Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: 294rx0A07I+xWS9kGf7iALf2mh2/mzBYe0Y0irVuQeA=
Subject key identifier: 24:09:B2:06:20:51:20:B7:DF:C9:1E:24:BA:AE:2F:8B:CD:6C:55:B5
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019F84C4044D0945ECA299EF33015B12DDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 10BA
Signing time: Tue 21 Jul 2026 13:01:06 +0000
Manifest this update: Tue 21 Jul 2026 13:01:06 +0000
Manifest next update: Wed 22 Jul 2026 13:01:06 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: hIhs5h7LkBUojew1XlnXB6LxHyq+nsdAEbQP2zZMAfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:04:4d:09:45:ec:a2:99:ef:33:01:5b:12:dd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jul 21 13:01:06 2026 GMT
Not After : Jul 22 13:01:06 2026 GMT
Subject: CN=2409b206205120b7dfc91e24baae2f8bcd6c55b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:24:7d:63:45:fe:5f:37:6e:25:31:9a:da:
5a:05:6b:b2:b4:ca:ff:4b:a6:82:9c:9e:52:ea:80:
ba:8b:58:02:5f:63:92:55:c1:cd:7c:f0:2c:6a:56:
3b:a1:93:d2:8a:7b:05:d9:ff:13:02:88:81:c4:e8:
f7:35:15:d1:f0:c8:da:b1:c0:0c:cf:19:34:60:97:
07:08:a9:57:fe:d1:2d:f9:41:0a:9d:5f:e1:3b:79:
85:a1:43:e4:1f:4d:ae:da:a8:be:71:bf:13:f3:25:
6c:ed:f7:44:1c:59:e4:05:8a:3b:84:32:f3:38:12:
a6:a8:5e:b3:32:be:0a:0f:33:fe:6d:09:a4:b9:da:
3c:69:66:b2:9b:3e:d1:7c:13:cc:23:6d:9a:f0:43:
19:9c:41:a9:98:43:36:20:93:bd:c5:ec:b1:cf:1f:
a1:6e:86:8b:e6:3f:9f:16:32:5a:77:89:35:78:b1:
b5:9b:ac:2f:f2:03:53:5b:ba:40:28:8e:6d:39:66:
af:a8:c1:9f:bc:1c:39:af:50:7c:4b:12:50:d6:17:
b1:fb:8f:36:55:0d:2e:c7:cc:11:94:12:62:8d:59:
2f:ed:fc:5f:5a:cb:92:89:c2:3a:04:71:8f:45:54:
15:c4:06:46:2d:04:e5:00:aa:73:39:06:46:5d:76:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:B2:06:20:51:20:B7:DF:C9:1E:24:BA:AE:2F:8B:CD:6C:55:B5
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5a:ee:e5:43:f5:9d:c7:52:db:63:38:07:94:8a:41:d8:b5:
f4:44:d7:bb:c3:16:d7:7f:fa:f0:1a:33:0b:70:47:44:ab:c5:
0f:f9:ab:4e:c5:ff:d8:e4:cd:93:bb:4c:d7:5d:e0:d3:cf:71:
bc:77:41:b8:10:1f:04:14:30:3e:47:cd:33:a1:87:03:97:c5:
63:8c:1b:2c:7c:7e:b6:c8:f4:18:07:eb:75:ee:00:be:96:8e:
43:24:fd:37:c8:cf:ab:fc:49:6b:11:21:d1:64:b3:74:c0:90:
5a:01:36:10:16:93:d7:e2:a2:2c:a1:0c:a1:da:43:74:e9:7e:
7c:5f:28:6d:d9:e3:3c:3a:6c:0b:f5:9c:09:79:e6:8b:8a:e6:
12:51:8b:75:04:68:08:ff:ea:19:d1:2b:31:03:ad:31:e6:1b:
30:cd:5f:c9:74:30:56:f9:e2:16:99:d1:bf:fe:d5:40:df:53:
3e:00:92:24:4a:c0:a6:37:4b:b6:66:b6:f0:4a:5f:28:58:39:
f6:4f:81:0f:fe:95:d5:2f:4b:95:b5:5e:3d:32:fd:bd:59:6d:
0b:6e:44:84:0e:4a:76:4f:70:5a:2d:64:15:15:03:be:2e:07:
21:79:a5:e4:9a:20:aa:a6:da:d0:e5:a5:c1:c0:15:ad:ba:07:
0e:79:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:10:25 2026 by rpki-client