Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: bpm7OEaZvcxvl90JoKoJSq89e9yauwmQJyfSu2ADYgY=
Subject key identifier: FF:D1:2F:A3:69:ED:F7:0A:A4:AC:93:31:FC:FE:5E:DD:54:1D:F4:A2
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 019DCD8725C88657F70FF61CE2313210D41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 18D8
Signing time: Mon 27 Apr 2026 06:01:19 +0000
Manifest this update: Mon 27 Apr 2026 06:01:19 +0000
Manifest next update: Tue 28 Apr 2026 06:01:19 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: B3KTAXY4bEKuQ4zf08GFjacR6Kzvi+X5DSCsBBbGJa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:25:c8:86:57:f7:0f:f6:1c:e2:31:32:10:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Apr 27 06:01:19 2026 GMT
Not After : Apr 28 06:01:19 2026 GMT
Subject: CN=ffd12fa369edf70aa4ac9331fcfe5edd541df4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:75:1a:fd:28:f2:2d:15:02:93:c1:7c:12:
c5:ee:22:37:59:6e:c7:63:75:51:b3:10:73:c5:07:
09:bc:dc:9d:4f:f4:63:38:9a:30:45:a2:04:f7:5e:
ca:7b:d4:94:78:8a:51:b1:f0:ec:49:a2:b6:78:a2:
95:8f:e2:7c:70:4a:67:75:96:76:ca:6a:c6:10:e4:
d2:08:91:97:68:c6:53:a5:d7:e9:1c:ba:d6:03:69:
45:63:4b:03:0c:f8:73:20:49:be:f7:42:8a:4d:c3:
60:fc:a8:44:95:a6:71:34:52:91:09:06:e8:ed:1f:
64:85:12:e5:ad:58:98:95:3f:2f:1b:c2:e3:00:eb:
4e:cb:ce:f5:0f:35:f9:87:20:5b:84:73:7b:ed:b6:
d8:eb:04:7e:53:0d:e0:a2:a4:36:71:af:a0:03:45:
f3:5f:9d:5b:0b:31:8f:ea:0d:1f:06:b1:4f:89:47:
a5:ba:f5:9f:54:5e:f5:82:f2:91:9e:bf:e8:c4:21:
5d:3d:9b:1e:a8:72:9c:77:9f:70:b2:c2:f1:17:20:
96:33:0f:45:80:b9:ad:d6:eb:96:f4:dc:7c:37:c0:
b3:9c:ad:67:7c:f8:84:a7:91:de:5a:b1:a1:fe:78:
d5:bd:e5:66:8e:df:27:90:05:34:68:e5:d5:65:2d:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:2F:A3:69:ED:F7:0A:A4:AC:93:31:FC:FE:5E:DD:54:1D:F4:A2
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:61:8f:6d:88:22:16:c9:07:78:cd:b7:88:f5:42:98:5f:56:
18:95:b5:65:4a:d5:97:c9:47:b5:fa:88:d5:5c:0c:6e:eb:98:
9f:4d:51:7a:7b:4b:7e:62:7d:1c:67:40:c0:97:48:97:fa:2a:
78:8a:f8:70:19:de:82:47:fa:5c:51:f5:4f:92:93:11:fa:da:
b5:ca:24:b1:dc:6a:15:ba:97:88:df:87:cc:56:28:47:a7:d8:
90:4d:0d:ed:18:f7:d4:14:93:7d:36:5b:f1:1e:b8:e1:39:b3:
c1:fc:a4:f1:94:f7:89:41:22:de:65:ac:42:5e:3f:b9:94:49:
fd:1a:b6:9b:a3:b4:b3:0c:8b:a3:75:95:01:ff:f8:7b:de:84:
55:4f:fb:73:13:6a:ec:ef:6b:f2:07:b5:6f:b8:b9:0d:cb:9d:
e1:ca:69:b8:40:3b:b6:cf:b4:90:21:21:6f:1e:ea:59:84:7c:
a9:a6:6e:ba:13:19:f4:e7:a7:2b:94:8f:6b:c6:4a:97:2c:91:
94:5d:f0:43:90:e3:55:20:57:be:80:de:7b:9c:19:52:84:e3:
8d:71:ee:7e:74:63:be:1c:9f:18:e5:ed:cf:28:a9:1c:56:c1:
62:51:de:14:55:b7:cf:68:c5:31:a7:e7:ae:be:35:fc:d2:04:
4f:4e:f9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NhyXIhlf3D/Yc4jEyENQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGI1YzFlZWNiYTg2MGNmZmYxNzQ3OTY2ZDc2M2M5YTgy
ZjZkOWEwHhcNMjYwNDI3MDYwMTE5WhcNMjYwNDI4MDYwMTE5WjAzMTEwLwYDVQQD
EyhmZmQxMmZhMzY5ZWRmNzBhYTRhYzkzMzFmY2ZlNWVkZDU0MWRmNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR51Gv0o8i0VApPBfBLF7iI3WW7H
Y3VRsxBzxQcJvNydT/RjOJowRaIE917Ke9SUeIpRsfDsSaK2eKKVj+J8cEpndZZ2
ymrGEOTSCJGXaMZTpdfpHLrWA2lFY0sDDPhzIEm+90KKTcNg/KhElaZxNFKRCQbo
7R9khRLlrViYlT8vG8LjAOtOy871DzX5hyBbhHN77bbY6wR+Uw3goqQ2ca+gA0Xz
X51bCzGP6g0fBrFPiUeluvWfVF71gvKRnr/oxCFdPZseqHKcd59wssLxFyCWMw9F
gLmt1uuW9Nx8N8CznK1nfPiEp5HeWrGh/njVveVmjt8nkAU0aOXVZS3J+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/RL6Np7fcKpKyTMfz+Xt1UHfSiMB8GA1UdIwQY
MBaAFNuLXB7suoYM//F0eWbXY8moL22aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84NjNiMGMtYjFhYy00ZDdjLWFiYzIt
ZmI2ZjAzN2EyODdlLzEvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84NjNiMGMtYjFhYy00ZDdjLWFiYzItZmI2ZjAzN2EyODdl
LzEvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWGPbYgi
FskHeM23iPVCmF9WGJW1ZUrVl8lHtfqI1VwMbuuYn01RentLfmJ9HGdAwJdIl/oq
eIr4cBnegkf6XFH1T5KTEfratcoksdxqFbqXiN+HzFYoR6fYkE0N7Rj31BSTfTZb
8R644Tmzwfyk8ZT3iUEi3mWsQl4/uZRJ/Rq2m6O0swyLo3WVAf/4e96EVU/7cxNq
7O9r8ge1b7i5Dcud4cppuEA7ts+0kCEhbx7qWYR8qaZuuhMZ9OenK5SPa8ZKlyyR
lF3wQ5DjVSBXvoDee5wZUoTjjXHufnRjvhyfGOXtzyipHFbBYlHeFFW3z2jFMafn
rr41/NIET075hQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:24 2026 by rpki-client