
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: yOWPWJwrDGqaZj4JZBI3PyFQ8/2ebXWAgIQcCaYMMC4=
Subject key identifier: 18:EB:BC:FB:2C:CA:3B:D3:01:1B:10:8B:31:AB:57:C7:8B:DB:F3:D8
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 01A0CE91F02F920448148919C3BC859F68DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 14:01:05 +0000
Manifest this update: Wed 23 Sep 2026 14:01:05 +0000
Manifest next update: Thu 24 Sep 2026 14:01:05 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: LUjmRhiaBEQJy3e9Xz1lmkM+b0Dfxr5IB2/KGvh637U=)
2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:f0:2f:92:04:48:14:89:19:c3:bc:85:9f:68:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Sep 23 14:01:05 2026 GMT
Not After : Sep 24 14:01:05 2026 GMT
Subject: CN=18ebbcfb2cca3bd3011b108b31ab57c78bdbf3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:d0:ed:5e:4a:cc:ed:ff:d7:e7:c9:c2:96:
97:8b:9c:48:4e:40:42:8f:1d:2b:b9:a8:92:09:96:
17:5a:c3:a1:a5:15:99:3d:3f:21:f6:0b:99:b1:59:
09:47:3a:a9:6a:93:26:b6:c9:47:1e:d1:c1:a2:43:
9e:86:2f:db:09:93:7b:27:43:67:1c:5c:85:fd:df:
05:8a:46:77:8f:89:26:05:c9:53:c1:fd:c1:0e:1f:
a4:28:35:3f:43:f2:c2:e0:cb:d5:5d:f9:d3:a2:bd:
40:48:2a:b4:5b:e0:74:5a:ba:86:fd:8f:d4:1f:bf:
66:65:d4:fa:08:9a:79:bc:65:e6:51:68:90:a8:f8:
47:17:59:05:a8:e7:90:7b:f9:b6:db:0b:1a:cc:9c:
98:f5:93:59:ac:1c:0e:a5:6f:ce:b5:01:1f:eb:96:
78:04:df:56:fd:5c:a1:f5:8b:80:4a:58:3f:91:65:
39:f5:ff:66:46:b5:ca:65:c6:28:2f:b7:2f:06:76:
a2:7e:f3:4b:05:56:0a:28:8f:7b:4f:15:62:6b:78:
27:6e:24:01:9b:f0:45:ca:94:21:70:87:ee:9f:ac:
53:b5:b5:9d:92:f6:c3:03:86:c5:00:78:f7:eb:0b:
a5:30:68:b8:f5:44:8e:9f:c0:ff:3f:9a:cf:06:16:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:BC:FB:2C:CA:3B:D3:01:1B:10:8B:31:AB:57:C7:8B:DB:F3:D8
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3b:52:9d:3d:a1:76:ca:ea:8d:3f:ef:df:dd:69:c4:cd:b4:
9a:ff:7e:3b:57:06:c6:ef:7a:3f:fc:7a:ae:5f:4e:b3:67:19:
63:7b:f6:6e:8e:f1:f3:28:1b:d7:5a:85:c5:6e:7c:65:35:44:
7d:c1:fa:12:03:58:71:72:a9:13:78:03:e3:62:05:90:a5:7f:
a0:a0:3f:44:2c:04:5a:1a:eb:8a:d4:4f:72:f5:b1:c7:19:18:
8b:68:0b:d4:22:71:2d:d3:dd:30:b2:c9:c1:c4:d5:c2:f4:be:
05:2a:c8:be:cc:3d:46:d0:cb:0a:78:1e:30:a5:3e:ca:7d:f1:
b7:33:34:6d:19:f7:8f:30:d1:0e:82:6a:01:47:df:de:22:98:
d0:79:0d:9f:a8:2a:e3:50:ab:f0:e1:69:51:5e:50:71:6b:4f:
9e:9a:81:f3:dc:51:ca:a9:f3:f5:c2:78:c5:e6:ec:f7:9e:3f:
d8:20:48:7c:43:01:01:40:dd:b8:44:f7:60:31:84:a6:95:23:
0f:21:4f:54:ae:68:21:26:28:9b:e3:65:ad:1e:78:17:7f:8e:
dc:e4:72:90:9d:99:69:ed:d5:53:3b:80:29:90:3f:d5:74:9c:
e6:65:8e:83:e4:65:a7:d3:df:d9:39:27:36:b4:f8:88:05:cd:
1f:78:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:55:43 2026 by rpki-client