Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: 1mTPrPufkutUr2MidCLK4zr5EiGezQtvTWNcfp2SVwg=
Subject key identifier: 4A:94:46:67:F8:BD:3F:15:93:B1:18:FA:1A:04:42:90:9F:B1:DD:E9
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019E1D907F1BCD3CEF8D29CF0FB521CB573B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 058A
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: 0xAZfSqK+nNMCFlFofjxZwLcB6NNW1fpMOJdhYE5JdM=)
2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7f:1b:cd:3c:ef:8d:29:cf:0f:b5:21:cb:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=4a944667f8bd3f1593b118fa1a0442909fb1dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:f3:9e:69:3e:3d:3a:8b:d5:a4:e0:d2:3e:
d5:f9:b9:e6:56:67:08:f9:5e:4a:e3:9f:6e:94:d6:
36:4a:08:53:ab:99:82:5a:8d:11:be:2d:a7:f7:40:
f9:61:c7:ad:92:cd:59:9e:d7:76:b3:0b:09:b8:ce:
dc:60:88:83:09:e2:77:57:e3:8f:08:8a:69:ea:63:
20:75:a5:76:f0:92:3c:49:8c:45:0f:a6:23:0f:9b:
30:c6:d5:1a:cc:b0:ea:1c:95:34:13:0d:23:ab:ef:
53:91:9f:d0:0d:86:ea:b5:c8:f0:bc:7b:3f:00:95:
ae:5d:57:07:7a:ea:87:70:a6:70:e9:ae:ec:fe:74:
43:76:7b:a4:7a:e4:25:fc:08:77:a1:05:20:f1:12:
ec:f4:40:3d:9c:11:63:3d:9d:f8:13:dc:dc:24:9a:
00:fc:af:e5:89:0f:60:fb:de:ac:aa:fb:f4:20:e8:
ff:e3:f9:14:6b:b4:52:3c:ab:05:1c:60:fa:39:32:
49:c1:dd:a4:83:2b:28:93:24:42:78:8e:03:7f:d5:
c7:9b:86:9d:91:68:a3:12:94:c7:b6:53:1b:f9:8b:
74:06:b0:84:f9:3b:3f:fe:8a:13:b8:8e:29:0b:6f:
e0:2e:89:01:55:df:13:98:1f:d2:34:7e:97:c2:5b:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:46:67:F8:BD:3F:15:93:B1:18:FA:1A:04:42:90:9F:B1:DD:E9
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:de:53:01:0a:55:01:40:35:03:67:be:06:ef:73:ce:a0:ef:
43:e8:51:72:7e:3d:6d:9f:08:86:7e:d4:19:aa:86:f0:23:46:
a8:0a:8c:32:ac:76:f6:89:42:69:b1:c5:c3:6f:94:7e:08:db:
38:05:67:c1:da:81:2f:99:ad:06:32:9c:90:d4:4e:20:42:8f:
ba:d1:da:fe:b1:dd:15:95:1c:7e:cd:48:bc:65:c2:e9:56:3c:
6e:38:b5:c2:8b:37:e2:2d:25:73:72:4a:01:1b:84:c5:06:a4:
27:0c:a4:ed:8c:42:9d:04:69:83:ed:28:0b:86:34:e3:58:3f:
c4:a0:04:f6:06:ec:f9:e4:31:75:ea:8f:78:be:06:c7:91:92:
00:b5:36:13:fe:10:a7:42:de:a3:3d:41:93:0c:cf:15:bf:a7:
14:3c:29:4c:30:f0:d7:46:3a:10:76:35:fa:67:51:cc:a1:a4:
00:30:c5:a2:fc:0d:9f:4e:6a:41:8a:82:36:ae:53:61:24:52:
af:85:d3:d5:8e:f9:8f:b8:3e:1b:06:87:f8:66:8b:5b:75:4e:
bd:0d:7f:8e:f1:47:7f:aa:3b:1b:96:79:96:61:95:5c:98:f5:
bb:92:c3:87:1d:b2:57:05:01:e8:69:57:b6:ed:8f:1d:cb:c0:
4a:4f:b9:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkH8bzTzvjSnPD7Uhy1c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx
ODEyMjcwHhcNMjYwNTEyMTkwMTA5WhcNMjYwNTEzMTkwMTA5WjAzMTEwLwYDVQQD
Eyg0YTk0NDY2N2Y4YmQzZjE1OTNiMTE4ZmExYTA0NDI5MDlmYjFkZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsffznmk+PTqL1aTg0j7V+bnmVmcI
+V5K459ulNY2SghTq5mCWo0Rvi2n90D5Ycetks1Zntd2swsJuM7cYIiDCeJ3V+OP
CIpp6mMgdaV28JI8SYxFD6YjD5swxtUazLDqHJU0Ew0jq+9TkZ/QDYbqtcjwvHs/
AJWuXVcHeuqHcKZw6a7s/nRDdnukeuQl/Ah3oQUg8RLs9EA9nBFjPZ34E9zcJJoA
/K/liQ9g+96sqvv0IOj/4/kUa7RSPKsFHGD6OTJJwd2kgysokyRCeI4Df9XHm4ad
kWijEpTHtlMb+Yt0BrCE+Ts//ooTuI4pC2/gLokBVd8TmB/SNH6XwluytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqURmf4vT8Vk7EY+hoEQpCfsd3pMB8GA1UdIwQY
MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAut5TAQpV
AUA1A2e+Bu9zzqDvQ+hRcn49bZ8Ihn7UGaqG8CNGqAqMMqx29olCabHFw2+Ufgjb
OAVnwdqBL5mtBjKckNROIEKPutHa/rHdFZUcfs1IvGXC6VY8bji1wos34i0lc3JK
ARuExQakJwyk7YxCnQRpg+0oC4Y041g/xKAE9gbs+eQxdeqPeL4Gx5GSALU2E/4Q
p0Leoz1BkwzPFb+nFDwpTDDw10Y6EHY1+mdRzKGkADDFovwNn05qQYqCNq5TYSRS
r4XT1Y75j7g+GwaH+GaLW3VOvQ1/jvFHf6o7G5Z5lmGVXJj1u5LDhx2yVwUB6GlX
tu2PHcvASk+5BA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:18 2026 by rpki-client