Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json)
Hash identifier: Z+lMNyHlYyqaB5nrF8rP1JfYscywSms1xAw0K+md1gA=
Subject key identifier: 7C:DA:BC:CF:09:E8:52:9B:35:F0:DB:81:6C:D3:C3:5F:21:FD:60:21
Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Certificate serial: 019F90C77438A7BA9BE5C512D08B2BA255E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
Manifest number: 0DD4
Signing time: Thu 23 Jul 2026 21:00:18 +0000
Manifest this update: Thu 23 Jul 2026 21:00:18 +0000
Manifest next update: Fri 24 Jul 2026 21:00:18 +0000
Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: JxdDnD9CyMItK4NVRb+lOM86wBJqmhH/0HFT3zR/CVM=)
2: r7QWCdoa9NMTEcanab1wRB7sqmQ.roa (hash: 1sVfovX47XoYTFT9J0WhngWto2u574YZFahER+nLL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:74:38:a7:ba:9b:e5:c5:12:d0:8b:2b:a2:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a
Validity
Not Before: Jul 23 21:00:18 2026 GMT
Not After : Jul 24 21:00:18 2026 GMT
Subject: CN=7cdabccf09e8529b35f0db816cd3c35f21fd6021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:da:b2:b3:b9:7d:7b:47:8a:dc:bc:6c:67:
09:97:09:1a:73:6a:5c:7b:17:e4:da:6f:c6:1f:fc:
0b:82:0f:20:a0:97:0e:c0:d3:53:52:cd:26:31:64:
35:86:c1:0d:64:f3:85:78:49:25:24:85:9b:9e:60:
d2:22:ec:d0:c3:d6:c4:b6:2b:bf:0c:df:a8:1e:8a:
bc:d9:07:f6:e6:c7:b2:ad:fd:d4:00:5f:37:50:ac:
ce:15:96:16:67:7b:d0:9c:75:a1:2e:fb:f7:40:7c:
3a:d9:d9:37:e7:a1:d9:2f:c6:e9:54:72:25:fa:da:
1f:e8:b4:8b:20:33:16:e6:d9:51:51:d2:1b:5a:df:
76:10:ad:6b:dc:49:b1:c5:ec:a4:9b:69:78:c3:7b:
50:df:96:36:27:e5:08:d2:35:bf:ea:10:c6:21:a1:
a3:53:20:f2:00:57:45:71:3b:80:9f:2b:8b:02:91:
02:01:67:6e:2b:a1:5b:9b:73:15:03:6b:71:f8:38:
35:e7:e3:50:97:38:7b:b5:d7:d9:ab:6f:e9:63:ce:
23:59:93:b8:19:39:48:02:e0:b1:c5:17:b9:50:e6:
7e:41:8c:01:b5:af:3a:99:71:b2:7d:8f:4d:a6:68:
71:d5:56:71:4a:56:19:57:3a:62:e4:0c:57:3f:7a:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DA:BC:CF:09:E8:52:9B:35:F0:DB:81:6C:D3:C3:5F:21:FD:60:21
X509v3 Authority Key Identifier:
keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:27:f4:13:5c:0f:1f:57:3a:75:32:e1:4d:ef:d7:19:34:f5:
6b:b2:13:b9:e5:45:5d:17:90:4e:7f:bc:41:41:75:50:2a:05:
d7:6f:10:bb:56:c9:4a:29:69:53:da:7b:df:12:f4:df:89:6a:
03:1e:25:52:0a:45:58:c0:a3:bb:aa:6f:0e:05:8b:8d:06:0d:
1a:ad:05:df:74:3a:04:f5:5b:b5:f5:67:b0:75:bf:15:ce:2d:
a9:85:a5:c1:c7:20:a7:0d:93:a4:fd:bc:1d:9d:28:6d:95:c9:
9e:d0:71:c1:93:c9:f9:d8:8f:72:07:16:4b:d2:bd:14:16:8a:
0a:60:15:77:0f:37:04:f9:5a:8e:63:3c:f6:d1:3f:58:89:6a:
53:4a:99:0d:56:e1:d8:51:01:5f:5e:b2:54:18:da:2d:19:43:
c0:d7:cf:0f:3e:9d:d2:d3:b1:04:ec:d3:0b:0d:b6:67:f6:c5:
5d:49:e8:09:f5:d7:95:33:22:d3:e7:9b:b3:ff:08:5f:51:4b:
38:64:c3:23:ca:d8:5b:08:63:5f:69:6c:03:31:12:61:0d:80:
19:79:ca:46:10:93:8f:1e:ed:67:f2:be:74:e3:61:54:b4:9c:
66:ba:ad:97:f4:cf:67:24:59:bb:52:1c:26:70:72:7a:74:e2:
d4:2e:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:51 2026 by rpki-client