Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: NpM7IgdUvyOL0VxaGxG5JimmXd+q8hDvfc+CrqcSTAw=
Subject key identifier: 02:69:52:67:2E:0A:7C:53:23:BF:0A:D6:73:A9:1D:C9:13:E7:DE:A7
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019D25842A02F93F4136D6D540F38BADC480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: WZTQNAu6li0iQxvpRoIcah1tV9m0qXkXogDarQJIRnw=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2a:02:f9:3f:41:36:d6:d5:40:f3:8b:ad:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=026952672e0a7c5323bf0ad673a91dc913e7dea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cc:0b:be:7f:e1:d1:08:1d:dc:35:08:cf:a6:
7e:d3:67:4d:0c:ea:2c:4c:11:58:f5:8e:1c:6e:21:
4e:06:ea:29:9e:44:9a:18:92:a6:67:29:9b:cb:dd:
07:87:ad:29:5b:96:dd:44:12:29:85:c0:c5:14:4a:
cc:35:29:bc:ee:6a:8f:b1:5f:81:95:ec:8a:9e:88:
4c:36:57:bd:1b:62:c9:2a:1e:74:66:10:d4:4c:b2:
c5:91:a1:80:04:07:26:9c:d8:92:d4:b6:a6:0e:dc:
c4:45:9c:09:33:4f:52:70:5d:3c:99:33:e6:37:5d:
02:b6:88:8c:28:94:bd:e6:64:b2:1f:f9:ff:ec:da:
b3:85:94:7b:e5:3b:47:74:a0:81:6d:d2:fe:24:73:
1f:c2:2f:8c:bf:cd:70:31:2c:0b:e0:06:4f:8a:17:
3e:07:28:50:e5:73:92:3c:77:ca:94:a7:d5:c6:54:
c3:63:01:6d:ea:58:d4:ab:8b:ae:51:f4:17:6d:ae:
15:10:17:cb:61:2e:4d:59:2a:ea:bc:2d:f1:bf:70:
be:0e:86:a2:d5:d7:9a:ff:15:0e:da:2d:18:2a:1c:
20:be:df:3f:0b:4f:36:ad:67:ab:02:04:a4:ac:21:
67:f3:53:c7:d3:28:43:83:48:60:66:f0:75:01:ba:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:52:67:2E:0A:7C:53:23:BF:0A:D6:73:A9:1D:C9:13:E7:DE:A7
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:d6:ed:67:4a:13:a8:73:c7:0c:c1:bc:da:b7:11:90:7a:
04:b6:f8:a6:c1:22:78:1e:ea:35:1a:d9:28:95:7a:fe:f5:8f:
c6:0a:7a:f9:7a:ca:79:b0:1c:d7:0e:3c:db:f8:25:8c:03:ec:
cd:5d:cc:0a:8a:ec:cf:37:97:30:62:df:3e:33:32:1a:a5:8d:
ea:11:1c:3a:0f:d4:aa:90:41:f8:8c:e5:f3:45:0f:4a:52:40:
4a:05:07:f8:c6:be:13:8d:a7:9f:0d:9e:52:a8:5a:86:9d:9d:
be:43:f2:59:a2:c4:55:bd:4c:87:44:6b:d4:22:88:4e:1f:c6:
e8:ff:ab:2c:e8:dc:e5:bc:5f:68:09:97:35:6e:7b:8d:89:3c:
b7:25:1a:8a:41:9a:3d:44:36:ae:1e:85:01:a1:ac:71:f6:cd:
e5:4e:6e:00:c6:72:27:f1:64:c6:0d:b7:36:ee:e9:13:c2:34:
fd:1f:c3:a1:30:08:01:07:00:70:b8:58:ef:c3:24:10:55:7a:
f2:2a:e2:a6:bd:3e:2f:f7:1a:0e:a2:95:86:fe:2d:aa:7b:2a:
c7:c7:ae:ec:cb:95:18:bb:87:19:0a:70:07:81:84:6c:15:06:
50:50:9a:71:05:b2:0c:54:7d:f7:d4:c1:68:f1:77:38:cd:4a:
1d:a4:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:43 2026 by rpki-client