Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: Tm+ZgoeDvtFdbW2Jp5nbsqhI4UcTsaLkbkohKzuvfhA=
Subject key identifier: 29:DF:C7:CB:F4:06:E3:50:3E:65:CD:DC:3D:EC:76:1B:1E:D3:49:7F
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019D284D4FB59981DE77941BEF1B1E36B85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0F81
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: c5Rs8aQZtf9q8tvLNE794FXhpjlFDo6Dc1S4oWGSBkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4f:b5:99:81:de:77:94:1b:ef:1b:1e:36:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=29dfc7cbf406e3503e65cddc3dec761b1ed3497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:f7:40:2c:a3:eb:3b:b2:ed:76:33:2e:0a:
90:9f:9e:c4:60:a1:85:21:f3:ad:54:5f:99:b7:d9:
29:75:b9:1d:2a:09:f4:02:8c:7e:45:02:15:9f:a8:
14:a5:f2:87:c7:7b:fd:58:21:61:21:cd:90:f7:fc:
11:43:a6:ed:84:14:5b:7b:b3:ea:6c:e1:9f:0b:f0:
0b:b5:e2:00:47:61:8c:bc:ee:bc:26:ff:9d:ab:93:
f5:6d:e4:d5:a7:84:37:3e:be:24:f6:17:d4:f2:de:
71:28:04:94:51:6a:fb:6b:39:e2:af:77:c3:be:73:
99:3a:24:3a:82:82:21:30:c0:a9:26:71:e5:94:92:
b0:21:bb:8a:c1:d3:5d:de:e7:3f:40:f4:46:05:11:
cd:e2:47:62:44:1c:7b:bb:56:a6:34:eb:a0:ec:91:
3f:e9:59:d8:d7:f6:a8:5b:40:81:86:9e:ea:6b:d8:
59:75:69:49:34:2b:2e:09:3f:45:fc:79:db:de:e2:
e8:c2:d2:84:f4:ee:0b:e3:9b:83:5c:c8:39:74:cb:
b3:34:a4:94:da:0a:a7:cf:89:46:6a:fd:29:fd:6e:
2f:e1:f7:6f:ea:37:c4:3f:16:9b:6c:7a:fb:7d:55:
44:49:ab:2d:d1:d5:bb:ff:28:b1:97:08:12:15:1f:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:C7:CB:F4:06:E3:50:3E:65:CD:DC:3D:EC:76:1B:1E:D3:49:7F
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:63:c8:2f:08:01:69:a7:23:ce:90:83:1d:d6:a2:73:ee:63:
0d:ec:6d:cc:1a:e8:e5:7b:c2:47:10:dc:ea:5e:ad:25:42:99:
59:9b:3d:31:1e:3e:63:03:5e:1a:4d:56:29:21:07:40:23:b5:
0b:72:00:74:4a:39:0e:3d:c8:54:9e:9d:24:2d:93:3b:33:88:
c2:22:82:73:4f:96:ee:3a:8d:8b:69:87:c9:2c:1c:2c:65:0b:
7d:8e:a6:a4:3e:b6:0f:e5:c0:8b:34:b7:43:2a:d7:83:84:f8:
9d:c5:1d:96:0b:86:e2:c5:5e:3e:c1:2f:5a:3b:84:ad:fd:4e:
4d:23:61:2e:71:d2:69:ff:c2:1e:e4:45:40:e4:0a:49:48:85:
c4:55:42:dc:df:7e:28:5d:b2:dd:c9:8a:b7:7e:e5:56:78:71:
e3:9c:b7:48:60:95:2f:fd:0e:86:76:20:d3:a7:09:60:f9:5c:
5e:50:6d:f3:b5:90:f4:14:93:9b:4c:f7:c6:83:7f:bd:89:a6:
2b:51:37:a8:08:d9:38:72:27:9b:76:31:ce:00:80:eb:2a:2b:
75:02:ba:85:c7:51:29:4e:b8:87:8f:9c:b0:08:87:9e:8d:28:
e8:36:39:fb:42:98:e4:bc:5c:3c:73:9a:30:cf:d0:7e:1f:8e:
f5:f1:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:07 2026 by rpki-client