Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: YWy1neJ5dfM3IuzMfVbGb8bO4KfAH8cBoDSUeJ8mnk8=
Subject key identifier: 32:BE:A7:B9:2D:3B:FC:78:DD:03:BC:76:20:64:C5:EA:C9:0B:15:20
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 019E1EA2FC67F84E161F157AC2AC6340A2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:00:58 +0000
Manifest this update: Wed 13 May 2026 00:00:58 +0000
Manifest next update: Thu 14 May 2026 00:00:58 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: Q9Bkk5e9A+oLssF5gVsYtqX0amjSWQxr2re1bns/jeE=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:fc:67:f8:4e:16:1f:15:7a:c2:ac:63:40:a2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: May 13 00:00:58 2026 GMT
Not After : May 14 00:00:58 2026 GMT
Subject: CN=32bea7b92d3bfc78dd03bc762064c5eac90b1520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:60:5e:46:63:ee:3d:60:05:a1:dd:6a:7f:
f7:8d:96:e2:1b:67:58:b1:46:74:e7:f0:08:f2:e7:
4a:74:1e:99:a7:09:64:b7:0b:31:d8:fd:fc:8a:4b:
53:78:54:02:1b:02:20:c7:ad:55:3b:b9:54:52:6d:
07:68:34:b7:39:dd:de:89:34:01:d1:c2:34:ee:00:
ad:fc:78:35:13:9e:4c:76:69:77:1c:dd:2e:5e:4d:
17:a2:e8:e7:f3:0c:df:32:67:a2:a4:07:e7:8c:3a:
59:3b:13:3e:d0:41:8a:90:e5:26:a0:4a:eb:93:f9:
36:c7:f3:bb:6d:52:e6:5b:17:b9:48:39:80:e2:aa:
2a:5a:d7:34:41:32:92:d0:b1:c5:3c:cd:0b:d7:73:
32:e5:cb:9d:63:af:ea:21:96:1d:4d:cd:10:8a:b2:
5f:b1:51:1e:51:2e:fb:cc:f9:cd:9d:a7:fb:55:1b:
bb:c7:a4:64:2b:eb:e8:5a:35:39:a5:f4:e9:3d:b3:
11:7a:b2:42:55:97:98:08:9b:33:2f:5b:33:2f:71:
bc:e5:26:ad:f2:a5:0a:40:09:a5:48:4f:64:3c:47:
8a:4a:e1:15:3f:5a:7e:80:06:73:81:ed:58:1f:93:
27:6d:22:d1:38:d9:07:b8:c7:ab:cd:e9:b4:86:17:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:A7:B9:2D:3B:FC:78:DD:03:BC:76:20:64:C5:EA:C9:0B:15:20
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:f5:ca:b7:c5:69:b3:aa:00:72:05:7b:0c:a7:1e:78:18:
d3:1f:df:63:d5:64:28:12:f3:1f:2f:50:6c:91:84:39:bf:72:
9a:2e:e3:9f:ea:3b:0e:00:ae:d0:7f:e7:ed:f7:89:95:c7:dd:
59:2c:56:f3:7f:90:37:f0:1d:9c:2b:9b:57:92:eb:c2:60:82:
1b:a9:32:fd:21:71:ee:4a:5d:61:6d:ad:ae:86:79:4f:c2:80:
2b:30:ca:00:af:31:5e:fd:b6:c5:93:da:cb:b4:ce:63:0f:f9:
2d:7e:d5:bf:3b:a7:b3:0b:b6:76:23:30:4d:32:91:3e:28:be:
dd:ea:b7:88:b2:0c:82:7e:ab:b5:82:a2:fa:20:b3:24:dc:32:
e0:41:d3:6f:46:d9:1a:11:e4:3d:a2:d0:36:b5:56:12:c8:07:
80:f1:25:46:ed:12:4e:7f:3c:34:13:1c:93:1f:8b:19:ac:40:
d5:91:ef:d2:b2:48:ed:62:00:05:2e:a2:b3:94:dd:7e:45:d7:
52:4e:73:ba:4c:2d:5e:33:cd:b0:ff:6a:df:2d:fe:d5:5b:fc:
29:1c:c7:cd:3a:1a:45:ae:6c:5b:df:bd:ea:c1:ae:05:36:f2:
a4:ac:80:83:5a:07:c4:30:2c:62:15:a4:50:9e:f2:a1:e1:94:
a0:e1:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:40 2026 by rpki-client