Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
File: 25ksue1Yj0M3zLP7Eby5qy7KL0o.mft (raw, json)
Hash identifier: YwywM9zS360T+07xCnybvm6/IygJaTcZDZ5NZJ70HXM=
Subject key identifier: EB:D0:42:C6:7E:71:7E:52:DF:94:CE:1D:2C:2F:06:8C:5F:40:FE:5C
Authority key identifier: DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
Certificate issuer: /CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Certificate serial: 019D2583712BA41D47FCE1FC3158298B9850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
Manifest number: 9D
Signing time: Wed 25 Mar 2026 15:01:04 +0000
Manifest this update: Wed 25 Mar 2026 15:01:04 +0000
Manifest next update: Thu 26 Mar 2026 15:01:04 +0000
Files and hashes: 1: 25ksue1Yj0M3zLP7Eby5qy7KL0o.crl (hash: 4D5CbLlSlR+a77ERmGnKw48oZhp5M28EDNB5XoZYLv8=)
2: lCVXJSEp_GTcd-Q5LEY4oqJjN0U.roa (hash: IGnpPw3ahwQuaJhVH+cw2ULWyqjDG7gfjxfW66UmWow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:71:2b:a4:1d:47:fc:e1:fc:31:58:29:8b:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db992cb9ed588f4337ccb3fb11bcb9ab2eca2f4a
Validity
Not Before: Mar 25 15:01:04 2026 GMT
Not After : Mar 26 15:01:04 2026 GMT
Subject: CN=ebd042c67e717e52df94ce1d2c2f068c5f40fe5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:80:56:47:76:f9:66:c5:66:ca:e9:3f:d8:
51:d6:c7:b0:45:5d:9e:7a:a2:70:8c:f7:a6:d3:3f:
91:b3:c5:c7:59:1e:fa:9b:ac:a4:0b:ac:d9:06:14:
2e:33:bd:c5:34:69:6f:4c:8b:21:70:2f:87:96:51:
b0:b6:bb:0e:b7:a9:8f:59:e5:df:d6:37:54:89:39:
0b:99:44:02:b7:b6:fa:4d:a2:31:89:c5:ac:78:7d:
0c:65:3f:99:ca:69:2c:ac:6c:03:88:1e:ca:9a:5a:
7e:ad:33:fc:d2:b9:bb:f1:2a:ab:a2:2a:4b:32:15:
63:f8:87:6f:56:60:31:56:1d:5e:df:0a:eb:7e:75:
22:fd:f2:f1:92:6d:ed:a6:1f:22:52:60:15:65:8e:
ff:b0:93:4e:6d:2e:ee:a0:91:3a:6f:66:1a:93:d7:
d2:c0:b2:5d:81:68:e9:4e:59:70:e7:1a:3a:e7:2e:
d6:7e:e1:46:d3:28:7d:bd:23:fb:5b:b9:c0:2f:55:
ad:d1:a7:02:a1:00:b5:75:47:f6:70:75:e2:b9:df:
3d:16:ad:a8:31:9d:9e:f4:09:0c:51:ac:79:63:9b:
8d:ac:c0:04:c8:38:07:09:0c:9c:4c:3c:42:d7:33:
14:33:c2:d4:de:a2:27:3f:12:4a:7c:5f:65:da:e7:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:42:C6:7E:71:7E:52:DF:94:CE:1D:2C:2F:06:8C:5F:40:FE:5C
X509v3 Authority Key Identifier:
keyid:DB:99:2C:B9:ED:58:8F:43:37:CC:B3:FB:11:BC:B9:AB:2E:CA:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ksue1Yj0M3zLP7Eby5qy7KL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8fe048-2ea9-4ea6-9259-0dcd4596c16e/1/25ksue1Yj0M3zLP7Eby5qy7KL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5f:4b:f3:59:29:06:f6:b4:95:36:68:72:87:7e:86:29:c1:
2b:a0:9a:4c:c7:f6:e5:56:d8:82:84:5c:b9:b5:73:8f:64:de:
96:76:ef:09:c8:f5:3f:b0:07:a1:9b:97:a4:d9:3e:ab:04:05:
9b:19:3a:14:22:3a:5b:27:1a:c7:06:69:c9:e3:a7:19:e3:a7:
4e:21:68:fc:26:d1:22:b8:10:66:22:1a:d3:a5:dd:1a:c2:26:
73:de:9a:10:1b:bb:6d:27:ca:fc:92:44:02:4d:f5:8c:47:6c:
f8:de:c1:4d:f1:ba:e6:94:6c:87:26:d9:30:51:c9:fb:62:18:
de:2b:1d:03:85:72:72:94:c1:64:88:39:33:54:37:f7:0c:ac:
6a:e5:06:bd:70:d1:bf:4c:e1:83:5d:36:35:b5:64:b1:05:64:
ea:88:3a:1f:8a:54:e7:36:42:02:29:7d:d0:8d:09:86:72:05:
c1:ee:ce:3a:4a:d6:cb:17:10:31:f5:f2:43:1f:d4:4d:dd:c6:
27:f0:35:d8:94:c5:0d:b8:b1:d3:65:23:9a:e5:f7:b4:35:04:
3a:04:3f:19:89:5e:88:65:91:5e:90:e5:7a:a7:62:38:b4:3a:
49:f3:24:2a:0d:77:12:33:cd:23:88:21:a7:cc:d6:ce:5e:05:
f7:3a:99:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg3ErpB1H/OH8MVgpi5hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTkyY2I5ZWQ1ODhmNDMzN2NjYjNmYjExYmNiOWFiMmVj
YTJmNGEwHhcNMjYwMzI1MTUwMTA0WhcNMjYwMzI2MTUwMTA0WjAzMTEwLwYDVQQD
EyhlYmQwNDJjNjdlNzE3ZTUyZGY5NGNlMWQyYzJmMDY4YzVmNDBmZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XKAVkd2+WbFZsrpP9hR1sewRV2e
eqJwjPem0z+Rs8XHWR76m6ykC6zZBhQuM73FNGlvTIshcC+HllGwtrsOt6mPWeXf
1jdUiTkLmUQCt7b6TaIxicWseH0MZT+ZymksrGwDiB7Kmlp+rTP80rm78SqroipL
MhVj+IdvVmAxVh1e3wrrfnUi/fLxkm3tph8iUmAVZY7/sJNObS7uoJE6b2Yak9fS
wLJdgWjpTllw5xo65y7WfuFG0yh9vSP7W7nAL1Wt0acCoQC1dUf2cHXiud89Fq2o
MZ2e9AkMUax5Y5uNrMAEyDgHCQycTDxC1zMUM8LU3qInPxJKfF9l2ueW6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvQQsZ+cX5S35TOHSwvBoxfQP5cMB8GA1UdIwQY
MBaAFNuZLLntWI9DN8yz+xG8uasuyi9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVrc3VlMVlqME0zekxQN0VieTVxeTdLTDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZmUwNDgtMmVhOS00ZWE2LTkyNTkt
MGRjZDQ1OTZjMTZlLzEvMjVrc3VlMVlqME0zekxQN0VieTVxeTdLTDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZmUwNDgtMmVhOS00ZWE2LTkyNTktMGRjZDQ1OTZjMTZl
LzEvMjVrc3VlMVlqME0zekxQN0VieTVxeTdLTDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl9L81kp
Bva0lTZocod+hinBK6CaTMf25VbYgoRcubVzj2TelnbvCcj1P7AHoZuXpNk+qwQF
mxk6FCI6WycaxwZpyeOnGeOnTiFo/CbRIrgQZiIa06XdGsImc96aEBu7bSfK/JJE
Ak31jEds+N7BTfG65pRshybZMFHJ+2IY3isdA4VycpTBZIg5M1Q39wysauUGvXDR
v0zhg102NbVksQVk6og6H4pU5zZCAil90I0JhnIFwe7OOkrWyxcQMfXyQx/UTd3G
J/A12JTFDbix02UjmuX3tDUEOgQ/GYleiGWRXpDleqdiOLQ6SfMkKg13EjPNI4gh
p8zWzl4F9zqZrA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:32 2026 by rpki-client