Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: Ft05CsP1hFX+xang/+9H1Oazu95FLislT2cMz3wznGI=
Subject key identifier: C7:70:EE:E6:EF:3F:4E:08:C6:D3:8E:5C:A9:EE:47:E4:76:4E:FC:D7
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019D254C9E53B5ECAD6720A2FDC091F01A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: 03AF
Signing time: Wed 25 Mar 2026 14:01:11 +0000
Manifest this update: Wed 25 Mar 2026 14:01:11 +0000
Manifest next update: Thu 26 Mar 2026 14:01:11 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: R2v+MFnO5X0v88GRTWEP4jJUNtQWfOlZ2c8gBoM4f+o=)
2: MUCk0SPtOpnrCSsonRUiNf-3RDI.roa (hash: cldvRgqMPrIXa052aZpFy3AIu+aiC2LgD9YfPfUmyIQ=)
3: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:9e:53:b5:ec:ad:67:20:a2:fd:c0:91:f0:1a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Mar 25 14:01:11 2026 GMT
Not After : Mar 26 14:01:11 2026 GMT
Subject: CN=c770eee6ef3f4e08c6d38e5ca9ee47e4764efcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:82:a0:39:cd:b8:8e:3d:1d:71:95:82:43:
c7:b5:bd:e0:f2:29:1d:04:53:1f:73:aa:d3:95:ce:
31:fa:56:16:c3:bc:ae:ff:52:4e:97:d0:92:5e:72:
8e:84:d5:0d:e5:35:32:3b:84:0c:70:29:19:b7:9b:
94:f3:0e:07:89:da:bc:7b:a7:9c:e0:4d:8b:d7:eb:
de:3c:73:04:75:7e:b7:85:e1:d2:3b:ac:6a:d8:06:
a8:b7:9a:b3:f1:7e:69:4c:ea:f6:c7:89:ad:8b:7e:
6a:2a:87:a2:51:65:9d:81:8a:f6:7f:5d:63:84:db:
e9:4b:3b:fd:76:b3:42:f7:f2:aa:80:9b:a1:49:35:
21:50:73:ad:9f:60:f7:76:74:d2:da:f8:b2:32:3e:
a3:d0:17:4f:2e:91:32:77:91:69:30:92:1a:21:3c:
b7:e2:c3:3b:d9:b6:e8:d5:0a:f2:55:45:52:2d:9b:
93:38:ab:d2:28:7d:d6:9c:f8:bd:3b:3b:02:a4:08:
05:ad:95:e5:0c:b5:60:e6:53:73:a9:a6:bd:2a:23:
18:a1:3c:78:67:dc:aa:f6:78:f5:38:03:1b:4a:94:
cc:0f:64:a0:86:f1:f3:d8:de:e4:aa:55:26:0a:02:
49:f6:86:9f:c3:bf:0c:bf:58:1a:85:63:08:57:bd:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:EE:E6:EF:3F:4E:08:C6:D3:8E:5C:A9:EE:47:E4:76:4E:FC:D7
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:07:2c:e5:e4:cb:ce:a5:3b:9d:3e:84:56:cf:ae:68:fe:26:
c9:0c:86:33:7d:d3:79:58:2f:07:5c:5c:16:b1:a8:65:6e:83:
2a:82:19:95:85:7e:29:58:04:17:da:f1:6e:33:0f:5a:a2:3b:
5f:77:a3:35:8c:54:55:5b:11:cc:7c:64:54:3b:82:ff:cf:09:
1e:6a:ca:a0:bd:e8:74:60:88:c7:5a:a7:be:5a:55:95:25:a5:
a9:9e:95:ff:ca:93:c0:e0:83:de:ef:ca:2f:02:a6:6b:9e:e6:
ca:49:53:20:c3:88:e5:09:f9:63:52:61:84:2a:93:8b:ed:17:
7b:9c:37:63:7c:e1:fe:f0:61:5d:53:75:9a:1f:f4:17:c8:8a:
db:1d:0d:95:cf:a5:16:6a:a7:f6:e3:25:50:69:78:d5:92:42:
0a:f2:20:0d:3f:59:98:d8:bb:1e:7f:66:e2:15:68:54:7f:6f:
a0:b8:0e:7f:37:33:cf:0a:71:c3:0f:b0:55:5f:b3:21:38:99:
bd:9c:26:e6:6c:4e:4b:13:60:4e:2a:a4:d3:5c:94:c1:8f:fa:
8f:e9:03:65:d6:5c:40:66:b4:c5:70:5c:5a:77:5b:dd:ac:76:
e5:32:db:36:36:0a:4c:4a:68:74:ab:52:58:40:84:f8:f7:c8:
b2:f9:db:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTJ5TteytZyCi/cCR8BqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjYwMzI1MTQwMTExWhcNMjYwMzI2MTQwMTExWjAzMTEwLwYDVQQD
EyhjNzcwZWVlNmVmM2Y0ZTA4YzZkMzhlNWNhOWVlNDdlNDc2NGVmY2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy16CoDnNuI49HXGVgkPHtb3g8ikd
BFMfc6rTlc4x+lYWw7yu/1JOl9CSXnKOhNUN5TUyO4QMcCkZt5uU8w4Hidq8e6ec
4E2L1+vePHMEdX63heHSO6xq2Aaot5qz8X5pTOr2x4mti35qKoeiUWWdgYr2f11j
hNvpSzv9drNC9/KqgJuhSTUhUHOtn2D3dnTS2viyMj6j0BdPLpEyd5FpMJIaITy3
4sM72bbo1QryVUVSLZuTOKvSKH3WnPi9OzsCpAgFrZXlDLVg5lNzqaa9KiMYoTx4
Z9yq9nj1OAMbSpTMD2SghvHz2N7kqlUmCgJJ9oafw78Mv1gahWMIV72CZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdw7ubvP04IxtOOXKnuR+R2TvzXMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAcs5eTL
zqU7nT6EVs+uaP4myQyGM33TeVgvB1xcFrGoZW6DKoIZlYV+KVgEF9rxbjMPWqI7
X3ejNYxUVVsRzHxkVDuC/88JHmrKoL3odGCIx1qnvlpVlSWlqZ6V/8qTwOCD3u/K
LwKma57myklTIMOI5Qn5Y1JhhCqTi+0Xe5w3Y3zh/vBhXVN1mh/0F8iK2x0Nlc+l
Fmqn9uMlUGl41ZJCCvIgDT9ZmNi7Hn9m4hVoVH9voLgOfzczzwpxww+wVV+zITiZ
vZwm5mxOSxNgTiqk01yUwY/6j+kDZdZcQGa0xXBcWndb3ax25TLbNjYKTEpodKtS
WECE+PfIsvnbFQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:56:30 2026 by rpki-client