71:e5:67:dc:28:11:0e:d9:22:54:40:
32:3f:65:ff:6c:86:36:22:8e:84:37:e6:b6:67:10:80:e9:17:
0b:7d:5a:cf:ae:38:1e:53:35:cc:50:9f:65:64:d8:c8:7c:bb:
4b:9e:97:18:7e:48:8c:f9:6b:7a:41:72:a6:9a:57:db:f0:47:
ca:27:0a:d6:cf:14:66:64:35:fa:f1:4e:9f:5d:bc:d0:22:c0:
df:b8:0c:07:1a:da:cb:4b:94:eb:37:18:93:48:08:cf:da:ff:
ee:40:9e:95:80:e1:43:bd:b2:94:bf:a8:22:e9:01:dd:45:70:
e9:73:95:84:16:d1:72:a9:ad:df:2a:5a:3a:97:17:43:f5:f4:
f1:3a:73:b0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTF99IHtiqzxcbgOeIEFJKBublmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVjNzNkZmM4NjhjM2Y2MmNiN2ZmOTcxYWY0Nzc2NzFj
YWYzODBhYTAeFw0yNjA0MTcwMDIzMjVaFw0yNjA0MTgwMDM0MjVaMDMxMTAvBgNV
BAMTKDYzMkVCM0IzQzhBQkRFQUQyRjEwQjBBNTlEM0EzMzI5MTRDQUJCRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVd8ZQ5uD78HjLT968ks8aS5y
wRNoVTEDMXn3yPPQHylLGQMiHF4CZTCl7a/+7HNFVjsmfrMl3gn/h9I6Rjpf9JLm
YJ5k+7nFW+mmb58NoQfA7SaHGUQD5lweFpu/GA11R5AT3GLVyYPZKvIAYZrSm9gj
uGBwLDoImY3ApcfrpTENSrnxVWCHAwhmasb/2fds2gfcaNbu6JDU0rcTLmNVVSjF
S5ECjYi9ZgUhB7AxfuM15jDoHVAHgnjWNPok9hist18YM+VaRw6ywyIkU60GluNU
oKlBuNQBgwLoViv5ThQyZkm2QZ/6nCawsVxstnpW+BI43SvzY6B+FbYX912xAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYy6zs8ir3q0vELClnTozKRTKu+cwHwYDVR0j
BBgwFoAUJcc9/IaMP2LLf/lxr0d2ccrzgKowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGVjMzYyMTAtZjZjZi00YzRmLWExNTUtNzhhOGViNWJm
MGJmLzAvMjVDNzNERkM4NjhDM0Y2MkNCN0ZGOTcxQUY0Nzc2NzFDQUYzODBBQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pjYzlfSWFNUDJMTGZfbHhyMGQyY2Ny
emdLby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZWMzNjIxMC1m
NmNmLTRjNGYtYTE1NS03OGE4ZWI1YmYwYmYvMC8yNUM3M0RGQzg2OEMzRjYyQ0I3
RkY5NzFBRjQ3NzY3MUNBRjM4MEFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT6V1EsJSxblc/PKlNDa
//JFcGS/n8pAdzNNH8L12mCG+o6z//6aeTyENgEwSczkrL8w7zWukWYInK0FzXsP
js+VnHao5fRInp5BhpYsA69gq/z9YtCWYL6zhnv+bBaDMJpfuC7gCaRYIIC93kK4
yROw43HlZ9woEQ7ZIlRAMj9l/2yGNiKOhDfmtmcQgOkXC31az644HlM1zFCfZWTY
yHy7S56XGH5IjPlrekFypppX2/BHyicK1s8UZmQ1+vFOn1280CLA37gMBxray0uU
6zcYk0gIz9r/7kCelYDhQ72ylL+oIukB3UVw6XOVhBbRcqmt3ypaOpcXQ/X08Tpz
sA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:33 2026 by rpki-client