Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: CzK0m2ekMR92Jm1sinT9g5XX2fmTMZVm1cLc7iABnZw=
Subject key identifier: 9D:9B:76:A6:AA:1A:2E:31:E7:40:1C:28:5D:EB:64:BD:3E:F4:A3:EE
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019D98BDD53EFF8845CADDA01D35BD87A6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 17F1
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: romBu8336/VDlkyhkgeOVmpMehc+wphp/SwVKrFILqM=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d5:3e:ff:88:45:ca:dd:a0:1d:35:bd:87:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=9d9b76a6aa1a2e31e7401c285deb64bd3ef4a3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:8e:36:6c:59:76:a6:5a:37:f4:19:39:eb:
72:67:bb:c4:8d:76:bf:5d:54:f7:63:07:66:ad:55:
0a:32:32:68:41:cd:d3:00:90:26:47:a2:01:c4:7e:
fd:f8:d9:95:ff:b4:fa:05:17:3c:70:82:bd:f8:ba:
da:9c:be:8d:ec:a6:96:99:81:1c:bc:c3:e0:6f:da:
92:11:33:90:50:78:53:8b:08:53:2d:5d:4e:c1:b9:
a7:c2:8d:59:f4:1d:1a:b2:6d:13:06:b5:dc:d4:83:
bd:ad:0c:a9:d1:c0:33:d8:6e:3c:38:19:1e:de:8e:
a6:31:26:2d:c1:1a:b4:59:4c:9e:f0:0a:52:87:fc:
6f:49:64:7f:d8:61:79:3f:28:eb:93:9d:58:c6:0d:
0f:e1:0d:05:c5:fe:af:0e:f7:ff:db:6c:81:71:84:
02:f1:db:be:c2:a7:53:72:d4:40:90:1a:05:be:ca:
3b:6b:75:cd:a7:7d:18:2b:70:b5:01:ac:03:73:54:
08:cb:96:92:01:db:cc:27:86:bd:2a:a8:b8:d3:34:
1d:73:61:73:ea:38:ee:e5:9d:08:e5:9c:bf:f3:c1:
81:0a:6d:22:ac:03:24:6d:8c:bb:9f:00:8f:71:69:
06:32:29:35:c1:3f:1b:96:eb:31:82:47:b1:2a:aa:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9B:76:A6:AA:1A:2E:31:E7:40:1C:28:5D:EB:64:BD:3E:F4:A3:EE
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:f5:a7:60:e0:a4:1c:3c:af:ce:cc:f5:ba:5b:0f:7e:48:
96:43:2f:09:91:19:44:de:f6:3a:50:f3:8e:2f:d7:b8:be:b6:
c3:a0:1d:45:9b:33:40:c6:a7:85:8b:46:81:f6:92:f5:ae:dc:
84:09:7b:4b:83:0a:ce:a6:05:7a:67:f0:34:0a:60:bb:38:b3:
06:f0:23:31:6e:3b:84:aa:e6:65:42:58:e0:37:fe:55:67:2d:
ad:94:ca:70:38:a5:7d:a6:95:51:01:d2:5f:f8:75:c4:b6:78:
a4:5b:d0:8b:bf:64:79:93:48:97:3a:8b:b0:20:74:14:7f:1e:
26:d7:e1:6f:f6:14:0d:65:d8:3e:c5:7b:89:aa:dc:30:b1:95:
01:10:1d:f2:b9:a8:3b:b6:89:ea:e2:2b:f8:49:85:96:56:23:
1d:59:cc:ec:be:2f:6b:cb:16:ac:be:b2:1c:4c:23:4e:8a:80:
1b:21:82:47:e3:2c:27:94:5f:0f:a3:7f:e4:91:7d:57:10:be:
31:7f:ee:23:2e:99:45:24:f7:68:cb:8e:f1:da:05:55:fd:bc:
c7:f5:1b:63:fb:3b:ac:2f:c2:08:77:26:56:64:cc:58:e6:76:
7e:38:55:82:9b:22:9b:66:9c:a1:12:73:61:36:bd:2a:94:d3:
65:52:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:38 2026 by rpki-client