Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: FDoS6pBXDpnJkC1u82m1/PiugkoIHO/lTAmTpB7j0OA=
Subject key identifier: DC:7C:CA:7F:18:2D:7A:8D:A8:66:84:2C:21:AB:D9:C9:56:06:D6:47
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019F8FEBD1E3554CB1AD99A99958B227C19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 17:00:24 +0000
Manifest this update: Thu 23 Jul 2026 17:00:24 +0000
Manifest next update: Fri 24 Jul 2026 17:00:24 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: zAT46TvUu3uJVuEgFpElrbxTA7Ub85vw/7xsoIEgVn0=)
2: Vtd2ZoTlFAYzPYon3etMYV70kbQ.roa (hash: UpRfDwFjhIVb/ZI584vVNpvIkj/uDCeECPlZurhHCQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d1:e3:55:4c:b1:ad:99:a9:99:58:b2:27:c1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Jul 23 17:00:24 2026 GMT
Not After : Jul 24 17:00:24 2026 GMT
Subject: CN=dc7cca7f182d7a8da866842c21abd9c95606d647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:bf:de:d7:1b:28:fd:ad:48:48:3c:ab:a4:
74:4c:69:02:ff:bb:54:38:58:8a:c1:7d:78:8e:63:
a0:55:5f:e7:0d:34:e1:f8:4a:9e:9d:47:71:18:46:
3e:8b:38:c4:1e:03:70:e9:d0:56:0c:06:79:a0:32:
e2:00:93:c7:3a:9e:c7:a2:f6:c8:3f:dc:02:a6:f1:
3d:15:c0:ae:03:29:2c:dd:51:7e:33:7b:9d:1f:94:
9b:6c:5d:3e:73:fa:55:a6:79:1f:5b:96:61:05:18:
68:d7:c9:41:4a:fc:65:d3:9c:78:b0:70:cf:35:03:
24:6f:16:16:7f:e4:31:41:05:ad:c3:c9:b0:27:88:
4e:01:40:7b:93:c8:a7:af:4f:53:a1:f2:19:01:bd:
46:4d:af:6e:ad:77:10:f4:b1:12:08:d5:c0:70:7c:
af:4b:48:f4:1e:d9:5f:a7:83:e1:24:e2:6f:f4:6f:
33:49:41:47:55:cb:81:a8:d1:8f:01:2f:e9:ed:08:
4a:c3:d3:a2:e2:32:12:94:91:3c:04:04:df:ab:25:
01:44:7d:4c:7d:a9:a7:08:1a:7b:76:d9:87:a1:8e:
b8:a5:6d:b0:ee:9d:b8:a9:41:8b:76:38:88:79:7c:
2c:db:9d:5d:39:25:d8:82:c0:8a:db:8e:19:fe:d4:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7C:CA:7F:18:2D:7A:8D:A8:66:84:2C:21:AB:D9:C9:56:06:D6:47
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0c:ba:55:b2:c6:4c:ae:94:2a:7d:c7:b9:bf:cb:76:1c:c9:
b7:af:af:bd:73:32:ff:e4:a3:4c:98:36:a3:62:c7:af:77:fa:
4a:d3:f4:83:1a:93:b0:d9:6e:1f:2e:8d:a2:da:71:b4:aa:9f:
eb:b8:11:e4:49:fb:c8:01:d4:9f:41:19:0a:9f:25:a9:40:02:
ba:30:33:1e:50:6b:7a:93:25:3d:ce:f3:81:28:e7:e4:23:6c:
02:ad:59:6e:a3:ad:5b:3b:38:d9:1b:7a:3a:24:49:b6:f4:66:
3b:66:3f:99:41:eb:cb:c6:26:c9:b5:9f:2e:b0:bb:49:52:5c:
f7:d2:c8:b1:82:f7:7f:6f:96:4c:d9:c7:ed:fc:78:8f:f4:e5:
19:60:93:d5:a8:c2:fc:b4:a4:25:6e:19:ff:88:a1:d2:4a:6a:
24:82:81:b1:d5:99:0d:7f:bf:39:32:42:ab:d6:11:61:b1:b2:
2d:47:81:d7:b7:ec:55:99:07:d8:65:25:9f:36:0b:d7:65:ef:
74:b5:33:32:69:9a:20:61:dd:d0:e7:5a:6c:5f:40:fe:d2:51:
d7:99:d3:9a:cc:ed:9c:dd:22:a3:f5:41:ed:35:3a:be:a0:f6:
c5:69:b7:8f:45:9e:28:8b:eb:a4:6b:02:87:b2:d0:3e:3f:7e:
30:d8:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:52 2026 by rpki-client