Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: 96MkkSwa67orMLrkCmt27cGDnvjMQeTndrsAcVcDzcU=
Subject key identifier: DD:ED:29:B5:B2:35:42:14:9B:CE:3F:E3:FC:06:48:9F:13:CC:BD:FF
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019D28BB890341C1C38F04382CC405265D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 06:01:12 +0000
Manifest this update: Thu 26 Mar 2026 06:01:12 +0000
Manifest next update: Fri 27 Mar 2026 06:01:12 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: yQ93jx277VknnJw/d06PlJr6eJNiCB6NcWf0sqxXIbI=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:89:03:41:c1:c3:8f:04:38:2c:c4:05:26:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Mar 26 06:01:12 2026 GMT
Not After : Mar 27 06:01:12 2026 GMT
Subject: CN=dded29b5b23542149bce3fe3fc06489f13ccbdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:06:ad:8f:11:87:51:57:b1:ec:53:dd:b8:
71:ff:32:d8:76:9a:3f:eb:d2:93:10:d6:3c:67:51:
90:87:41:2e:e8:52:cd:b9:a7:33:d3:8d:48:4d:14:
7b:c0:e7:27:bc:d3:96:14:72:6f:9c:e9:ff:ef:30:
c3:10:68:8a:2a:87:6b:46:71:4a:85:17:84:52:c4:
4c:bc:36:dc:c0:61:c1:af:e0:81:20:0d:25:37:50:
a5:d3:8f:ec:56:1c:b0:93:48:c6:20:44:45:d8:94:
a7:14:1b:7e:b3:4a:18:31:43:9d:a8:08:0a:b9:9c:
6d:fc:98:53:e9:35:cd:57:40:8d:34:f7:87:8b:4d:
8b:37:de:76:11:1b:04:22:48:03:e0:cd:73:7f:33:
89:7e:b9:8e:5e:fb:34:2a:25:60:65:5b:4d:8d:30:
1a:f2:4f:91:1c:26:36:c7:88:28:e8:a3:52:9f:5f:
59:2a:b6:84:b6:39:f0:5d:35:4c:0d:d1:19:49:10:
07:bc:f0:16:5c:16:fa:1b:36:0c:7c:23:1d:7f:7b:
59:f9:f1:01:0a:aa:d3:fc:f4:2e:f9:1a:bf:8b:65:
86:a1:1c:d4:65:9b:7d:fd:a8:e7:13:74:a5:db:1d:
c4:e8:fe:81:d0:a0:52:9c:a4:ea:d4:b7:ec:94:86:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:29:B5:B2:35:42:14:9B:CE:3F:E3:FC:06:48:9F:13:CC:BD:FF
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:e3:84:b6:c0:87:dc:b3:26:8d:2f:4e:d7:10:22:9c:9f:
76:6d:0d:56:ff:ed:54:e2:f8:94:0b:a4:1f:94:ae:98:97:5f:
6b:46:6c:78:68:d6:3d:aa:ea:63:bf:a3:7c:ee:f3:19:19:9a:
c7:b8:7d:5c:db:8e:df:99:53:8e:73:1e:25:cc:9a:bc:29:7f:
fd:bb:5f:f9:d4:da:3d:51:ff:b1:e7:45:d6:45:82:79:cf:f2:
20:f8:5e:e7:8b:f0:5b:fc:12:7d:ca:d6:7e:6b:51:42:86:35:
f0:20:62:27:bc:b6:b7:93:a9:9b:47:e9:44:a3:28:d5:4c:ed:
e1:4b:83:b3:7f:57:e9:12:ac:38:78:70:62:ca:1b:f8:85:d6:
3a:44:11:f7:f4:db:b2:1d:15:6f:e1:2b:f1:70:e2:34:65:54:
e0:45:fd:f7:09:51:f8:db:df:6d:a6:41:56:b1:15:f3:11:cf:
75:43:72:3e:00:55:cc:c2:9c:9d:78:88:ee:bb:9a:37:84:f3:
6b:16:aa:e6:cf:8b:b3:52:23:1b:54:f4:20:02:f9:1c:e6:1d:
b8:79:62:6a:4c:61:58:24:d0:ea:2b:5f:a6:0f:43:4f:57:f8:
87:28:9a:de:79:a2:b7:72:c9:ca:e9:a6:cc:bd:5a:cc:15:0e:
23:75:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:54 2026 by rpki-client