
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
File: 26EiB69NGGxE2iUzwLjx_R9V2Ns.mft (raw, json)
Hash identifier: lJqaHjhbXDzGyy8khM7GPQ1o6gHPyNik+H2Sl6xEn3A=
Subject key identifier: DE:F7:6B:EB:C0:04:41:AC:0F:A7:58:8C:56:50:BA:C1:D2:53:77:8C
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 0199FBEBF8EEB1064A109BB1CD5FABE24611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: 26EiB69NGGxE2iUzwLjx_R9V2Ns.crl (hash: owFe3FaPDrCkOyLWbG5e0XHp//pDmzDBChAytQhP+bQ=)
2: 7j4WA3ysp1rOkVmQlKAKuU1wD8E.roa (hash: 50o1sY9mxiaVzB3RiC3eXccX8VD4SmfGqHVWyBgG97Q=)
3: HZK1nXmWN-rO-mSEBWdam8_Ekw8.roa (hash: 7EEOHKjjtUzUNB//SlEOoxLrukB2bXMqrOoSHuBhLss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f8:ee:b1:06:4a:10:9b:b1:cd:5f:ab:e2:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=def76bebc00441ac0fa7588c5650bac1d253778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:d2:c0:9c:ae:0e:fe:a3:d0:79:02:59:de:
91:0e:78:9e:7f:a6:2c:43:0d:d2:76:bd:75:be:d9:
16:1a:64:4b:c4:7f:2d:97:f3:34:08:a3:86:5a:a3:
d9:51:f7:7f:c9:75:75:6e:fe:ef:8c:7e:0c:b8:dc:
7b:69:f5:b2:73:fe:85:29:92:4a:63:75:86:33:41:
aa:fe:07:ca:07:7b:54:8c:a7:14:d1:71:3f:62:cd:
d3:13:0d:74:f2:a3:48:62:44:88:42:23:cd:66:2b:
a4:a6:92:39:b7:f3:98:40:11:6e:84:64:66:a3:5b:
aa:00:5d:20:9c:e3:da:65:35:43:1c:45:20:5c:2b:
a3:d0:bf:89:0e:b1:41:ad:da:6c:21:62:41:35:0d:
84:44:1b:c4:82:07:bb:1f:2b:56:96:80:ef:5e:3c:
54:a8:c6:68:c3:4c:90:9f:e1:e1:24:b2:58:b9:4f:
a8:d0:48:6d:3f:ef:25:b4:c4:85:f7:a4:56:86:5f:
c5:4a:a2:38:02:08:2e:07:cc:38:05:93:23:af:b5:
99:9b:3c:46:33:80:ad:52:3c:cf:8d:64:57:7e:6f:
16:dc:98:33:0a:09:63:dd:48:a2:17:f5:88:b0:8f:
9f:cc:d4:6d:96:dd:aa:c2:2a:e3:f0:82:ec:d9:63:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:6B:EB:C0:04:41:AC:0F:A7:58:8C:56:50:BA:C1:D2:53:77:8C
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6c:95:4d:c8:f7:85:cf:4d:42:0d:2c:d4:93:42:0c:1b:b7:
ea:05:c5:45:86:b0:f8:79:34:55:b4:d0:bb:50:9f:32:01:10:
08:e7:42:c8:88:a2:6a:23:19:0d:75:72:64:db:ce:a0:5f:59:
50:6e:42:5c:ba:95:35:49:08:b8:05:60:88:8a:42:99:a3:ff:
6f:79:47:de:81:b6:e4:63:0b:e7:4e:f2:25:2d:31:42:46:09:
27:51:9d:be:45:c1:19:ba:e4:9b:d5:77:4f:a0:ed:50:57:a3:
78:63:86:ea:3b:45:6c:ad:47:68:52:48:32:ad:f6:92:af:25:
a3:d2:7f:98:92:3a:3c:b2:ba:91:59:7d:f8:c1:a0:14:58:29:
6f:3c:04:83:78:bb:50:19:13:da:ca:7d:fb:c1:7c:58:8b:15:
50:ec:3b:f7:59:38:2e:c8:c0:43:61:2e:40:51:79:f1:d3:b7:
4d:42:32:22:e0:0e:c1:6b:61:81:21:c7:f9:ff:f7:2e:a2:70:
dc:95:83:f2:16:7a:f1:a5:98:a7:68:8a:26:d1:7f:68:c0:c4:
1f:7e:de:f2:25:f6:d3:e9:1b:83:d6:48:c0:26:62:da:89:ed:
05:41:c7:65:b2:30:72:cc:9a:31:af:3e:5f:d0:65:d7:a6:f6:
a2:4c:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:12 2025 by rpki-client