Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: TiXf4LDN5hOBtZUEDA5alNY60jLvfI/2t/MbUlvnTL8=
Subject key identifier: 1F:A5:E3:19:06:9A:A0:B0:DD:02:88:B1:66:41:1B:AC:1C:4C:96:88
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019CAD22696E0BAE96AFACBE3F72EB848583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 1777
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: CSCKBw+mLM5SjExAdFDMt9VA946EYdVCUoinbhBUFLA=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:69:6e:0b:ae:96:af:ac:be:3f:72:eb:84:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=1fa5e319069aa0b0dd0288b166411bac1c4c9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:6f:c8:ba:48:cf:25:f0:e2:cd:0d:e0:41:
11:4f:25:d8:a7:83:39:8b:ac:40:82:34:62:38:e0:
b2:2c:f8:7b:88:a0:ad:0f:62:18:cc:06:fb:27:88:
62:af:87:33:0e:1a:6c:b3:74:e9:de:57:8a:a9:76:
b2:bb:af:58:09:d3:8b:2c:e4:6e:2c:1f:97:0c:a6:
07:a2:ab:a3:72:eb:2c:a0:67:8b:53:ac:f9:f3:e9:
10:16:69:62:a3:a8:4e:64:7c:60:b9:1d:c2:ae:86:
06:82:74:85:e2:d4:56:df:c2:3f:d4:2c:65:fb:ce:
be:3a:4e:90:43:51:15:8a:68:24:e8:6d:ee:41:7e:
c3:12:32:b0:1e:88:6c:67:80:24:a5:3d:ad:7a:07:
9f:f1:20:7f:65:0a:f0:58:80:69:34:67:85:78:a4:
a9:58:bc:83:e0:4b:96:b3:5a:37:a3:91:06:01:1d:
9d:a1:ac:87:ea:f4:47:42:9e:5b:66:0c:34:f8:23:
c1:a5:e6:cb:03:79:b6:91:13:41:da:0e:a5:b4:c6:
4c:71:06:65:cb:84:d4:d2:35:6d:11:8b:8f:fd:5b:
15:15:18:58:cb:47:51:84:81:af:81:99:56:03:af:
0b:94:26:71:2f:2e:37:d7:bd:32:34:6d:08:45:1a:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:E3:19:06:9A:A0:B0:DD:02:88:B1:66:41:1B:AC:1C:4C:96:88
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:91:6a:5b:7a:8a:a4:49:0e:07:d6:33:3f:2b:78:50:cf:
42:a4:0a:5b:39:c1:12:51:ad:5d:8b:b1:b1:10:04:11:a4:4d:
4f:9f:36:67:f3:87:27:6d:70:6d:13:1b:f2:b0:3b:f0:70:5d:
97:e1:ff:2e:78:67:18:f8:a9:61:f6:73:66:4d:27:96:e7:56:
83:fc:f2:f6:44:26:eb:fc:92:55:d8:e8:aa:0b:c4:35:87:75:
0f:54:1f:25:7b:86:5b:14:ac:2b:64:2f:98:24:13:d0:9b:90:
b1:1d:25:6e:f8:0d:17:22:a2:17:9d:db:85:5d:b7:ea:46:2d:
7b:23:17:c3:d2:e2:b1:cd:86:13:6a:d3:18:fc:d1:b4:5e:89:
32:e2:d9:9f:60:07:f4:b7:50:7e:1f:ff:79:8f:43:2f:93:a3:
81:35:98:bc:cc:74:1e:34:0e:a6:da:c6:7a:05:be:bf:c5:75:
55:44:90:f4:eb:61:34:79:4f:e2:40:98:6a:c8:38:9a:fa:8b:
34:85:1e:dd:c8:6f:4b:79:1c:8b:63:93:47:24:67:06:17:0d:
7c:2c:9f:61:6a:c7:92:00:21:1b:50:82:d8:a8:6c:46:cb:1b:
d1:a4:82:2f:64:a0:e8:4a:8a:7a:a0:13:ad:c0:0f:04:3e:1f:
65:82:b3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImluC66Wr6y+P3LrhIWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4
N2Q0YjMwHhcNMjYwMzAyMDYwMDM5WhcNMjYwMzAzMDYwMDM5WjAzMTEwLwYDVQQD
EygxZmE1ZTMxOTA2OWFhMGIwZGQwMjg4YjE2NjQxMWJhYzFjNGM5Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+hvyLpIzyXw4s0N4EERTyXYp4M5
i6xAgjRiOOCyLPh7iKCtD2IYzAb7J4hir4czDhpss3Tp3leKqXayu69YCdOLLORu
LB+XDKYHoqujcussoGeLU6z58+kQFmlio6hOZHxguR3CroYGgnSF4tRW38I/1Cxl
+86+Ok6QQ1EVimgk6G3uQX7DEjKwHohsZ4AkpT2tegef8SB/ZQrwWIBpNGeFeKSp
WLyD4EuWs1o3o5EGAR2doayH6vRHQp5bZgw0+CPBpebLA3m2kRNB2g6ltMZMcQZl
y4TU0jVtEYuP/VsVFRhYy0dRhIGvgZlWA68LlCZxLy43170yNG0IRRrb3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+l4xkGmqCw3QKIsWZBG6wcTJaIMB8GA1UdIwQY
MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt
NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk
LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADriRalt6
iqRJDgfWMz8reFDPQqQKWznBElGtXYuxsRAEEaRNT582Z/OHJ21wbRMb8rA78HBd
l+H/LnhnGPipYfZzZk0nludWg/zy9kQm6/ySVdjoqgvENYd1D1QfJXuGWxSsK2Qv
mCQT0JuQsR0lbvgNFyKiF53bhV236kYteyMXw9Lisc2GE2rTGPzRtF6JMuLZn2AH
9LdQfh//eY9DL5OjgTWYvMx0HjQOptrGegW+v8V1VUSQ9OthNHlP4kCYasg4mvqL
NIUe3chvS3kci2OTRyRnBhcNfCyfYWrHkgAhG1CC2KhsRssb0aSCL2Sg6EqKeqAT
rcAPBD4fZYKztg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:04 2026 by rpki-client