Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: 1oKMjM8wsHxrvKXKELySldbj6E5JreJZKxB/lXv2XD0=
Subject key identifier: 6A:2F:9F:49:40:A5:07:80:BB:13:58:A3:08:45:4F:97:D1:CC:B3:B7
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 01A0D8A8C3AC0D1B33E58E46B5883C927940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 116A
Signing time: Fri 25 Sep 2026 13:02:13 +0000
Manifest this update: Fri 25 Sep 2026 13:02:13 +0000
Manifest next update: Sat 26 Sep 2026 13:02:13 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: /TxY+IrgQtQTT4bAzN02T0bkh5Op8lM4KtiQKaPKVwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:c3:ac:0d:1b:33:e5:8e:46:b5:88:3c:92:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Sep 25 13:02:13 2026 GMT
Not After : Sep 26 13:02:13 2026 GMT
Subject: CN=6a2f9f4940a50780bb1358a308454f97d1ccb3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:37:ed:4e:fb:92:9a:4a:6d:56:12:13:d4:
e7:e0:a2:9d:50:5f:63:b4:ec:d5:87:2a:20:a0:52:
27:bb:79:39:a9:d4:9c:7f:f0:db:78:72:e8:22:d0:
c6:db:ea:b0:e8:f0:f1:39:82:81:b1:42:ec:c7:65:
f6:a3:64:77:98:ed:40:e4:d0:b4:ff:63:30:28:c5:
99:43:82:52:41:e3:c2:17:55:de:19:f6:60:8e:96:
34:21:b8:88:c3:77:6e:90:71:4d:b9:8d:22:0e:e1:
1f:a2:aa:d6:67:7e:26:90:5a:80:f4:23:51:0b:f9:
1c:09:ff:71:85:f3:24:67:a2:c8:11:11:b3:ae:ee:
8b:cc:e8:38:3b:94:0f:8f:75:98:c5:f3:06:9e:76:
a4:b6:f0:5f:cc:83:94:d6:3f:97:14:0b:1a:50:5a:
d3:c7:9d:16:ba:db:49:93:28:fa:34:7b:08:df:68:
e3:67:b1:1a:3e:f1:cb:56:21:02:e3:67:72:f1:a1:
d1:2d:e9:3a:1e:ff:66:1a:2d:90:99:89:b5:f4:59:
44:73:7b:61:63:93:2a:d7:e8:15:b2:86:93:5a:40:
1c:2e:e4:b5:79:03:ed:18:11:47:7b:26:e8:b3:26:
75:77:05:35:b8:70:8b:af:ed:59:0a:d7:85:42:68:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:9F:49:40:A5:07:80:BB:13:58:A3:08:45:4F:97:D1:CC:B3:B7
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:15:39:92:56:a2:8a:45:31:33:0e:e3:00:63:bb:44:d9:9a:
f2:b7:68:76:cb:aa:ba:c9:11:5f:a0:81:c2:1a:e6:65:be:4a:
2f:96:6b:ea:15:0e:88:73:77:ef:e9:77:35:29:7c:a3:b1:79:
4f:85:73:51:45:b5:e2:bf:e5:15:0e:77:8b:54:f0:34:95:57:
76:25:57:4c:83:a0:73:22:11:dd:61:7b:b0:2d:d7:eb:6b:a3:
54:62:fe:22:03:f9:56:76:0b:80:8c:56:b8:9d:11:a7:23:c1:
a7:5f:9b:69:81:19:90:30:f4:5e:e5:e2:f3:7c:fe:4d:17:b5:
7b:0a:8b:5a:51:02:71:34:63:1b:d6:6a:dc:2a:5c:a5:df:bc:
95:66:79:d7:f1:2b:5a:fb:67:33:b8:fd:2f:30:c7:25:75:c5:
38:15:f8:65:86:ef:32:8a:0c:56:e9:8a:ff:1e:87:77:9e:d6:
9b:82:38:fb:0a:ca:f3:ce:f8:34:45:f1:1e:1d:97:26:80:f0:
3f:0f:16:62:6c:6d:8e:2a:84:29:b1:8a:a8:73:fb:6a:39:0f:
7d:99:49:65:fc:60:7d:9d:a6:40:1f:d9:5f:b4:2a:0e:9d:05:
f5:53:f8:54:b2:a6:77:33:3e:de:50:f2:c5:b0:dc:23:b6:a9:
d5:69:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:19:57 2026 by rpki-client