Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: LSeAp/UR2/ss5Lc+tsg/5/EGllQm3OQqpLMu4+1MJwI=
Subject key identifier: 59:AB:EE:D8:96:8B:EC:9A:31:CE:03:C0:F3:6F:5F:3A:2B:5E:32:22
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019D382E939A2B8F3F8E1DBE1544205CE175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 17BF
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: 5knpbgZIgVIyPKIUs+WhdvnaH/+VZY1jXLGyjbBE0oA=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:93:9a:2b:8f:3f:8e:1d:be:15:44:20:5c:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=59abeed8968bec9a31ce03c0f36f5f3a2b5e3222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:8d:cf:fd:14:a8:ab:1e:1b:2f:f3:dd:47:
f1:4b:43:fc:db:12:2f:c1:e4:b9:cf:76:30:29:20:
87:eb:fa:89:a1:d7:5d:26:94:04:05:be:a8:5e:cc:
bd:0f:05:d7:d4:32:83:fc:2c:5c:e3:e5:23:1e:fe:
ba:73:53:77:6b:e9:c9:6f:20:0f:2f:92:c6:86:81:
5b:69:87:7f:7c:94:01:fb:8d:6d:aa:fc:e3:28:8f:
97:a2:70:ee:23:60:14:e0:1e:73:83:03:d6:01:59:
26:9b:ac:42:56:82:f7:f4:91:c6:a9:bc:14:1e:e5:
b1:5f:7a:f4:0f:87:03:2d:e0:45:a8:96:57:55:5f:
48:b3:3d:fc:5d:af:d7:e7:c6:af:90:b4:37:20:e0:
f0:b3:c3:75:00:b6:7f:71:74:55:9f:7b:6d:e5:79:
a6:24:32:4c:b1:38:c2:9b:19:32:bb:c2:81:c4:c0:
4f:eb:17:33:ff:d8:e5:12:6a:0b:51:5b:37:23:3d:
d9:af:01:ac:f6:7c:52:99:e5:ee:d1:34:b5:f9:e2:
d3:14:64:15:f3:80:9a:26:d2:63:4b:3b:33:70:e0:
41:9e:cb:a6:aa:11:5f:ef:ce:24:a4:2a:97:10:cf:
ff:0c:d6:24:9e:1b:e6:4f:1f:6a:cc:21:3e:80:cf:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:EE:D8:96:8B:EC:9A:31:CE:03:C0:F3:6F:5F:3A:2B:5E:32:22
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f2:49:26:8e:1d:8d:e4:6c:84:b3:61:44:21:71:74:d2:56:
f2:3d:46:7b:49:bd:6e:57:48:8f:9c:73:e2:89:ac:cf:73:d0:
e6:f6:03:9b:92:4a:9a:18:ec:5b:eb:d2:16:04:9e:2e:f7:7c:
13:8f:29:2e:6a:66:4e:08:0e:1a:ce:4b:b3:d5:6f:60:a8:3a:
5a:4a:f8:29:b1:f9:07:a7:1f:7b:d1:26:1c:c8:a5:19:59:98:
c9:44:7d:07:10:55:1a:53:ca:b5:55:78:42:75:e0:b9:c1:0e:
5e:80:e7:a2:ce:20:32:21:0d:ce:ae:f7:da:b1:2e:e1:84:e2:
93:07:38:47:d0:36:82:b9:7a:0e:b7:a6:c9:59:ff:f3:26:5e:
89:3f:1b:f7:19:e0:aa:01:a8:37:6a:7f:b6:88:64:e5:c1:01:
5e:d4:28:67:62:02:d5:7b:86:b5:c1:ea:e6:97:20:18:e6:fc:
f5:5e:cf:d8:0c:b6:f3:e3:0f:fa:d7:b5:8c:be:aa:9c:c4:2c:
22:2c:61:dd:a9:8b:6a:7e:a5:ad:46:0d:de:2c:f6:a9:80:4f:
f5:fb:6c:99:a5:81:a7:36:ba:11:9a:d7:93:52:34:e1:68:fc:
8d:49:55:19:61:cc:80:6f:bd:6d:70:91:d5:7a:3f:8d:7c:7f:
70:4c:59:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpOaK48/jh2+FUQgXOF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4
N2Q0YjMwHhcNMjYwMzI5MDYwMTA5WhcNMjYwMzMwMDYwMTA5WjAzMTEwLwYDVQQD
Eyg1OWFiZWVkODk2OGJlYzlhMzFjZTAzYzBmMzZmNWYzYTJiNWUzMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mKNz/0UqKseGy/z3UfxS0P82xIv
weS5z3YwKSCH6/qJodddJpQEBb6oXsy9DwXX1DKD/Cxc4+UjHv66c1N3a+nJbyAP
L5LGhoFbaYd/fJQB+41tqvzjKI+XonDuI2AU4B5zgwPWAVkmm6xCVoL39JHGqbwU
HuWxX3r0D4cDLeBFqJZXVV9Isz38Xa/X58avkLQ3IODws8N1ALZ/cXRVn3tt5Xmm
JDJMsTjCmxkyu8KBxMBP6xcz/9jlEmoLUVs3Iz3ZrwGs9nxSmeXu0TS1+eLTFGQV
84CaJtJjSzszcOBBnsumqhFf784kpCqXEM//DNYknhvmTx9qzCE+gM8SVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmr7tiWi+yaMc4DwPNvXzorXjIiMB8GA1UdIwQY
MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt
NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk
LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfJJJo4d
jeRshLNhRCFxdNJW8j1Ge0m9bldIj5xz4omsz3PQ5vYDm5JKmhjsW+vSFgSeLvd8
E48pLmpmTggOGs5Ls9VvYKg6Wkr4KbH5B6cfe9EmHMilGVmYyUR9BxBVGlPKtVV4
QnXgucEOXoDnos4gMiENzq732rEu4YTikwc4R9A2grl6DremyVn/8yZeiT8b9xng
qgGoN2p/tohk5cEBXtQoZ2IC1XuGtcHq5pcgGOb89V7P2Ay28+MP+te1jL6qnMQs
Iixh3amLan6lrUYN3iz2qYBP9ftsmaWBpza6EZrXk1I04Wj8jUlVGWHMgG+9bXCR
1Xo/jXx/cExZeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:18 2026 by rpki-client