Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: +XfRjxgInRFyr3NJc9qkeDebTFkyC4U0qRB7Xxinj6U=
Subject key identifier: 1B:F8:C8:AD:F1:C4:8F:19:BE:21:7F:AE:25:49:D8:24:07:2A:17:66
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 01A13E94FB6A0CA38ABA51509F0D9C439EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 08:01:53 +0000
Manifest this update: Thu 15 Oct 2026 08:01:53 +0000
Manifest next update: Fri 16 Oct 2026 08:01:53 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: 7970hpdP/8dW9bsOrcAG8sYxReS9WxeNFWtk2ydGMaM=)
2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:fb:6a:0c:a3:8a:ba:51:50:9f:0d:9c:43:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Oct 15 08:01:53 2026 GMT
Not After : Oct 16 08:01:53 2026 GMT
Subject: CN=1bf8c8adf1c48f19be217fae2549d824072a1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:77:cf:6e:c8:65:74:1d:53:1b:0c:1c:21:
4d:2a:45:1f:be:fc:98:de:eb:63:b1:4c:3d:c7:06:
18:0d:f9:de:91:33:07:c3:13:76:dc:85:3b:1c:48:
77:c4:46:12:38:b0:39:f3:ea:ad:58:13:2e:75:20:
1d:f4:f6:6e:81:58:24:9f:3d:de:ae:e0:c7:17:c4:
ad:b8:1d:2e:9f:b2:74:8b:5b:ab:51:15:57:39:a8:
37:ad:3c:f0:44:9c:62:b5:01:7b:b9:b4:ed:1c:85:
d3:fb:f4:48:c3:f5:af:a3:85:bc:a1:aa:e2:c9:2e:
4c:d3:48:0d:2c:b7:29:ba:da:53:23:bb:b1:59:9b:
9c:f6:24:d5:b8:2d:dc:db:e4:bf:35:7b:55:85:80:
fd:fa:d5:d9:3b:66:da:1e:2e:11:43:cf:75:06:d9:
c0:3b:bf:90:57:42:cb:2a:b1:d1:57:c8:97:0e:b9:
d5:60:21:4c:04:0c:db:96:37:0a:ae:e6:9b:02:08:
37:a0:04:15:c1:0f:5d:7c:36:b1:7f:53:e1:2d:b2:
2c:5e:e5:50:ad:d7:4f:1f:4c:1a:f4:9d:0a:e8:01:
d5:ca:7e:32:74:40:c1:39:17:4f:ae:8d:13:55:ab:
e5:09:81:b6:69:76:10:64:f2:d2:28:db:ee:b9:4a:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:C8:AD:F1:C4:8F:19:BE:21:7F:AE:25:49:D8:24:07:2A:17:66
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ba:59:c5:1d:3f:9b:67:22:9f:ba:cc:da:70:45:72:ce:54:
49:4e:ac:35:d3:1a:57:3d:92:e1:e2:a9:e4:fc:06:c1:53:cf:
0b:1c:c7:0d:10:1d:65:b6:64:18:f4:89:86:27:bc:48:64:01:
5d:e3:e5:bf:58:fb:b8:61:c7:9d:a9:03:80:37:62:e4:72:32:
2c:28:05:b7:88:d0:6c:a5:da:72:3a:6c:a7:ed:21:52:88:bd:
f5:89:08:6b:6a:76:71:53:c4:44:90:a9:0a:0b:50:17:f1:7b:
36:ef:42:13:d6:e6:7f:f8:ca:72:1a:2c:18:74:05:bb:21:75:
14:23:c8:e5:9e:0c:f2:93:19:dd:4f:a2:ca:68:ad:ea:98:a8:
f6:e9:72:f2:dd:78:68:8f:8e:f9:12:17:a3:4a:ec:88:20:43:
47:ed:f1:86:ce:b9:44:af:f5:ce:d2:3e:22:7f:03:96:ad:18:
90:2a:da:af:eb:1a:33:b3:54:ef:c6:0c:eb:82:28:21:b2:1c:
98:4c:43:48:3a:73:c9:6d:89:8b:13:29:bf:9e:b7:e9:b4:48:
26:b1:a5:17:c4:d6:9a:5f:d2:a8:07:e0:69:af:15:d0:af:b9:
e7:7a:5d:f2:83:cd:8b:cc:33:9a:74:e0:b8:30:38:ed:dd:df:
7b:55:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:27 2026 by rpki-client