Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: 4/AD6wBv8KZrLmG518BbEWNtj7DNAPTDauV6LkgAV9M=
Subject key identifier: 1F:BE:56:3F:E2:68:95:AD:A7:2F:BD:C1:0F:E7:D2:D9:47:52:AE:45
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 01A0CD7F45E8AFCDAC3C941DCE9A591B0FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0E78
Signing time: Wed 23 Sep 2026 09:01:05 +0000
Manifest this update: Wed 23 Sep 2026 09:01:05 +0000
Manifest next update: Thu 24 Sep 2026 09:01:05 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: LIr/E0Ecpdrc+wIw1myZEuW0ZroPX6ZyqCKxhwojB1k=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:45:e8:af:cd:ac:3c:94:1d:ce:9a:59:1b:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Sep 23 09:01:05 2026 GMT
Not After : Sep 24 09:01:05 2026 GMT
Subject: CN=1fbe563fe26895ada72fbdc10fe7d2d94752ae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:43:1e:d9:71:ee:74:3d:5c:45:2e:ad:48:
61:ad:b5:09:34:38:72:d6:ce:e4:62:38:29:a2:c4:
f3:11:b8:d6:da:ed:75:b6:b2:1a:50:76:26:88:4d:
40:f5:8d:f9:15:c7:3f:ce:05:a2:85:e7:38:3c:83:
41:4b:75:95:44:61:77:6a:4f:11:18:39:db:39:c1:
b7:c7:72:bb:3e:f6:ef:72:7e:6b:13:e0:2b:45:b7:
bb:80:d9:50:63:78:fe:50:b7:5c:79:00:e9:de:54:
43:cc:45:8e:68:03:63:72:b2:2a:33:9a:ca:6d:bc:
72:20:e4:f2:a0:6a:dd:23:ff:5c:a1:96:8d:41:5e:
05:87:2a:9e:ed:7b:d1:33:9e:4f:1c:45:86:47:76:
63:46:ec:d5:d5:73:67:9d:6b:44:ac:8d:13:64:a5:
ac:8b:4b:8a:40:7c:69:71:7f:47:1b:77:3f:3a:9d:
1f:ab:59:91:93:db:8c:f7:a5:b2:43:4c:d3:d8:f7:
9a:33:72:77:93:66:b9:80:8c:6c:8a:7d:3d:a9:49:
d9:36:cc:f4:19:d3:a8:20:76:c5:ca:59:88:59:1e:
51:e7:00:84:32:9f:73:c1:0c:9c:a7:5b:35:b1:15:
18:b9:cc:c6:b6:c3:e3:01:f8:25:86:7a:2f:64:0e:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:56:3F:E2:68:95:AD:A7:2F:BD:C1:0F:E7:D2:D9:47:52:AE:45
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a9:0a:20:83:fd:2f:f4:77:80:fd:4d:0d:3f:0d:0b:41:3d:
ae:e7:b6:ae:9c:e9:18:e0:75:5d:32:48:e2:6a:90:6d:55:72:
1c:64:57:54:d4:bd:57:a7:5a:18:1f:08:70:05:46:bf:1a:b6:
38:f4:be:39:35:99:6e:e9:9c:8d:ec:dc:b7:36:31:2a:af:9f:
36:b8:d6:8b:0f:34:29:87:6e:f2:7b:67:85:84:77:e3:cd:12:
85:5a:d4:11:04:02:3f:bb:d7:8f:07:f4:89:c4:0a:3f:ea:85:
db:fa:ea:09:0f:fa:46:b8:e8:f7:73:e9:17:4c:ff:1c:30:4f:
9c:26:5f:73:53:60:6e:e9:cf:d0:83:9a:5a:70:71:86:5b:c0:
f2:db:8a:92:94:d1:9f:0b:cb:08:bd:4a:10:b0:2e:2d:50:b8:
5c:ab:38:29:38:d3:2e:e6:8d:8c:e7:e9:5a:ec:37:38:07:b6:
0f:34:f8:1c:3c:d8:da:c9:5f:f4:1b:fe:cb:9c:b6:8b:b4:be:
0e:78:96:87:22:a4:c6:11:04:ab:cc:72:32:b5:79:9e:1e:b6:
f7:4c:7e:13:f4:c6:a4:19:9a:28:99:93:2d:f8:d9:d9:48:dd:
3c:a7:ee:ec:b8:90:cf:63:a4:fc:c1:9e:7c:ae:bd:ee:4d:e5:
88:a9:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:32:37 2026 by rpki-client