Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: 2SmpxhLkEXcWaPbfis2ZvhLzKJoxo0lHEsZmdVgw4R0=
Subject key identifier: A6:83:70:26:53:3C:8B:38:35:E5:70:37:89:67:BE:D8:FD:71:C1:24
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01A1E05F006E4FB7CA5D7B8FC44D07438B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 18:01:24 +0000
Manifest this update: Sun 15 Nov 2026 18:01:24 +0000
Manifest next update: Mon 16 Nov 2026 18:01:24 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: ZkM9itmaTCDnDSDZwrL/K6+1+M/j1+Ly4cthp/3QpiY=)
2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=)
3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:00:6e:4f:b7:ca:5d:7b:8f:c4:4d:07:43:8b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Nov 15 18:01:24 2026 GMT
Not After : Nov 16 18:01:24 2026 GMT
Subject: CN=a6837026533c8b3835e570378967bed8fd71c124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:de:1b:8b:12:1f:dd:30:7d:d9:34:bd:8f:
bb:69:e6:6d:09:75:02:ec:f0:2d:a0:b0:11:57:92:
7d:16:9a:c8:92:77:07:e0:fa:3c:e7:d9:10:63:10:
c5:80:46:fe:2c:63:ae:97:00:e6:92:a5:db:f6:6a:
64:c1:19:04:a9:5b:9a:37:73:42:58:76:c5:25:cf:
3d:97:58:64:bf:93:4e:a6:5f:19:2d:1d:83:01:32:
a5:c3:22:d5:42:72:ff:63:52:f5:7f:bf:0b:4a:85:
d7:f2:ce:d2:83:4a:a9:4b:7f:a1:d8:26:14:75:11:
36:46:d0:42:ae:ee:2a:63:57:bd:6f:8d:c5:fa:3b:
d4:59:bc:d7:f4:72:fb:df:fe:30:31:30:ff:45:82:
be:c6:2c:dc:75:58:9f:fa:78:8d:cb:63:ef:89:64:
2d:c4:67:e1:a0:33:67:72:54:65:0f:80:b1:e7:1b:
36:84:13:a6:0b:92:2f:84:b5:9b:57:78:2d:9e:c1:
70:ce:cd:2f:55:34:13:de:e4:54:4a:ff:fa:7e:2a:
49:9d:dd:b3:54:75:a2:ed:41:46:d6:6d:83:26:1f:
5c:3d:a3:b7:55:5d:98:82:47:4f:21:1b:da:fa:08:
51:a6:f7:06:43:a3:4c:d7:c9:ed:29:2e:d2:f1:2c:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:70:26:53:3C:8B:38:35:E5:70:37:89:67:BE:D8:FD:71:C1:24
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:9c:f7:55:ef:80:89:fb:d0:93:ca:e3:66:c6:76:86:2c:
3f:92:31:74:5d:49:39:81:f3:b3:70:51:4e:1f:df:97:4b:e5:
e7:89:ba:b9:b5:f6:f0:7c:bb:9f:01:40:0a:55:73:8b:69:4e:
74:81:bb:f5:a9:0f:09:21:7c:e1:89:0f:0a:b1:fe:63:df:4a:
5a:7e:04:ad:13:2c:23:99:d5:7c:88:2f:32:cc:7c:88:36:29:
bb:04:bc:58:38:7f:bc:e8:f0:30:c1:fb:51:c3:50:42:e1:d1:
5f:40:91:b5:d6:17:d2:67:4f:74:1a:c6:f2:19:6b:a4:46:dc:
b7:30:c2:e9:01:47:0b:9d:c4:68:d1:f6:4b:a9:82:dd:77:21:
92:23:b7:7c:0c:f5:92:49:63:0f:af:5e:ca:67:77:90:b9:25:
c8:d6:99:bc:78:b8:fb:b1:02:25:22:ea:4f:dc:16:87:68:02:
d0:b4:f5:26:10:5e:e1:41:41:55:60:fa:d8:d3:83:6f:f4:68:
67:6a:b5:ce:b7:97:0d:91:f3:1c:be:24:f3:70:82:e6:1a:33:
ac:58:ac:55:fe:57:14:ba:01:e9:57:7a:0d:67:7d:92:58:99:
a2:ff:9a:db:72:52:4e:9f:b2:1a:f7:2b:66:ed:f8:67:db:bd:
c9:c1:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:12:38 2026 by rpki-client