Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: rMo2Ip1/cLyvpGTbYzm7dRBBJIpqFd7doKuXe33+3UI=
Subject key identifier: BC:86:FB:33:85:C0:17:85:6B:B7:AC:5B:A9:E1:9B:7B:8F:2C:6D:66
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 019CAA5848B080E8AF637A9A9FFEF3AC3282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: pcWdA2q1JKnyAFhaYjRBOU3KMmApgXo70kI3Ack3aDU=)
2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:48:b0:80:e8:af:63:7a:9a:9f:fe:f3:ac:32:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=bc86fb3385c017856bb7ac5ba9e19b7b8f2c6d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:08:6a:24:5a:d7:5a:2b:8e:3c:d6:40:12:
0d:02:1b:a3:cf:ca:d6:22:55:29:29:1e:11:e6:ba:
d7:10:03:64:fd:00:68:3a:04:22:c5:7b:5d:c2:50:
47:8f:af:d2:5c:25:63:f8:9b:d8:9a:46:87:e2:40:
bf:e6:86:27:e4:79:c8:c0:d6:c9:bc:3d:bb:bb:d0:
7a:b2:74:46:b6:a5:69:1d:93:d8:da:cb:6a:0f:0a:
a5:d0:1e:46:c6:0f:a8:96:4a:49:6b:84:05:03:7b:
95:55:47:8e:2b:63:11:d8:4f:b8:e8:4b:73:15:8a:
2d:d6:64:23:32:02:45:05:2e:fa:2c:c1:29:a9:6d:
e8:88:32:0c:ac:f3:76:21:e6:4e:f2:90:3a:97:58:
ff:15:ae:48:ba:64:3f:a1:ac:20:bc:ab:c9:1c:b2:
f5:5a:3d:98:8a:a4:c0:f9:ac:0f:c6:8f:b8:c0:ba:
15:55:d0:9a:f2:36:84:b3:9a:7e:19:b2:98:bf:92:
d3:d4:c1:a0:a7:e0:7b:be:79:a2:84:c4:ba:af:a8:
4d:9a:1a:ea:8f:06:01:7f:c6:d2:8c:f2:b5:2d:93:
ef:37:54:5b:7c:d3:2c:a9:49:63:b7:b1:c6:9f:37:
5b:76:28:8d:06:f3:d8:bf:7a:90:12:4d:10:ab:8e:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:86:FB:33:85:C0:17:85:6B:B7:AC:5B:A9:E1:9B:7B:8F:2C:6D:66
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:70:ad:12:7c:54:51:00:dc:1f:7a:92:e0:39:73:f1:bb:0a:
b5:3a:dc:c4:63:34:e7:ae:06:1b:b6:09:79:2d:23:4a:2e:3a:
2b:f1:21:c8:84:bc:38:d6:73:00:10:dd:60:ae:71:b8:9b:41:
05:42:b8:95:b9:f4:64:1f:3c:a6:92:51:f6:87:9d:e9:61:30:
7c:c9:e2:c2:96:3f:6f:bd:fd:e7:16:6e:12:68:5e:6f:9e:77:
e5:c5:88:36:24:3e:be:04:76:b6:90:1b:18:03:b3:4f:7f:a9:
44:bf:2f:1f:5b:4b:3a:e8:02:ac:54:07:58:77:9d:d1:e0:9b:
99:3e:f1:74:9e:4a:9d:56:5e:5b:f8:a8:c0:13:fe:6b:55:b6:
ef:bb:77:54:35:59:be:63:4c:1d:01:24:e3:1f:c7:e5:5e:59:
7a:da:42:61:bf:31:67:ce:58:8c:5a:32:21:d2:c7:01:11:e8:
f5:90:a5:88:cd:ee:1c:f5:62:5b:53:53:cb:a9:c7:03:44:cd:
31:4e:e7:db:a3:7b:dc:50:b9:1e:22:cf:f2:f3:9d:27:c0:0a:
40:23:37:36:50:66:b9:a3:29:72:54:ba:f2:03:41:f5:af:e3:
c2:aa:41:db:a4:0e:c2:f0:69:52:0f:b5:ed:ee:b7:83:b3:a6:
45:d1:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:38 2026 by rpki-client