Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
File: 25ksue1Yj0M3zLP7Eby5qy7KL0o.mft (raw, json)
Hash identifier: 0kZ2tuXLL4q70GVa30XfpYCjOA3wh0KtealGjEdJpDs=
Subject key identifier: F3:E0:F6:49:AB:7F:13:78:67:F9:C1:CC:14:8B:C0:9F:62:64:66:5C
Authority key identifier: DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
Certificate issuer: /CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Certificate serial: 01A0CE232F50D608AEC87EF4FC3129ECB97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
Manifest number: 0282
Signing time: Wed 23 Sep 2026 12:00:07 +0000
Manifest this update: Wed 23 Sep 2026 12:00:07 +0000
Manifest next update: Thu 24 Sep 2026 12:00:07 +0000
Files and hashes: 1: 25ksue1Yj0M3zLP7Eby5qy7KL0o.crl (hash: zIvtsSK7J/85eVywHc0iLCH+UNLsTY4IzlE/YOCZ1KI=)
2: lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa (hash: IGnpPw3ahwQuaJhVH+cw2ULWyqjDG7gfjxfW66UmWow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:2f:50:d6:08:ae:c8:7e:f4:fc:31:29:ec:b9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Validity
Not Before: Sep 23 12:00:07 2026 GMT
Not After : Sep 24 12:00:07 2026 GMT
Subject: CN=f3e0f649ab7f137867f9c1cc148bc09f6264665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:9f:cf:6a:7a:f5:e9:79:35:bb:ff:42:9c:
5b:20:19:0b:81:c0:bb:8e:a9:a0:e7:a3:6a:f7:85:
d1:10:a4:8b:42:1f:a6:c7:16:2a:af:ab:0d:96:4e:
3e:aa:d8:2e:6f:73:36:ce:f0:38:c2:44:7b:b1:d8:
b8:ff:fb:ef:8d:76:e4:2a:61:a3:59:c3:19:53:37:
09:60:c6:21:96:5a:d8:e1:65:7f:d1:0a:87:5f:89:
32:c7:cd:ee:8b:0f:62:1f:35:c4:e9:18:78:7e:f7:
09:2d:0a:a3:03:d0:0f:07:4c:5e:e2:d0:66:77:f5:
4b:b6:b5:ff:8d:aa:dc:e9:8f:4f:1f:d7:09:ad:08:
2b:ae:e5:ae:b9:f3:50:cc:ff:2a:a6:ae:ee:33:6c:
f4:fd:25:83:73:35:78:65:29:40:70:bd:fb:3e:3e:
fc:bc:78:39:53:25:f2:34:86:4d:b1:7f:76:02:ff:
07:2c:53:29:00:23:7a:75:13:92:49:23:38:07:24:
9e:aa:11:8e:68:21:9d:81:60:f1:70:e4:4a:a5:7f:
a3:7f:37:15:96:c7:e6:13:c9:e3:c0:da:44:c5:d4:
9d:2e:3d:10:12:4c:32:c9:32:22:bc:ae:fc:37:c2:
12:6d:ec:ec:83:34:7d:18:7b:01:65:d1:e0:bb:ce:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E0:F6:49:AB:7F:13:78:67:F9:C1:CC:14:8B:C0:9F:62:64:66:5C
X509v3 Authority Key Identifier:
keyid:DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:4d:d3:be:50:6d:a2:c2:c7:97:1c:8d:19:e1:2b:54:8d:
93:a7:2b:03:7e:93:28:3f:98:45:d2:96:69:7b:b3:b8:fc:1b:
b2:86:c0:d2:5f:da:8d:97:32:04:6c:15:7d:a8:22:95:11:2e:
63:d9:8f:e3:c5:5f:2d:ac:a7:88:62:c1:3b:10:3c:3a:3e:92:
a1:5a:dc:80:54:c1:83:53:49:72:71:e7:45:2c:41:51:7d:ec:
63:af:94:8c:83:9f:11:49:e9:8c:78:5b:d5:c3:ee:4f:7e:0e:
70:b5:51:db:28:3a:bf:a4:0f:98:1c:09:e1:a2:ce:50:83:94:
f0:38:02:b7:14:b5:97:70:09:0e:0b:ba:db:7a:c9:ea:10:9d:
fa:12:64:09:c3:79:f0:01:28:65:c0:bc:ba:bf:81:ae:b4:9c:
ad:21:0e:d6:76:43:8a:14:1c:95:4b:02:57:2d:d8:b8:ac:c4:
53:d1:26:e2:ec:91:14:9a:20:26:a0:f1:84:d9:59:9f:cf:26:
18:ca:cd:d0:db:31:d4:c8:24:d1:7f:ef:78:f0:15:cb:c5:ff:
7c:52:1c:5c:f8:62:d2:74:cc:37:a3:4b:ba:28:87:17:4d:f1:
1c:91:3d:2a:5d:c4:1d:7f:11:3e:ce:5c:9f:c3:8c:b8:97:fc:
1e:7c:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:57:59 2026 by rpki-client