Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: 9j0i9sb5st3xF8IGBcx34rsu5ooVyykPR3SRT3GY8BY=
Subject key identifier: C7:0D:C2:D3:34:D5:9B:05:11:21:4B:07:0A:53:C6:DA:64:BE:9D:B6
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 019D99D000B422AA1D3852C3A659A7E6D031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:00:38 +0000
Manifest this update: Fri 17 Apr 2026 05:00:38 +0000
Manifest next update: Sat 18 Apr 2026 05:00:38 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: 1ux73BIoL3DguCU4CyR0M5BtqjAWo2kVgByIs72/umg=)
2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:00:b4:22:aa:1d:38:52:c3:a6:59:a7:e6:d0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Apr 17 05:00:38 2026 GMT
Not After : Apr 18 05:00:38 2026 GMT
Subject: CN=c70dc2d334d59b0511214b070a53c6da64be9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:9f:eb:21:f5:a6:5a:af:fd:1c:23:23:d2:
af:0b:68:7a:3b:e5:d4:44:12:66:3e:3c:3c:df:69:
ba:b9:bf:52:f3:60:18:7b:f3:33:9a:cd:96:14:b9:
09:3e:7a:e2:48:eb:e8:df:fd:03:e2:1c:78:ba:c1:
ab:29:33:0a:0b:3d:0d:a2:83:f0:81:94:63:5c:29:
89:b3:64:c2:d2:5f:87:cb:e9:33:63:22:39:ca:d1:
f6:91:70:44:95:99:23:da:7f:71:2a:d1:c8:d4:75:
26:89:9d:0a:54:eb:25:b8:a9:a9:68:b5:99:3f:fd:
b2:00:55:c8:55:32:b0:d8:7e:b4:7f:bd:89:0f:67:
96:44:2e:47:cf:ba:78:33:f0:66:01:83:85:ce:48:
ea:1f:07:11:28:ab:dc:74:0b:cb:fe:58:ab:f4:b0:
1e:1d:f4:26:fe:7a:37:1b:51:10:d0:31:14:6a:a8:
38:93:4d:21:75:74:06:b5:16:1b:f1:ae:78:79:cf:
2a:29:33:93:03:64:dd:15:bc:ee:62:a6:b0:27:2f:
6d:09:74:46:5b:27:71:62:c8:73:a9:21:4d:62:60:
57:f0:42:07:77:5e:6c:60:f5:eb:82:3f:a5:a8:f4:
ad:e3:e6:ef:cd:78:e9:2b:b6:6a:49:d1:30:51:f6:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:C2:D3:34:D5:9B:05:11:21:4B:07:0A:53:C6:DA:64:BE:9D:B6
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b5:ec:f1:51:4c:1f:51:a3:e5:3d:7e:88:8b:a4:0f:0e:f3:
84:9a:cd:6f:0d:1c:20:b3:5f:c5:c8:25:90:30:ec:7e:b9:07:
a4:27:29:3c:cf:45:86:7d:af:2e:19:26:01:20:bf:6f:c0:80:
44:08:7d:7b:fd:61:b1:fe:36:1f:75:70:d2:d4:89:90:23:d0:
8b:e6:5d:29:f9:80:9a:a4:17:05:cd:af:6a:69:b3:ff:ab:a0:
f7:b3:df:15:80:93:30:10:ed:66:0d:16:bf:27:e9:74:43:5d:
7a:34:85:8f:d6:97:4b:65:15:1b:97:b6:d9:8b:ac:82:ee:b6:
a6:b8:61:d9:1a:d7:5e:81:e8:f0:6d:38:b8:06:6c:8d:0c:df:
5f:65:cf:f2:d9:0a:77:a8:2a:f9:ad:3b:e8:ff:48:1c:23:da:
39:42:34:04:e7:f6:fd:92:cd:26:8d:94:7e:67:12:6f:1f:00:
e5:4b:93:d7:98:b9:cb:70:d5:6d:8c:51:e1:aa:f9:ae:2f:79:
28:ce:95:07:37:4f:75:12:1e:d8:e7:8d:b6:e1:18:6b:53:df:
23:9b:b7:d9:22:51:6b:3a:df:21:1d:ba:c1:1b:ee:93:f7:2a:
03:8b:02:72:13:9c:fa:1e:fe:5e:d1:c9:02:a8:53:72:6b:f7:
bf:cf:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:17 2026 by rpki-client