Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: 3M9UfVEfj72ZDNGcm7Q5qAMWiME/OuEaziE6B0Ew7zg=
Subject key identifier: 13:84:45:EF:BE:31:2B:2B:66:FF:21:76:8F:57:EC:32:AB:FA:06:3E
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01A0D0124C11F72E0DB11A72E095800B112B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 21:00:55 +0000
Manifest this update: Wed 23 Sep 2026 21:00:55 +0000
Manifest next update: Thu 24 Sep 2026 21:00:55 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: 9UznVQzk2R+ji6yOtjaSwfFC2uwawpIYB5yctbV4sIk=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:4c:11:f7:2e:0d:b1:1a:72:e0:95:80:0b:11:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Sep 23 21:00:55 2026 GMT
Not After : Sep 24 21:00:55 2026 GMT
Subject: CN=138445efbe312b2b66ff21768f57ec32abfa063e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:42:6e:43:1b:64:75:73:23:45:85:a2:48:
20:72:9b:5b:e7:a4:53:ba:ba:2d:f0:68:9e:62:15:
3e:79:ab:aa:64:9f:d0:65:9a:f9:b5:11:3a:4c:4f:
7b:f3:60:e9:32:ec:d0:57:ab:0e:c1:09:98:7b:89:
6e:77:57:a4:0e:92:d1:b4:3c:34:df:53:45:7b:31:
ee:8e:94:84:9f:a2:f6:b0:c5:33:0d:09:64:5a:cf:
bb:9a:21:51:7b:65:ff:42:a0:98:60:09:1e:96:ed:
41:e9:93:bc:1c:97:f5:56:28:c9:1e:91:20:c5:77:
3c:43:39:50:95:8b:01:90:6e:99:ed:7e:c4:85:87:
ac:c3:ab:1d:73:e7:2c:62:15:b6:11:da:a3:b1:dc:
df:3a:50:84:2a:a3:3b:35:55:69:33:58:f8:66:62:
b5:79:09:2c:de:a5:46:d6:29:81:47:90:4d:71:e0:
4b:71:dc:cf:d8:40:ad:d1:db:7b:94:f8:fb:5e:b8:
a0:8d:0b:65:d6:4e:5e:5b:ff:65:30:8d:f4:92:06:
7c:53:a0:be:e7:7a:0d:9f:b5:a5:a6:de:21:73:51:
f3:c3:05:1d:5c:fd:5c:68:24:e5:f1:4a:9b:37:30:
a6:30:c3:79:fa:65:a8:83:79:b7:cb:14:2f:de:3c:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:45:EF:BE:31:2B:2B:66:FF:21:76:8F:57:EC:32:AB:FA:06:3E
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:31:5b:92:3e:c9:00:5a:62:97:4e:24:be:d0:8a:4b:ee:fa:
a0:86:28:41:fd:7d:ce:78:87:22:f9:4f:79:1f:ba:03:33:8b:
28:9f:35:7b:07:fc:47:87:52:2b:7a:c6:ad:c9:2a:ac:5f:a2:
6c:8f:ef:9a:b6:cd:70:ac:fa:90:af:6c:e2:7c:14:d8:ad:40:
43:88:92:95:42:a8:28:b5:36:85:48:b9:a6:5c:65:80:11:c1:
50:60:45:bb:80:3d:02:c5:8f:ae:60:d9:3a:62:47:21:ac:a6:
31:09:56:8e:71:e4:11:7f:6b:3b:81:8b:30:38:41:db:aa:7b:
21:1b:7f:8d:dc:56:26:9a:f2:01:cf:17:86:fe:f6:42:61:9c:
23:c2:66:e2:a7:e9:fd:50:71:f5:23:81:1d:68:68:f1:04:12:
96:1b:50:71:df:9d:04:dc:1d:35:89:4e:0f:99:4f:f7:22:52:
32:62:79:31:07:b2:eb:36:46:1f:4d:a3:7a:85:d6:34:49:82:
39:58:00:52:34:fd:8f:96:9c:26:4c:1c:77:0b:52:3d:d9:96:
c3:af:f8:9e:fd:23:81:e6:d5:a7:0d:81:8b:0d:3e:0d:71:30:
57:da:3a:7e:49:a5:ba:da:4a:0c:cf:bf:92:7c:70:d7:c1:73:
6f:9b:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:29:18 2026 by rpki-client