Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: yHiDmufOvYm9szp7dn1cLMXKQBuoGU5I4Dpv6LpSna0=
Subject key identifier: BE:3C:D3:B7:88:71:08:A3:6D:DD:CD:E0:DB:F3:9E:4F:6B:D5:D8:AC
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 01A0D15C181A6DD2272703002ABB0F51B25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 199C
Signing time: Thu 24 Sep 2026 03:01:08 +0000
Manifest this update: Thu 24 Sep 2026 03:01:08 +0000
Manifest next update: Fri 25 Sep 2026 03:01:08 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: L38WeGj/lC5sO24pG78dozMEvQ6bN7h+pBxgdQqdjI4=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:18:1a:6d:d2:27:27:03:00:2a:bb:0f:51:b2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Sep 24 03:01:08 2026 GMT
Not After : Sep 25 03:01:08 2026 GMT
Subject: CN=be3cd3b7887108a36dddcde0dbf39e4f6bd5d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:fa:22:d9:0f:ea:49:06:84:da:06:82:b2:
86:46:65:4f:b5:42:d8:b9:52:d2:a2:66:a8:64:6e:
ce:90:83:da:04:52:30:cb:7c:22:60:ef:e7:34:b4:
fb:4c:37:de:21:99:00:43:f1:15:24:e6:01:08:21:
e4:a5:2d:8e:ea:b4:95:08:8a:03:02:51:cd:e9:80:
5f:10:6f:49:1f:27:b4:96:1a:2d:13:15:7a:9f:c9:
59:b4:f7:ad:a2:49:1f:13:4a:09:59:01:36:1f:4d:
2e:ac:c7:d2:78:94:81:f0:b1:5c:35:41:52:54:69:
83:80:7a:6c:7c:60:bb:9e:c2:ad:40:65:16:72:b2:
97:6b:f1:a1:b8:a8:24:8a:16:77:3c:69:b3:de:24:
06:08:05:c9:d9:08:dc:15:d8:a6:5f:01:0e:78:b0:
f5:06:13:29:dc:62:a9:42:ad:24:69:d1:6e:98:fc:
e3:d8:90:8a:c6:57:4d:0f:02:1d:41:ea:9c:72:7d:
71:28:6a:9d:97:bc:63:25:a1:54:99:4c:4b:c6:0f:
a0:95:d1:ef:cc:5d:92:e7:7e:66:f1:15:c1:08:f0:
52:b6:45:a9:f8:fd:b0:29:40:de:d0:1f:a9:7b:46:
93:2e:6d:9d:37:24:e7:03:6c:93:61:e9:f8:19:f6:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:D3:B7:88:71:08:A3:6D:DD:CD:E0:DB:F3:9E:4F:6B:D5:D8:AC
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8b:df:c3:e8:e8:43:02:1e:15:d2:fc:42:06:96:1e:5a:bf:
4d:08:bc:d4:cb:37:d5:8c:10:bb:28:93:0b:86:b4:64:2d:7c:
54:09:8c:d4:ed:44:f7:79:fa:42:ea:25:3e:9c:8c:d5:ea:09:
f1:85:bb:6b:85:2e:5d:49:58:23:35:c8:9d:3a:ee:db:20:48:
6f:d1:fc:7f:9e:e4:40:48:45:84:b5:f2:f0:8e:5f:e5:5a:fc:
a7:dd:7f:ba:cd:91:4d:46:98:18:c2:1a:f9:b1:60:08:d5:42:
c9:d6:89:fe:5c:04:b8:ae:b4:2e:6a:fc:6b:62:f1:78:b0:34:
1f:8c:0c:e3:47:65:5f:67:57:20:41:4f:c9:ba:61:11:a9:aa:
e0:ce:ff:b7:4c:c8:f8:03:c0:31:b0:e8:28:a8:9e:77:31:ee:
3a:c3:3a:5c:11:2e:be:e2:87:b2:45:6d:3d:66:0c:73:49:99:
8c:4c:e7:8a:9e:8e:db:7c:48:89:d7:dc:eb:f2:6d:84:09:8a:
b9:71:84:4c:2b:cd:60:bd:b2:8a:e1:bc:4f:42:60:25:e7:52:
02:52:ff:ee:08:fc:a0:8e:5c:70:96:e1:78:6b:c6:d7:9d:8f:
05:f9:c5:ee:4a:54:57:cb:0d:29:53:96:e8:4b:31:63:0c:42:
29:69:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:47:44 2026 by rpki-client