
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: FUQncBTEEwo3o9K0mEPmAnX3xmv8QTgegXuKd7u70sY=
Subject key identifier: 9F:83:AC:0C:CD:62:96:EF:5C:C1:B9:ED:24:B7:D8:42:36:C1:EA:85
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 01A13E260F66D8003435E06F3C518A2753EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 06:00:43 +0000
Manifest this update: Thu 15 Oct 2026 06:00:43 +0000
Manifest next update: Fri 16 Oct 2026 06:00:43 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: R10WsjuUTDU6tXJdinl5c7q6hW/a4wA6aImZiD2IP8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:0f:66:d8:00:34:35:e0:6f:3c:51:8a:27:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Oct 15 06:00:43 2026 GMT
Not After : Oct 16 06:00:43 2026 GMT
Subject: CN=9f83ac0ccd6296ef5cc1b9ed24b7d84236c1ea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f2:c6:4c:1b:da:0d:f9:e6:42:66:f8:bc:c1:
15:2b:a7:9b:d1:5b:1a:41:a9:1b:ff:9b:8c:04:a4:
d2:55:26:63:73:5d:57:c3:2e:f9:2a:fb:2d:79:e6:
ce:a3:57:75:a2:0d:f8:3c:db:b1:75:f3:7a:bc:86:
75:c8:d7:21:4a:15:3e:62:0a:cb:aa:bd:21:7d:b5:
48:af:e7:1b:8e:74:37:27:b3:7b:f6:b1:5f:74:8b:
6e:c4:13:9e:03:11:36:28:99:fd:06:7a:8f:c1:9c:
23:59:be:7a:8f:d8:73:0b:4c:07:c4:a8:71:2a:da:
7a:45:81:9d:7e:38:2f:c2:bb:67:a0:ca:a6:fc:a5:
cc:08:ac:41:17:0f:1e:65:9c:6e:3c:92:e0:ce:ea:
65:1f:e4:eb:0e:6f:49:b2:84:55:c4:3e:ef:45:e9:
bb:a0:9f:95:23:c3:51:28:95:1f:bc:16:47:52:1f:
62:72:ef:79:71:fb:e3:e0:d8:41:e1:fb:14:b8:b0:
30:ec:3c:d8:73:cc:7f:94:3e:2e:16:a8:fe:4a:93:
af:88:3c:fd:ce:6f:3f:db:c9:c2:51:07:df:09:81:
e9:b5:13:b1:91:f0:eb:cf:12:ad:75:4a:40:99:38:
50:79:08:81:2d:df:05:ab:1d:b5:a7:13:c5:dc:ee:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:AC:0C:CD:62:96:EF:5C:C1:B9:ED:24:B7:D8:42:36:C1:EA:85
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:85:3e:be:ea:bc:6b:12:9d:33:ab:b8:c7:9d:e8:e1:cd:
3a:5f:d4:6c:14:17:a3:79:c8:c0:6b:a1:2d:c5:a1:62:e3:2a:
17:97:aa:87:c4:fe:b6:ea:c3:93:da:94:7e:8f:50:f2:6a:1a:
40:5d:39:3d:fa:6f:14:e1:57:a4:68:7e:8f:4f:2a:0d:52:7c:
af:e9:39:0f:4a:88:fa:c8:45:b2:42:d2:49:6f:c0:71:4b:bc:
8e:b5:39:f7:bc:2b:4e:a2:9f:b8:78:d1:63:d2:70:f1:30:ce:
62:23:70:bb:1c:6b:10:c4:b6:c9:97:e8:f2:5f:64:64:ae:5b:
8f:21:00:12:31:f1:cb:17:79:ea:34:d5:a4:c8:b6:a0:18:f3:
3e:95:ad:79:ee:e2:69:6d:65:6e:97:be:1b:4e:90:f2:60:e6:
1c:42:e0:2e:f3:bb:1c:e6:53:2a:9d:52:2a:1c:30:a9:d7:a1:
58:13:45:6a:05:53:05:7d:97:06:bb:4c:88:a5:cb:58:c7:b8:
3c:15:1d:0d:0e:8a:ea:0c:95:d2:36:a8:f6:92:34:f7:28:0d:
6c:69:7f:1f:9b:25:92:43:99:00:49:c3:ec:6d:12:40:31:2c:
40:71:ce:6b:15:51:ed:3a:d1:03:50:f9:b4:ac:01:b2:4c:1f:
4a:aa:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:45 2026 by rpki-client