Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: WGPxgNnW0od3LHA674qJYPJ1L2kJOjDnDbaPeSlMWcU=
Subject key identifier: EF:0D:F9:46:3E:64:99:01:84:7D:B7:C3:E9:C0:9F:98:3A:E2:23:6B
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019DB16AAA21A577E899270733DE4A274BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0FC8
Signing time: Tue 21 Apr 2026 19:00:50 +0000
Manifest this update: Tue 21 Apr 2026 19:00:50 +0000
Manifest next update: Wed 22 Apr 2026 19:00:50 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: BcZujvsPUljYGmJtXUIa6dEHST7EcyVMVzGK7Zib2bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:aa:21:a5:77:e8:99:27:07:33:de:4a:27:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Apr 21 19:00:50 2026 GMT
Not After : Apr 22 19:00:50 2026 GMT
Subject: CN=ef0df9463e649901847db7c3e9c09f983ae2236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:29:e7:a3:b3:d9:b9:cc:ba:05:55:f9:2b:
29:be:69:5b:3a:7a:c0:5e:bc:ee:d2:26:cd:ca:37:
73:cd:c4:76:df:8f:dd:ad:24:0a:fc:eb:f5:c6:65:
44:6c:42:30:4a:86:21:c7:11:64:7b:1f:da:3e:cf:
6a:5a:2d:62:99:aa:e5:ad:5a:1b:76:7c:99:68:c3:
05:1b:f5:6a:cb:d6:74:7f:e3:c4:19:1c:3c:3f:31:
de:ab:bc:2e:87:df:df:8f:b6:38:6b:13:28:b7:8a:
20:a0:f3:9b:a4:52:61:d9:c2:74:95:27:8f:fc:e8:
a1:35:5d:a3:d7:9b:1b:55:85:1e:67:2d:d4:44:58:
7e:2a:8b:b5:cc:3c:a5:eb:9c:ea:82:f5:05:e1:e8:
8d:35:2c:fa:e0:bc:b5:c7:85:2a:42:81:6a:f1:4e:
ba:70:9e:93:8e:fc:33:01:9b:c0:35:2c:0a:fc:82:
b5:7d:12:b3:d3:55:29:d7:7c:65:e1:8c:af:15:8c:
13:27:36:57:df:d1:d4:e9:9d:ab:3a:56:9f:3d:22:
fa:d0:d9:5c:b7:f2:7d:0f:ed:26:e8:93:11:83:31:
d3:ed:98:ba:e2:56:f0:52:09:87:ca:b7:2f:c4:be:
f5:92:75:5c:24:9d:98:8b:22:ec:10:91:68:36:10:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0D:F9:46:3E:64:99:01:84:7D:B7:C3:E9:C0:9F:98:3A:E2:23:6B
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:06:fb:a6:08:ac:fb:40:a4:29:e3:1f:48:9c:59:6f:79:
31:93:32:32:a6:b5:e9:67:01:f6:bc:f3:1b:e0:80:eb:5e:cf:
5c:30:f9:d3:3d:8d:4f:11:ca:95:47:bd:33:76:3b:a9:3f:72:
e4:d9:15:1a:dc:27:58:f3:23:66:bc:d5:65:6c:74:49:7e:cb:
24:3a:84:80:ec:a1:b4:24:04:b4:69:d0:2a:2c:86:df:5f:ae:
58:73:b5:c9:74:93:3c:24:74:b3:95:ee:73:fb:33:f7:0a:b5:
ce:22:e3:9b:13:53:0f:79:76:ce:a5:8c:a4:9c:00:07:2a:cf:
99:6b:a0:70:de:70:27:9b:3b:81:a7:f4:e6:10:ed:42:58:55:
13:c2:78:95:51:a6:fa:d9:1e:e4:ee:08:a0:a8:48:eb:9d:e7:
08:1f:ad:a6:10:33:f2:72:11:80:c1:5a:cb:5c:d9:13:89:bb:
9b:9e:d9:da:12:9e:2f:db:0b:d2:bc:52:7c:87:98:00:f9:dc:
a4:08:31:84:72:07:9d:1c:1f:b6:db:cf:a2:74:20:3b:df:81:
60:bf:47:6c:bb:26:54:98:08:74:ed:f4:34:ab:36:c7:8b:13:
07:49:98:8a:12:fe:17:a8:19:7d:46:32:c7:40:31:08:a7:01:
7b:65:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:10:02 2026 by rpki-client