Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: xKbUL9dFwTdHu+eKm3VKrIOi6Kjwy3YSDouWBxsu0vQ=
Subject key identifier: D0:6A:C3:B7:C5:15:DD:85:96:D2:E3:B4:C8:ED:80:76:4A:01:81:28
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019D25BA618EE38BFF779E31F06117604F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0572
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: vUiLFNYZGOa5jwRkGRqM6Q9HXl3/1VskkhNiGgv1t6E=)
2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:61:8e:e3:8b:ff:77:9e:31:f0:61:17:60:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=d06ac3b7c515dd8596d2e3b4c8ed80764a018128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:ee:c8:7b:f9:66:e7:50:e4:02:6d:25:46:
18:55:3e:a7:0a:ae:98:7a:af:40:66:f5:59:9c:ee:
1d:8c:07:9d:26:37:60:6e:5f:a1:79:08:38:4c:3f:
54:1f:8d:51:e5:5f:08:5b:15:e8:1f:be:fa:0a:3c:
4c:48:98:59:c9:c4:62:67:c6:d4:63:5b:13:3b:73:
23:7e:f6:d1:ca:b1:d1:76:d1:ba:84:2f:57:6d:f6:
51:dd:62:cc:6e:91:f9:cc:79:33:5e:dd:52:91:0d:
c5:1f:fd:7a:2e:86:7b:a9:e7:2d:47:aa:b1:20:d5:
d4:eb:b2:2c:55:5a:68:19:14:a6:0c:ac:aa:78:a9:
26:ec:9f:ae:6b:3a:4f:25:78:9a:b9:e5:2b:62:9b:
a4:e4:6e:9a:41:8f:c3:72:3b:27:77:7a:e6:4c:66:
6c:8b:bf:1a:94:d5:80:f8:4f:6f:17:f3:d4:a3:9f:
de:92:e4:7b:b6:7f:c2:17:e1:fd:c5:f8:da:0e:fd:
87:39:11:31:3b:49:23:3c:8e:db:e8:e1:8a:b4:b5:
d1:bf:e3:ee:4e:86:0f:06:b7:26:a1:a8:74:f0:ef:
a0:f0:37:e1:aa:92:6b:e1:82:50:2c:79:7c:49:f5:
6a:10:e0:ac:74:01:7c:36:85:74:ff:90:03:b7:af:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:C3:B7:C5:15:DD:85:96:D2:E3:B4:C8:ED:80:76:4A:01:81:28
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:47:bd:29:43:1c:56:49:4e:ac:7a:8d:f0:79:9f:91:08:58:
34:4d:c2:9c:3f:c5:11:cc:29:a8:ff:45:e2:cf:c8:15:da:5d:
21:b0:c3:74:e0:2f:6e:1c:c1:ba:fd:52:27:b1:7d:a3:5e:f5:
7c:bc:4d:62:3e:75:7a:e9:d0:78:8e:54:41:fa:83:b8:15:03:
e1:4d:53:bc:12:1d:e4:d5:89:2c:08:57:71:df:eb:b4:05:84:
ce:4c:40:8e:d3:dd:22:74:b8:7a:03:17:c0:ff:96:6b:b8:51:
66:67:e8:8f:47:43:14:9c:7c:0f:ff:19:00:df:20:fd:43:6c:
61:a0:de:c4:6c:39:1a:2b:91:ef:24:34:f6:c2:5c:a6:6c:75:
5f:8f:63:c9:1d:a3:20:09:b3:9e:3d:44:55:24:8e:b3:d1:54:
15:b3:e8:57:a6:14:7e:8a:51:e9:c0:86:cc:45:bd:87:20:c8:
26:67:d9:7a:d1:88:d1:41:17:09:f2:dd:f9:bf:41:0b:90:a4:
81:8a:e0:2f:68:6f:40:34:90:05:08:52:5e:f2:fb:76:87:5a:
58:47:44:f2:4f:e2:99:7d:f1:68:cf:60:07:d8:dc:b6:a8:9b:
b7:02:c5:28:72:63:50:10:a9:c6:74:62:65:83:d2:d1:f9:d9:
f1:33:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:49 2026 by rpki-client