Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: weq93Jt5IvMkOtKTuepPxxolvuwwP4g8BJeMqhOBoJo=
Subject key identifier: 42:38:5A:EA:8C:DC:44:2F:5A:F4:8F:0E:7F:E9:CB:87:D6:D4:6D:55
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019D2997AC8AEE6048EEB89C2381CFA19544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0C1A
Signing time: Thu 26 Mar 2026 10:01:39 +0000
Manifest this update: Thu 26 Mar 2026 10:01:39 +0000
Manifest next update: Fri 27 Mar 2026 10:01:39 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: m5TtnKPHlMViSW9pZKx4AV+YJMCZ7qwVvoucMAOJxjc=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:ac:8a:ee:60:48:ee:b8:9c:23:81:cf:a1:95:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Mar 26 10:01:39 2026 GMT
Not After : Mar 27 10:01:39 2026 GMT
Subject: CN=42385aea8cdc442f5af48f0e7fe9cb87d6d46d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:b4:a9:2e:8f:87:2e:6a:6c:10:df:7b:66:
a9:27:0d:49:46:a0:ee:6f:e3:6c:a6:ee:72:d0:b8:
34:11:98:5b:f0:56:40:30:44:20:19:05:f1:b3:05:
19:a6:da:4b:36:de:61:fa:9a:d9:81:14:52:b9:34:
ac:2b:7e:de:2a:9b:92:15:ab:b2:21:5a:2f:fd:51:
86:5b:86:c3:a0:96:ca:c1:c1:ec:dd:3d:b1:a8:b6:
d4:db:99:60:6e:f9:75:2f:bd:02:e8:5a:ea:d1:d3:
5b:40:c1:93:ae:5b:24:d1:a2:16:62:7e:1b:fe:f0:
68:4e:d9:05:02:d6:0a:be:55:a0:e8:19:e7:2c:75:
3a:a3:0e:2d:3a:77:73:59:8c:cb:a9:a7:0a:23:24:
10:2b:81:85:1b:d8:61:cb:84:1d:e1:9a:a5:6b:83:
8a:49:88:72:82:f2:d7:45:64:1d:48:94:22:5c:48:
32:3e:c7:52:83:c9:ce:04:eb:af:6f:d8:b9:dd:d3:
8d:1a:13:ba:1a:13:80:a2:a2:f0:7e:aa:ed:3f:4e:
b9:9e:a7:93:8d:08:52:b5:db:1c:ae:cd:5e:bc:0e:
c7:c8:81:1f:67:79:17:b3:53:4f:87:6a:e2:6c:06:
1c:40:90:53:f3:51:74:7f:06:c8:72:43:da:f6:b4:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:38:5A:EA:8C:DC:44:2F:5A:F4:8F:0E:7F:E9:CB:87:D6:D4:6D:55
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8d:bc:0a:6c:08:c4:0d:42:96:b9:ea:69:1f:24:eb:e3:84:
ca:ba:27:48:f1:33:fa:f5:5c:33:e6:bc:dc:0f:ae:de:0c:54:
da:5d:1a:21:f1:79:56:23:19:35:92:fa:fb:93:45:c1:8c:73:
a0:9b:84:52:89:7e:0b:c4:91:b4:f3:60:b1:55:70:8c:b1:e0:
2c:51:d2:21:98:da:f6:a6:11:ad:a8:0d:bd:3c:ef:ce:ce:cb:
1b:15:c8:6e:a3:7a:45:4e:c3:82:45:f1:cb:04:63:3a:cc:e1:
c8:f3:dd:c5:c0:ef:bb:1e:2a:28:a1:8a:28:7e:c2:13:fb:09:
ab:88:53:0b:b2:23:de:00:8f:d4:4e:d1:96:85:d7:36:c2:35:
dc:5e:25:f5:34:42:24:c1:82:ea:52:45:2f:26:dd:fa:8a:01:
b7:39:41:71:e0:5a:32:16:9b:6d:ec:c2:c1:56:60:36:0a:c8:
c3:fb:59:82:05:34:d2:24:8d:18:12:7a:f5:5f:fd:7a:4a:94:
dd:cf:21:66:ef:e8:24:40:82:f7:34:87:05:46:33:c3:7c:b3:
45:e3:f0:7f:e5:2f:35:2c:7c:2b:7d:08:43:a3:cc:96:2e:b9:
e5:58:f8:1b:44:0e:73:cf:8a:77:9e:af:4c:f4:2a:72:f7:2e:
40:69:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:27 2026 by rpki-client