Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: E+6XurnSEpLeO1lO6R1IpkIXRuA30JEd3ev7t9av39s=
Subject key identifier: 80:FB:9C:CA:60:69:2C:CC:AE:28:F5:E1:BC:F6:59:F3:62:8B:86:16
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 01A0D42616A39C0D57DC377D3CCD2443CCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0E00
Signing time: Thu 24 Sep 2026 16:01:00 +0000
Manifest this update: Thu 24 Sep 2026 16:01:00 +0000
Manifest next update: Fri 25 Sep 2026 16:01:00 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: yD27iYlBaskp4yGxpbMrzUfRw8kb2GRHDr3m84WGuPw=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:16:a3:9c:0d:57:dc:37:7d:3c:cd:24:43:cc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: Sep 24 16:01:00 2026 GMT
Not After : Sep 25 16:01:00 2026 GMT
Subject: CN=80fb9cca60692cccae28f5e1bcf659f3628b8616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:03:de:1e:b5:af:90:fe:40:77:45:9b:27:
48:c5:fc:b7:2d:19:07:d4:82:f8:bd:0e:6d:ca:8a:
8f:ca:89:4c:3d:26:a9:ce:a4:4f:d6:68:40:3f:b7:
ba:8a:d4:9d:24:e8:85:1f:c3:1b:06:c8:5c:9b:c5:
3c:32:b3:7d:5d:bb:6d:76:18:93:93:e9:c9:6f:a6:
19:3a:e7:69:7e:3a:d7:af:0c:40:31:66:90:61:88:
a7:67:e4:90:46:95:a4:46:74:56:03:13:bd:a8:4e:
d8:f2:d4:22:5a:82:de:f6:6d:88:d4:a6:4e:10:f4:
b3:f5:f9:70:ba:00:0d:ca:f6:ba:9a:1c:d2:5e:29:
08:0d:2a:95:5a:57:d8:2a:6e:69:8a:70:8a:50:29:
a3:9e:ca:2a:d8:0f:b8:1e:f2:fb:07:85:45:f8:b5:
5c:b2:ff:40:73:1a:cf:03:b2:1c:54:40:db:b7:19:
98:f5:20:b0:6f:1c:17:94:6c:cc:d4:bd:54:2c:5f:
60:76:69:a9:99:04:bf:ab:52:44:6f:3f:30:0c:58:
98:b3:43:63:a5:6b:8f:34:dc:ee:3e:b9:3b:ae:a4:
a4:c9:99:ea:98:14:a7:22:37:1f:60:83:4a:de:cf:
9d:02:c3:f9:28:64:67:ff:6c:3f:d0:b4:99:79:63:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:9C:CA:60:69:2C:CC:AE:28:F5:E1:BC:F6:59:F3:62:8B:86:16
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:ef:ef:a9:28:44:65:c7:23:d6:ab:71:f7:0f:65:af:64:
c8:4c:a5:b9:3c:13:83:0e:c0:bd:65:1f:85:c6:45:19:25:3f:
69:57:c7:c9:a4:62:e7:c3:8e:69:7e:54:59:94:7b:a1:b1:3d:
d9:e1:b4:2a:70:f0:82:8e:7d:df:3b:78:47:cd:e7:f3:77:f4:
cf:2a:a4:7c:4e:f2:17:3b:24:b4:20:44:f4:8d:1e:61:ba:9a:
bb:d8:16:2a:95:87:a9:c8:ed:f6:be:34:6b:4a:b3:36:e6:23:
22:a4:31:6e:e5:17:0f:b6:cf:5d:42:8a:4a:1d:03:89:ce:58:
7f:29:e5:30:de:e4:f8:b3:e7:6e:92:57:a8:63:32:33:54:38:
6e:44:89:4e:dd:48:8a:8e:48:6e:89:b6:c2:3f:fa:f9:75:65:
72:a8:db:4f:cd:00:c8:5f:c0:07:36:50:1b:ff:76:5b:b5:42:
62:21:1b:e3:79:68:86:13:81:eb:d4:45:3e:55:b1:30:a9:91:
91:3f:28:3f:f2:a1:39:11:c4:ab:7e:f9:b4:d1:24:fc:de:40:
2b:b6:2f:9d:ad:91:8e:f6:89:fc:fc:8e:84:ba:2c:95:9a:2e:
03:19:81:50:8b:a1:6c:e9:53:ee:66:a2:e6:71:3e:be:9b:71:
3d:90:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:57:15 2026 by rpki-client