Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: U3TLZ5h2MnLBezlZYU3blY0XgSXgVwDvWUQs4RW2Hps=
Subject key identifier: 27:47:5D:71:57:8F:48:DA:7B:9A:01:75:29:05:A7:17:D2:D3:F9:9A
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019FABD1510713B063911A23C030F353A03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 1904
Signing time: Wed 29 Jul 2026 03:00:49 +0000
Manifest this update: Wed 29 Jul 2026 03:00:49 +0000
Manifest next update: Thu 30 Jul 2026 03:00:49 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: tkbrP5yXo8+g/SVe+cq7Yr+vgf9lPll97AtuZ1KXZ64=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:51:07:13:b0:63:91:1a:23:c0:30:f3:53:a0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jul 29 03:00:49 2026 GMT
Not After : Jul 30 03:00:49 2026 GMT
Subject: CN=27475d71578f48da7b9a01752905a717d2d3f99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:8b:c5:d2:b8:db:50:a4:4a:c7:83:4c:2f:
aa:81:b2:44:1a:7a:a3:d3:b4:a3:c4:81:9e:0f:e0:
f2:6f:62:28:68:ae:b2:50:a2:b2:f7:3c:08:02:14:
cb:00:47:a3:72:4b:25:f9:42:87:08:52:ad:d9:52:
41:32:fb:56:9b:fb:c5:5a:60:d6:01:c0:e4:b6:d9:
38:e4:18:9f:63:52:d1:31:70:c8:44:78:f4:c3:b0:
2e:5f:a9:26:6e:7f:0a:6c:be:41:8a:c3:cd:e4:c8:
bb:fc:3a:c2:fa:ac:1a:aa:df:0d:b3:c5:4c:15:0a:
1a:93:a4:96:b9:e8:08:6a:e3:03:66:ab:55:18:0b:
be:a2:3d:c2:27:1a:e3:9d:21:44:d1:99:04:25:45:
fb:35:54:66:2c:92:3f:15:42:42:e4:87:25:1a:f2:
66:33:0a:a7:72:25:4c:52:be:9f:fa:0d:8b:1a:6a:
4f:62:b6:6a:0a:aa:d5:33:6b:53:61:65:bf:3f:fa:
78:63:1f:55:f1:1e:18:a7:3c:7b:43:4b:2f:4e:c0:
ea:db:c6:17:92:07:38:53:c5:04:38:46:3c:06:37:
aa:6f:d0:e0:fd:91:17:28:b8:d6:6b:0c:eb:09:80:
cf:57:9e:3a:f3:b2:73:ec:7b:8b:bf:94:cf:c9:0d:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:5D:71:57:8F:48:DA:7B:9A:01:75:29:05:A7:17:D2:D3:F9:9A
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:78:8a:6e:4a:41:e9:cf:04:cd:be:42:f8:fc:f4:16:ee:54:
d2:b8:b4:cc:d9:ce:3f:c3:9d:df:88:3b:13:c4:8d:6f:31:18:
1c:e8:72:75:a0:57:be:0d:60:e5:d9:6f:b6:cd:7e:a1:b6:6b:
08:4e:41:ec:f8:e3:62:21:fc:d8:81:7d:28:97:4f:0e:96:2e:
f9:98:c6:71:77:2b:a1:d9:37:91:01:14:02:70:e2:7b:3e:c2:
09:89:d0:5b:22:f2:6d:57:31:53:7d:1c:88:f3:60:e0:16:a1:
02:d3:cb:b2:9c:8e:32:b4:d5:51:82:18:ba:5c:28:30:c2:da:
2c:b1:ce:1a:fa:80:4a:1a:23:dc:bb:4f:1b:ad:62:2f:17:4d:
68:5d:e0:5d:62:ed:c1:d9:db:1c:c1:28:83:9c:90:3b:ce:ad:
17:a7:22:69:94:9a:da:7b:0a:e7:b6:62:2d:92:04:6c:72:ea:
de:63:c3:41:aa:07:92:bc:36:0d:b5:cf:76:a9:15:47:02:34:
9e:6d:3b:40:4d:7d:d7:74:e2:17:82:c9:6d:2a:23:f1:f7:32:
e6:5b:b7:65:2c:9d:ac:ba:b1:bb:f6:f9:a0:a1:f1:af:16:ec:
f0:97:f4:15:be:42:08:87:e3:14:f2:96:95:5c:d2:15:d3:77:
f3:98:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:35 2026 by rpki-client