Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: 8NnhHpvCnuIbQbWqSYrISTKlI0IuzZOrB3UkEV4A8Gg=
Subject key identifier: A2:55:BC:3C:72:90:E0:71:60:78:1D:D3:C9:2B:C1:C9:C9:1C:BD:8F
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019CC7BEED7907AE22F9791F88F8240733EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0F4F
Signing time: Sat 07 Mar 2026 10:01:44 +0000
Manifest this update: Sat 07 Mar 2026 10:01:44 +0000
Manifest next update: Sun 08 Mar 2026 10:01:44 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: 8kd6oKEVgRa/AKXQOf+Np3sIs1CBRxLPxO1l0dUqUVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:ed:79:07:ae:22:f9:79:1f:88:f8:24:07:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Mar 7 10:01:44 2026 GMT
Not After : Mar 8 10:01:44 2026 GMT
Subject: CN=a255bc3c7290e07160781dd3c92bc1c9c91cbd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:3a:85:08:99:48:0b:ad:1b:8f:2f:e3:b9:
ef:73:fe:1c:4c:69:ab:44:8d:22:01:57:4e:45:5d:
71:aa:fe:48:9f:d0:44:88:5b:42:f3:05:de:db:c7:
c6:8d:5d:e6:b0:f2:b8:ba:e2:8e:57:be:c4:01:90:
7c:b1:01:cb:7c:13:91:ba:ff:d2:6e:15:e5:7a:25:
87:df:16:2a:19:b0:89:98:52:04:d4:e2:36:e5:db:
1a:ce:b7:7f:a4:58:eb:04:da:99:01:1e:09:20:52:
45:eb:53:6c:37:89:a3:59:fb:b0:46:f7:ab:f6:a0:
b5:f4:80:b6:5b:67:bc:dd:c3:a5:6d:ef:f2:96:17:
61:df:47:24:69:c9:e0:79:be:e0:ed:90:58:17:47:
5e:a8:99:e7:0a:6a:52:8a:be:61:7a:74:85:df:d5:
ee:90:62:8e:c0:ef:91:80:fc:bd:4a:e0:9a:ae:43:
27:f4:db:a1:97:59:2d:d5:e0:6e:f6:14:33:10:18:
b0:e0:b6:4e:c9:9f:86:fb:5f:fe:d7:68:b3:dd:0c:
fb:3d:cd:50:bd:aa:b4:89:b8:88:7b:cf:27:c8:2a:
a6:ec:db:da:3d:76:c6:fc:c1:c6:b8:25:53:fc:e4:
55:2e:84:f4:4e:ed:30:4d:1e:59:76:d9:d6:ef:fc:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:BC:3C:72:90:E0:71:60:78:1D:D3:C9:2B:C1:C9:C9:1C:BD:8F
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a9:95:87:eb:52:08:37:e0:64:72:a1:9b:5a:7e:84:68:e9:
2d:c0:63:58:88:42:ec:3f:1b:cf:19:4a:17:e7:83:09:db:7b:
47:5c:b8:39:53:03:71:cf:60:43:9b:f5:c6:dd:46:01:44:06:
51:11:8d:25:79:22:be:8d:a9:61:fb:b4:f5:1a:3f:dd:75:45:
fe:a9:99:97:11:0b:74:25:ce:f4:8f:d6:33:e2:5a:30:58:d5:
20:aa:3b:03:f8:f0:22:78:e1:d0:2c:72:38:2e:9b:44:c5:64:
13:05:98:a1:f9:88:31:2e:4a:55:de:4b:af:d7:6e:af:b2:8f:
2a:02:14:65:6d:9e:69:45:c6:92:90:d7:53:2c:56:a9:db:c5:
f9:81:01:5c:05:d0:a3:b8:69:bd:ac:c2:4a:62:62:f9:69:d2:
41:b3:15:46:c7:fd:b2:a3:fc:c1:36:29:3d:ff:32:ee:8a:c6:
3e:d1:26:81:c6:c4:cd:6b:ad:e8:37:5c:bf:17:b0:e8:0a:0d:
b4:54:7c:51:69:91:b9:20:55:3b:11:1c:67:52:9f:77:0b:59:
95:e9:59:1a:cf:d9:7d:41:cd:f8:36:38:01:ba:71:5b:0b:d3:
e2:f4:67:f5:f2:74:2d:84:cc:43:01:b3:42:25:3d:20:27:c1:
23:cf:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:04:05 2026 by rpki-client