Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: 5+IpZ8zHQKaHTSU8QGwpilfbu1W49zECGnuakYcyEoQ=
Subject key identifier: 95:5E:2A:D6:C8:A1:87:74:F3:57:5D:D8:BC:D3:38:53:0A:FE:22:00
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 01A0CCA329361F81CDC6F74110632B44D7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 05:00:39 +0000
Manifest this update: Wed 23 Sep 2026 05:00:39 +0000
Manifest next update: Thu 24 Sep 2026 05:00:39 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: zb+2LfFO8eQzCvta3OoFQDlFX57c4kt7I5yh7AwJ4qg=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:29:36:1f:81:cd:c6:f7:41:10:63:2b:44:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Sep 23 05:00:39 2026 GMT
Not After : Sep 24 05:00:39 2026 GMT
Subject: CN=955e2ad6c8a18774f3575dd8bcd338530afe2200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:d1:43:e0:5a:9a:10:d5:b8:03:ae:61:1f:
47:53:9e:f2:0b:a7:a3:c9:0a:b4:b4:0c:b9:f9:ba:
4d:95:75:5a:29:4c:23:72:36:12:4f:34:4b:b8:ea:
00:95:a6:bb:27:12:7b:46:44:84:04:3d:a4:c3:af:
9a:9c:fd:6d:af:06:df:05:c4:45:a8:ef:e9:ad:99:
ae:85:70:6f:ee:43:8b:8b:73:6f:2d:c7:ab:bd:5b:
10:46:bc:a1:d5:a5:5e:f4:8a:28:7b:f0:83:0f:0e:
3f:d3:0c:7e:65:86:9e:76:83:52:d8:24:14:dc:9e:
4d:ef:d0:5b:08:56:39:5b:1d:7b:cd:e2:c6:9a:8e:
99:7d:43:0b:a7:25:44:14:27:85:6c:80:bc:ea:c4:
54:c5:54:41:19:6a:6b:4a:ab:c5:4d:55:8c:43:12:
03:e0:6b:f1:4a:c8:1b:fc:b0:66:ea:b2:a5:8a:8a:
3a:0d:53:71:f1:42:46:49:49:b4:97:d4:cc:3c:80:
9e:70:12:eb:f2:d2:6e:5b:65:38:e6:7d:e5:17:82:
55:74:79:72:c2:ad:41:80:7e:21:af:f8:da:f4:fa:
a1:4a:22:4f:20:b5:d2:08:a0:c2:f0:ee:f0:fd:80:
8a:0f:da:f8:b2:ef:d9:79:8d:a5:b5:6f:b4:24:b4:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:2A:D6:C8:A1:87:74:F3:57:5D:D8:BC:D3:38:53:0A:FE:22:00
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:70:d8:f3:b4:b1:e2:80:b6:99:7b:a5:c5:3d:93:5f:b3:
ec:b0:07:44:29:be:76:2a:a5:bd:1e:40:07:8b:3f:ae:b7:c5:
b9:e8:59:77:18:77:41:08:c7:d6:af:ba:c9:44:8f:c4:07:da:
71:d5:1a:55:4b:d5:e5:60:ca:66:de:2b:09:ea:1f:7c:34:40:
61:84:d5:c4:54:ba:0f:08:ea:57:1c:ac:03:6c:a6:d0:ea:b2:
bf:d0:05:56:96:e4:42:68:34:8c:9f:36:2c:28:0a:33:6e:5c:
f5:08:d5:4b:2a:3a:51:da:b1:20:72:79:a6:b8:09:98:3e:b8:
ae:1d:8f:96:15:0b:fa:83:55:b9:23:e4:2f:64:5e:06:81:9b:
1a:09:87:54:8c:f2:ba:0d:9d:d5:04:75:c7:9a:c6:98:5e:bc:
04:f2:49:30:a5:a7:c7:62:12:39:64:b5:47:83:de:43:b2:01:
82:32:ca:3f:da:03:a1:3b:1a:d3:08:17:ca:c6:dc:db:f9:c0:
3d:38:a8:5f:b1:f9:ce:6a:6a:15:96:5b:6d:63:58:55:d2:ac:
18:c1:ef:76:14:68:f9:87:4c:2e:fb:9b:a5:98:15:06:da:7e:
72:83:9a:70:bf:88:48:85:38:56:d2:63:53:04:ed:0a:e5:4e:
1e:c4:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:46:49 2026 by rpki-client