Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: xmEFXxb0Yfcv+49PsDSwYlFPt6T7kR2FlfwnL9mY44A=
Subject key identifier: D9:14:EA:D8:4B:92:78:1A:6B:2C:A3:2D:57:C5:E2:86:FD:C1:FF:3C
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 019F8FEC0B43BD22A42AB23811100C0D8B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 17:00:38 +0000
Manifest this update: Thu 23 Jul 2026 17:00:38 +0000
Manifest next update: Fri 24 Jul 2026 17:00:38 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: Zn9IJq12wmLF173U+kgzG/9FHInZlUbXO0ee80SW2iY=)
2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:0b:43:bd:22:a4:2a:b2:38:11:10:0c:0d:8b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Jul 23 17:00:38 2026 GMT
Not After : Jul 24 17:00:38 2026 GMT
Subject: CN=d914ead84b92781a6b2ca32d57c5e286fdc1ff3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:eb:97:14:27:04:a7:ac:71:1a:38:64:63:
9e:b9:06:01:f3:4a:a0:85:86:62:6c:2b:dd:dd:18:
76:07:2c:8a:b2:80:c0:c7:79:d1:e5:0b:ed:d1:78:
3d:53:fe:00:01:ab:ab:b9:47:ea:23:09:cd:b6:82:
b1:75:85:01:b6:d3:6c:c6:d6:c7:b2:47:4c:8b:6d:
b3:b3:89:91:35:86:2f:f3:d0:34:94:29:c7:bc:b9:
fa:c4:79:cc:67:bd:99:c9:b0:c3:86:c7:6d:fd:07:
c9:88:11:ed:18:0b:f1:3b:ec:23:c8:e3:6d:c2:3e:
96:fb:84:8a:5b:5c:f9:58:2e:d8:13:20:bc:a3:e3:
b9:93:2a:58:2b:06:71:2f:4a:01:da:94:c8:ae:aa:
ef:3d:c9:98:8f:ce:97:b5:00:bf:95:50:08:1e:ee:
64:3e:ec:4b:52:70:3a:e1:a6:87:34:8c:ac:26:f0:
3d:8a:95:6c:eb:39:db:d2:54:66:c9:e3:d0:ed:b4:
b8:17:ae:1e:80:c1:1f:98:62:e9:2d:4e:79:1c:df:
ef:ab:67:41:ae:5f:2d:56:05:77:86:81:5d:e5:c5:
c7:a9:e0:e2:9c:42:cd:a5:7c:58:53:c5:0d:ab:88:
e4:dc:2b:15:79:c5:b5:5d:cd:3a:bd:8a:7a:8d:f9:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:EA:D8:4B:92:78:1A:6B:2C:A3:2D:57:C5:E2:86:FD:C1:FF:3C
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:4a:83:a4:ec:76:77:b5:a2:62:a2:da:62:ed:01:94:0e:
22:c0:d5:1b:9d:ce:8c:aa:11:4c:86:31:cf:38:25:67:8b:e9:
68:99:43:dd:36:91:c7:08:7d:be:55:80:48:c9:7f:d2:3a:29:
57:6b:08:76:cd:30:c9:df:ab:5d:32:4d:5a:0d:26:cb:f2:bb:
5c:ac:5b:2b:0a:5f:96:8c:3d:48:7d:31:f1:ec:f8:6c:03:65:
34:4b:c1:29:e0:12:79:ba:95:d7:4c:3a:cf:b8:ea:84:c6:5f:
34:ec:2d:77:0b:99:62:dc:14:12:87:af:cb:76:3c:9f:64:1f:
53:2e:ba:9a:e6:c0:77:57:ee:c8:e1:7a:e6:0a:06:80:93:d3:
a4:09:bb:06:2a:9a:39:41:44:93:08:ac:18:b7:68:63:74:54:
dd:3c:30:37:c0:74:26:53:d0:b3:2e:35:60:14:5c:02:18:af:
d4:a0:e8:99:42:2d:32:25:bf:4a:6b:67:32:e5:0c:98:fc:29:
92:ac:db:0b:77:fb:7e:03:1b:0a:b5:e9:e9:1a:18:ae:3f:27:
5f:e6:68:e7:ed:c3:a6:41:33:4c:a3:20:67:34:41:ba:b4:6c:
07:41:9c:d2:6b:26:3b:5e:14:71:f2:10:aa:37:8a:49:d6:cd:
73:d6:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:45 2026 by rpki-client