Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: 93WTlmnrtzn0rWsjnKvsWd8kWmSXr1FJ2+R6DXbv/Zo=
Subject key identifier: 7D:3F:FB:E0:F5:EF:49:F3:A1:88:F7:C5:FD:99:6F:79:9E:E3:BB:D6
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 019CE3DA528622D6A11F2CEB191B471F6CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 185F
Signing time: Thu 12 Mar 2026 21:01:01 +0000
Manifest this update: Thu 12 Mar 2026 21:01:01 +0000
Manifest next update: Fri 13 Mar 2026 21:01:01 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: 1mNox0g93DKFdUtfUCGOOOKup820/ZT0gL+N4iP06kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:52:86:22:d6:a1:1f:2c:eb:19:1b:47:1f:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Mar 12 21:01:01 2026 GMT
Not After : Mar 13 21:01:01 2026 GMT
Subject: CN=7d3ffbe0f5ef49f3a188f7c5fd996f799ee3bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:ca:3b:0d:74:83:3a:d2:ce:a5:75:81:2c:
ac:1a:1b:61:dc:48:d3:e5:73:09:81:30:d7:1d:19:
19:68:2e:24:43:4d:29:7c:43:de:db:3d:a9:04:cc:
ec:fc:43:d0:b1:71:aa:c8:9f:d3:fb:6b:0e:4d:d2:
8d:6a:b6:df:b4:b7:81:03:63:38:8e:2a:f1:c4:82:
fe:4a:bd:c0:7f:4f:76:e9:b0:82:de:fd:23:7c:fa:
9b:b1:df:e7:6a:bc:3b:26:bd:fa:5f:03:70:b7:06:
eb:92:13:a0:cd:33:c1:c1:d5:1a:03:95:10:3d:0a:
c6:97:a1:f2:17:0e:b1:ff:70:79:17:ed:2b:f7:9e:
f0:be:40:d9:a0:9e:6c:bd:5e:28:55:6a:5e:59:96:
26:7f:83:f4:79:40:b0:bb:29:44:f0:54:da:c9:68:
c4:07:6b:4c:11:93:83:b9:44:14:89:2c:bc:e4:58:
9b:5c:3a:07:4b:70:ad:45:f2:ab:00:38:49:45:48:
51:78:49:d5:6d:02:84:dd:95:b6:ca:0e:36:33:0a:
8e:a6:93:5a:ce:ae:04:5c:20:d3:63:08:ba:61:9e:
74:e9:fe:11:e1:1d:40:a4:f7:83:8c:38:f4:8a:5a:
b2:78:9a:4f:2a:3a:0b:45:c7:99:c0:1b:3c:88:ef:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:FB:E0:F5:EF:49:F3:A1:88:F7:C5:FD:99:6F:79:9E:E3:BB:D6
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c9:e8:fa:10:6a:a2:bd:fe:1d:df:91:e5:e8:dc:da:a0:6e:
c5:06:d2:fe:c8:16:be:cb:e4:0e:e0:8f:2d:be:88:2c:e2:2d:
9f:9a:2f:46:76:58:a3:59:64:30:b2:b1:f2:b7:b4:b4:59:90:
af:53:c7:3a:53:e4:09:68:24:cd:52:0f:b1:b8:b2:0e:72:6b:
81:9f:6e:36:60:56:8d:b0:bd:7a:2f:7b:4d:b9:31:79:2e:d7:
af:64:23:f1:b8:bf:3f:ca:71:23:17:9f:29:b8:f4:5e:e6:77:
fe:d5:01:fb:c3:91:c6:0f:99:55:33:2b:45:4c:e9:91:26:e7:
50:9d:9f:6a:d4:45:c6:f9:e0:4d:35:26:94:1b:35:b3:d9:bf:
68:ad:95:23:c7:c4:57:05:f1:3e:ce:b7:0e:72:ef:87:6f:b4:
62:ff:b2:c9:60:46:82:22:3a:73:cd:93:8f:f3:96:df:d9:ad:
fb:fe:44:f3:8e:2e:98:9b:b5:09:9b:bc:72:e2:1f:00:9d:8f:
f9:4c:b8:ba:da:03:4a:ed:c5:21:fc:b4:b8:34:75:2e:54:ba:
4c:a6:49:74:1b:31:4a:4e:59:25:c1:4a:0f:64:5c:8b:9f:f2:
aa:36:a4:06:12:12:b2:e1:52:80:a9:0f:0a:7d:62:a6:6c:b0:
70:a1:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:38:40 2026 by rpki-client