Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: N3ThuhAuOXxUjA9rqjBSFSB5bnrVZ0KhAnPITN4xdPc=
Subject key identifier: B3:F2:D2:CD:35:ED:27:44:C8:5A:BC:B7:32:7D:EC:F1:07:43:DD:63
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 019E1CEC01EC942AD754E692B74B3FF104D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 05F2
Signing time: Tue 12 May 2026 16:01:29 +0000
Manifest this update: Tue 12 May 2026 16:01:29 +0000
Manifest next update: Wed 13 May 2026 16:01:29 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: bUhrJix3OmFjDvt8brixJZTJKX/5psDNhE+cXoA+lDU=)
2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:01:ec:94:2a:d7:54:e6:92:b7:4b:3f:f1:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: May 12 16:01:29 2026 GMT
Not After : May 13 16:01:29 2026 GMT
Subject: CN=b3f2d2cd35ed2744c85abcb7327decf10743dd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:8d:4e:02:28:4c:fb:ba:4e:cf:bc:69:d0:
43:c7:00:8d:51:91:09:c3:c7:6c:41:a6:17:4d:fd:
e3:64:db:25:f0:6f:a6:f5:1e:52:23:4a:c4:57:0d:
4a:7d:7a:79:0e:5b:de:5a:05:51:31:2a:80:d4:17:
e2:3d:aa:ad:e6:49:68:86:24:23:4a:82:8e:5d:1b:
53:5c:90:c4:98:2d:e9:16:2a:ee:3d:4f:ac:7e:8d:
12:af:14:ab:fe:67:1d:ed:1d:17:0c:8d:66:fe:78:
48:92:e2:cd:cc:9d:98:03:7a:83:07:90:1a:46:55:
f0:0b:f1:b8:96:15:5f:d1:dc:9e:ab:d5:38:8a:94:
a5:36:89:77:e6:aa:c6:01:47:b2:1b:76:4f:10:e3:
d9:45:02:57:ba:b8:01:7e:e3:4c:64:2f:dd:6a:8a:
5b:0f:f9:69:90:da:73:c9:91:aa:ab:78:29:d2:1c:
0c:0a:4e:d1:09:ea:f2:ba:24:da:f5:13:07:56:93:
59:76:c7:e9:0c:b6:3e:52:eb:54:cd:00:30:df:8f:
df:a1:79:aa:56:0c:47:ca:a6:83:b8:2d:54:91:8d:
73:08:57:63:bc:e6:22:2d:bd:13:dc:89:b3:c4:da:
13:90:60:a6:72:f9:9e:cc:e6:a5:97:01:62:2a:93:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F2:D2:CD:35:ED:27:44:C8:5A:BC:B7:32:7D:EC:F1:07:43:DD:63
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:2f:a3:02:18:d3:80:a7:86:d3:18:77:65:0e:fc:35:5e:
f4:06:1c:83:07:0e:66:f4:64:a6:a9:8a:a4:e6:26:63:19:ab:
30:61:73:00:e4:9c:b5:62:35:b6:65:eb:45:24:ff:c7:0b:78:
2a:e1:de:f1:a7:44:a0:da:99:5e:ab:4a:59:88:1a:4f:b6:ea:
17:fd:9c:90:fa:a3:80:c0:0b:52:86:b3:13:c9:b4:6d:38:57:
f8:fb:73:21:f5:7e:d3:65:21:95:51:93:4f:c1:7c:55:81:43:
82:47:56:3b:e5:d5:e2:50:8a:cb:88:69:70:3c:42:60:8d:25:
ab:3d:93:e9:7f:a6:86:0a:c8:7e:37:03:b8:12:e5:56:88:0b:
1a:62:17:8f:c1:22:26:77:88:0f:97:40:4d:c7:b5:ae:df:b5:
4c:54:0f:60:e5:68:6f:7c:33:d8:88:13:f9:68:6e:53:1d:58:
7b:4b:c0:89:14:03:45:59:29:b1:3e:36:ba:e1:a4:39:8f:5f:
1f:36:ad:89:3f:c8:1b:a4:04:99:c9:26:54:cc:4d:28:d8:4d:
b1:b6:d7:f1:01:ea:35:11:03:eb:77:50:11:35:75:80:09:26:
a1:6f:85:32:5f:30:8c:e5:45:cc:75:30:d3:60:66:23:f6:04:
97:7c:9f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7AHslCrXVOaSt0s/8QTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3
YTk5M2UwHhcNMjYwNTEyMTYwMTI5WhcNMjYwNTEzMTYwMTI5WjAzMTEwLwYDVQQD
EyhiM2YyZDJjZDM1ZWQyNzQ0Yzg1YWJjYjczMjdkZWNmMTA3NDNkZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBGNTgIoTPu6Ts+8adBDxwCNUZEJ
w8dsQaYXTf3jZNsl8G+m9R5SI0rEVw1KfXp5DlveWgVRMSqA1BfiPaqt5klohiQj
SoKOXRtTXJDEmC3pFiruPU+sfo0SrxSr/mcd7R0XDI1m/nhIkuLNzJ2YA3qDB5Aa
RlXwC/G4lhVf0dyeq9U4ipSlNol35qrGAUeyG3ZPEOPZRQJXurgBfuNMZC/daopb
D/lpkNpzyZGqq3gp0hwMCk7RCeryuiTa9RMHVpNZdsfpDLY+UutUzQAw34/foXmq
VgxHyqaDuC1UkY1zCFdjvOYiLb0T3ImzxNoTkGCmcvmezOallwFiKpNuIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPy0s017SdEyFq8tzJ97PEHQ91jMB8GA1UdIwQY
MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt
ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl
LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy0vowIY
04CnhtMYd2UO/DVe9AYcgwcOZvRkpqmKpOYmYxmrMGFzAOSctWI1tmXrRST/xwt4
KuHe8adEoNqZXqtKWYgaT7bqF/2ckPqjgMALUoazE8m0bThX+PtzIfV+02UhlVGT
T8F8VYFDgkdWO+XV4lCKy4hpcDxCYI0lqz2T6X+mhgrIfjcDuBLlVogLGmIXj8Ei
JneID5dATce1rt+1TFQPYOVob3wz2IgT+WhuUx1Ye0vAiRQDRVkpsT42uuGkOY9f
HzatiT/IG6QEmckmVMxNKNhNsbbX8QHqNRED63dQETV1gAkmoW+FMl8wjOVFzHUw
02BmI/YEl3yfEA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:37 2026 by rpki-client