Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: 1au9JFoB2uxGpwAzXkmOflAcj83yzn1dZPTq1+bchOg=
Subject key identifier: 98:D1:A5:D2:0D:16:26:BA:40:4B:4D:44:6E:12:73:1E:85:46:36:36
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 019D39418F6EFA16A5EF646B03DF8D437359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: wbdMX30wd9WEs9ddCA87eA8n88A19kIzNlVlXPrCiGo=)
2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8f:6e:fa:16:a5:ef:64:6b:03:df:8d:43:73:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=98d1a5d20d1626ba404b4d446e12731e85463636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:c3:dc:0f:af:9d:32:42:5d:54:0f:f8:d4:
74:60:8c:d9:ec:55:ba:d7:fa:76:46:1c:b0:93:75:
34:95:78:72:a1:03:0e:40:35:47:66:b2:e6:a6:00:
88:da:33:ad:91:70:65:fc:4b:2e:83:bf:94:27:ef:
3b:0e:4a:ef:48:4e:01:08:1b:13:8d:79:d4:24:95:
a1:86:13:c2:17:51:de:b7:65:c1:21:fa:4d:4e:96:
bc:6c:46:11:71:bc:9f:04:a1:0d:c5:90:73:b7:dc:
56:6f:82:ce:71:4a:c1:be:ab:f6:ce:de:e0:2e:0f:
b4:d4:f2:af:06:0e:b1:61:9c:30:68:45:a0:80:1e:
b5:af:c6:dd:56:4a:b8:64:b8:3b:32:58:21:b6:3a:
2a:1d:62:b9:a3:b4:a2:7f:2d:ff:27:8d:a6:ae:14:
24:2e:9f:ee:31:ea:d0:24:22:91:bc:e2:2f:b9:53:
52:bb:50:56:7e:0e:5c:b9:b5:55:43:63:e8:d9:41:
3a:e3:01:cd:4e:74:48:c2:5a:59:4c:8f:7d:07:7d:
04:e8:46:c3:0a:49:61:ff:cd:76:b5:b7:e1:e2:84:
e9:b5:c8:1f:4c:16:40:cb:3b:a4:06:27:d1:df:ab:
2c:4d:4e:19:e9:a8:e9:8b:37:a7:64:1f:03:e8:86:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:A5:D2:0D:16:26:BA:40:4B:4D:44:6E:12:73:1E:85:46:36:36
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ab:a3:1c:a6:58:3b:f0:62:48:ee:90:7a:1d:28:af:4d:fc:
ed:27:00:1b:c2:f9:f9:f8:2f:53:17:5b:89:bd:e6:ba:cd:64:
5e:c4:7a:09:99:dc:fe:26:20:a0:e7:f3:50:e2:4e:6c:93:46:
95:aa:ec:70:99:cf:79:6a:27:b4:38:1d:15:2b:b8:24:be:71:
20:18:2a:c3:24:93:87:d8:16:dd:27:e2:18:6c:f9:e2:92:83:
f9:c3:ff:6e:ca:69:fd:33:ba:89:d2:4c:27:7a:6b:91:2a:e2:
fd:1c:be:39:96:a2:28:64:71:22:02:ea:a8:0d:92:11:0c:bd:
bf:b1:34:29:75:db:69:03:6d:75:72:08:3a:d2:5a:0c:c6:8f:
2d:a0:b2:1c:88:7b:b7:a1:5d:44:ed:ae:12:64:00:f7:02:70:
27:03:a8:b5:29:32:fe:13:c9:aa:19:81:a5:16:c3:5f:d8:6d:
be:41:1d:59:ff:ae:f9:5e:62:e2:be:ca:fa:1e:85:10:d7:04:
98:97:57:93:c2:a7:b3:94:30:ef:42:54:f2:ab:3f:d3:32:b9:
f6:97:b9:5a:73:9d:6b:b4:6b:e7:2a:e8:95:57:5a:79:81:24:
fe:75:e7:d5:34:84:cd:d8:80:b8:11:ae:da:d6:5b:ce:30:8d:
ef:74:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:24 2026 by rpki-client