Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json)
Hash identifier: bBAjuA4/XsCsd2KKLRJ+oDrtLpqOGhnRLej8m0pcw/I=
Subject key identifier: 07:4F:3A:BB:33:27:EC:2C:FB:D8:BB:85:00:7A:FB:4C:2A:A7:93:C2
Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Certificate serial: 019E1EDA1412BCD858312C765D8D7518B1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
Manifest number: 0C99
Signing time: Wed 13 May 2026 01:01:08 +0000
Manifest this update: Wed 13 May 2026 01:01:08 +0000
Manifest next update: Thu 14 May 2026 01:01:08 +0000
Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: kPa/V7x9xEXH32FBj1Mbu68nbvJDAyy0071xQhzDFL0=)
2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:14:12:bc:d8:58:31:2c:76:5d:8d:75:18:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903
Validity
Not Before: May 13 01:01:08 2026 GMT
Not After : May 14 01:01:08 2026 GMT
Subject: CN=074f3abb3327ec2cfbd8bb85007afb4c2aa793c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:63:0c:77:99:87:03:a2:ce:03:6e:c0:4b:
66:f7:e4:50:4c:35:5d:d2:ad:c5:8e:f3:56:be:ac:
47:af:8b:16:94:8d:57:a2:9b:90:48:20:fc:68:ab:
2e:44:4b:08:e7:3b:06:99:e8:40:aa:1e:6b:38:93:
ff:e4:96:97:88:e9:1c:8b:c6:4d:83:8f:d5:53:91:
67:08:47:4f:e6:fe:04:68:83:c6:09:43:25:69:3d:
7f:27:41:fe:75:67:99:a7:7f:62:f4:b7:fc:b0:61:
0a:82:34:bc:8a:50:bd:4a:1d:f3:73:02:f8:6b:a8:
ac:56:54:c6:48:6b:69:0b:37:94:3a:fa:57:6c:a4:
10:dc:7a:62:5a:c6:a7:a8:78:de:26:4d:7e:e2:5e:
fc:3c:21:7d:75:73:d3:8e:9b:9b:78:c0:fb:49:11:
e9:ee:ff:88:63:f0:ec:9d:19:f5:00:b9:a0:39:d3:
44:ee:b3:0d:02:d9:6c:5c:c6:7b:2c:fb:1b:94:4e:
a2:a4:11:08:89:78:29:5f:1a:a0:bd:cf:8d:5b:28:
ec:0d:57:04:61:bd:f5:51:2b:b0:cc:82:a0:c4:e4:
bb:4e:ca:b5:c6:ab:96:44:06:72:b3:ab:55:7c:54:
80:6a:ce:e6:3c:dd:74:fe:20:20:a7:83:34:e3:ad:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:3A:BB:33:27:EC:2C:FB:D8:BB:85:00:7A:FB:4C:2A:A7:93:C2
X509v3 Authority Key Identifier:
keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:f9:fb:4c:4b:f0:07:19:ac:c8:02:b1:8e:2d:60:88:2e:
6b:4c:76:4a:ac:d5:c7:ec:1d:56:c3:ed:6a:e2:42:fa:c8:95:
cc:3f:7e:47:f5:ab:db:0c:39:50:d8:61:21:9a:5f:02:37:04:
37:08:7d:18:aa:72:90:6e:f3:4b:48:64:ad:40:5c:38:cc:9d:
40:30:e4:10:15:75:b6:ac:35:f7:4d:8a:cb:7b:41:d1:e0:34:
c6:09:80:1e:e9:4f:fe:3a:25:9f:37:b4:99:3d:f9:b2:1a:d2:
6b:5d:10:2d:dd:e4:a4:31:4f:fe:82:45:7d:b6:0b:08:b6:c4:
b1:d6:0d:e1:45:c7:ee:27:37:cc:a9:c8:72:de:6d:20:49:b3:
82:9f:f2:ad:d7:59:5d:8c:e3:85:86:e6:d8:2e:07:2c:39:3b:
a6:b3:f0:1e:b7:cb:c7:70:d6:ac:68:05:3b:92:82:1d:82:49:
b6:a3:d6:b1:f1:80:a8:92:7d:d5:32:d2:13:01:56:a8:07:7e:
7e:b1:b5:a3:f2:5a:5e:9f:2c:d9:aa:26:7a:4a:67:53:5c:43:
f0:ba:c0:f8:6a:83:4c:1c:18:c9:86:8e:66:6e:e3:97:1e:cb:
e7:a4:d0:a4:e9:6a:1e:46:ef:94:2f:a1:4c:41:9e:ea:84:de:
95:b0:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:10:38 2026 by rpki-client