Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: ldFatHlzgqPs3K1ilCAllRel7F0Xsf6qBf5AYJAt5XQ=
Subject key identifier: 1D:20:78:2E:38:1B:06:E3:E2:53:C6:BC:96:AA:F0:F3:8C:47:43:0C
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019D284DC5F0E44B72EF484CBBF40B67BE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 050B
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: Mz00k0TWecYenQ1xB2DHYydKLuqqVNFs0TBwjH9EOOM=)
2: IehXfhpPn3dEnZKsKI0F4aPgIJw.roa (hash: 1JowsJbpz4yi5Kd0RwN5YPzQlbBst/1as7STi6Wlb1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c5:f0:e4:4b:72:ef:48:4c:bb:f4:0b:67:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=1d20782e381b06e3e253c6bc96aaf0f38c47430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:7c:5c:45:1f:46:d9:74:c3:0c:9b:ec:11:
5f:19:33:d9:17:5d:8e:a2:1a:dc:56:9d:25:a9:f4:
11:ad:53:fe:9d:7f:29:6b:e8:46:a0:2a:5f:1e:fd:
df:c2:1a:40:82:2a:1f:49:84:bc:7c:08:39:b4:7c:
bc:be:70:f5:29:94:3b:61:09:09:67:a3:db:d9:54:
09:dc:5f:0d:4f:d6:88:df:3d:29:75:ef:a0:8b:91:
51:b9:67:0b:f7:b9:f3:f6:f0:66:f2:3f:43:07:94:
63:df:0b:5e:00:20:48:90:1e:ad:74:88:06:ec:b0:
b8:0a:9e:57:94:ab:3c:fd:61:5f:66:8f:9e:9e:2a:
4e:b5:fd:2c:7f:8a:31:d1:00:3a:c0:c9:d2:b9:6c:
d9:9a:8f:ac:ee:e0:62:ed:98:ac:6b:3a:d1:0d:8b:
dd:74:94:a6:66:4e:fb:88:41:69:1e:ea:2d:25:1e:
82:f3:b4:08:ba:cc:62:29:6f:95:62:4b:2c:8f:e4:
8f:06:4f:b7:67:d4:71:bb:37:3c:d1:62:ea:72:53:
bb:2b:7c:06:28:fb:de:bf:2f:7c:be:df:97:0b:c4:
ef:ed:c3:bb:fb:08:e1:b5:35:9a:0f:68:5c:1d:3a:
fd:4e:60:ee:d6:cd:51:74:7a:15:39:8f:c9:63:30:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:78:2E:38:1B:06:E3:E2:53:C6:BC:96:AA:F0:F3:8C:47:43:0C
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:35:4a:4d:43:f7:90:60:0b:88:af:28:1b:56:40:9f:2a:
e1:c4:bf:69:28:e5:f0:59:26:79:1f:b2:0e:64:c8:c0:f1:54:
12:64:b0:72:41:d1:9c:b0:e0:ad:ef:2f:73:5c:11:86:91:2d:
93:b8:70:7b:47:7e:a6:42:95:02:43:70:c4:2f:7b:ed:a3:0a:
17:f2:c2:72:cc:ba:d5:7f:94:16:44:ff:e9:05:7a:37:ef:75:
ed:e0:3a:dc:c9:8a:2d:4a:eb:d9:00:a9:b4:d1:15:e1:1a:ac:
9e:5e:78:94:eb:59:b2:58:d1:a1:1d:4b:23:0f:e8:b7:7d:77:
51:ab:78:c8:2f:70:a2:5e:4d:3d:f0:67:95:be:e8:9c:a6:4c:
16:a8:a1:23:88:37:ca:65:54:09:db:6a:12:77:72:5a:7d:62:
2a:5c:05:9b:cd:54:f5:c3:21:92:fb:56:e7:22:4d:54:21:be:
df:18:94:02:c9:28:44:2d:c7:4d:55:c2:03:f9:3f:5e:f6:fb:
ca:88:13:bc:77:e9:e4:64:80:80:c8:1b:5d:33:8d:f1:4f:d1:
75:66:02:81:9b:10:15:b0:c3:d8:f9:65:8d:04:a8:33:1a:75:
17:86:2e:8a:3d:26:d3:a0:10:f7:6a:9a:28:8b:08:f6:7f:66:
5a:e0:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:22 2026 by rpki-client