Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: 10rEmWIgsbbKUtA4ziGSYzcLIa558o+MEg+zlOXejzI=
Subject key identifier: C5:41:2B:6C:6B:F5:02:77:C8:B2:45:3D:D6:9F:7D:8C:43:DE:8F:CC
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019F905A8AB4EED3AAF2F02BF27CF3E00BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 10C0
Signing time: Thu 23 Jul 2026 19:01:20 +0000
Manifest this update: Thu 23 Jul 2026 19:01:20 +0000
Manifest next update: Fri 24 Jul 2026 19:01:20 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: 6HpiuJ8eFaInIBDoP4Bl3Cu7sK9yIp2FfKDqJbvlrJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8a:b4:ee:d3:aa:f2:f0:2b:f2:7c:f3:e0:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jul 23 19:01:20 2026 GMT
Not After : Jul 24 19:01:20 2026 GMT
Subject: CN=c5412b6c6bf50277c8b2453dd69f7d8c43de8fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:bd:5e:46:17:d3:53:dc:74:80:8d:6d:ab:
3f:f2:ef:85:32:16:a5:29:8f:e7:b7:3d:2f:d3:d4:
75:ee:18:28:44:8b:78:de:38:a7:53:af:95:67:76:
ae:8b:44:77:02:ed:88:75:eb:45:f0:f5:b8:76:1f:
69:18:a9:2c:e1:4f:56:c0:c5:f5:0b:61:fa:58:12:
5d:fa:c8:d2:e8:9c:ab:97:b4:8a:93:96:ff:4a:83:
16:2b:2b:e5:6b:ad:26:ce:0c:66:30:b6:cd:05:50:
53:be:26:63:27:6d:f2:f4:3d:e3:89:a7:4d:9f:c9:
c2:b3:bd:76:23:0a:a1:94:b6:aa:37:60:7b:1d:1f:
40:0e:4a:71:7f:1e:f8:5e:3e:e4:2a:1f:b0:c5:d6:
d7:6a:b8:9f:b6:68:b0:f9:41:eb:ce:62:b2:08:9a:
fd:bc:59:9a:96:b9:b7:46:3b:48:9e:e3:0e:a7:df:
98:34:be:09:06:16:82:49:ff:62:c7:6b:59:4b:9c:
c5:94:06:f2:9d:3d:45:ef:aa:b6:89:ce:04:49:7b:
f1:76:2f:4e:bc:8e:29:02:af:b8:b6:6b:42:f9:42:
dc:ad:99:b8:4e:2a:b9:c3:ea:53:a6:35:62:18:61:
b8:1b:61:45:2e:0f:ed:a9:56:77:55:57:eb:c6:12:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:2B:6C:6B:F5:02:77:C8:B2:45:3D:D6:9F:7D:8C:43:DE:8F:CC
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:5f:1d:16:a0:57:9d:c2:a1:ee:af:c6:ad:05:4d:4b:3b:
bc:23:d9:68:d0:fd:19:e1:85:15:59:4c:3d:b8:07:74:dc:c7:
90:c5:bc:a9:12:73:44:63:47:80:61:76:4c:8f:b0:94:00:02:
10:b9:18:bb:b9:b4:6b:11:d8:ea:8a:35:97:31:a2:c5:25:1a:
0c:22:0b:59:fe:b3:52:fe:85:d9:1f:74:d2:3c:c8:35:f9:ce:
96:35:2c:48:ca:6f:8b:28:a7:7f:16:b9:1f:6e:c2:51:22:70:
ae:ce:1d:d9:ed:27:05:8d:85:8a:1f:17:18:85:dd:4c:de:1b:
b2:b1:44:9a:bb:9e:11:49:32:5c:3a:60:ca:82:d1:7b:b8:f5:
7f:32:d7:e1:3c:0c:b9:a0:48:98:70:03:d6:a4:54:f3:20:fb:
e3:a8:26:88:78:54:31:5e:de:0d:47:66:a2:8f:96:d4:a2:38:
b4:c2:b2:ce:99:5b:2d:79:10:6f:fd:b9:3a:cd:fe:51:09:97:
ad:47:26:d9:52:39:14:16:fc:28:3a:67:24:d4:b7:54:64:d6:
51:84:8d:0f:f5:9e:44:d8:93:ad:9d:5e:55:2b:8e:ba:4c:27:
4c:24:59:8a:fa:69:d7:90:11:a1:ec:9f:8d:fa:72:ff:08:70:
a1:be:14:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWoq07tOq8vAr8nzz4AvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm
ZjA1MGIwHhcNMjYwNzIzMTkwMTIwWhcNMjYwNzI0MTkwMTIwWjAzMTEwLwYDVQQD
EyhjNTQxMmI2YzZiZjUwMjc3YzhiMjQ1M2RkNjlmN2Q4YzQzZGU4ZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn369XkYX01PcdICNbas/8u+FMhal
KY/ntz0v09R17hgoRIt43jinU6+VZ3aui0R3Au2IdetF8PW4dh9pGKks4U9WwMX1
C2H6WBJd+sjS6Jyrl7SKk5b/SoMWKyvla60mzgxmMLbNBVBTviZjJ23y9D3jiadN
n8nCs712IwqhlLaqN2B7HR9ADkpxfx74Xj7kKh+wxdbXariftmiw+UHrzmKyCJr9
vFmalrm3RjtInuMOp9+YNL4JBhaCSf9ix2tZS5zFlAbynT1F76q2ic4ESXvxdi9O
vI4pAq+4tmtC+ULcrZm4Tiq5w+pTpjViGGG4G2FFLg/tqVZ3VVfrxhK4jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVBK2xr9QJ3yLJFPdaffYxD3o/MMB8GA1UdIwQY
MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt
MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi
LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ9fHRag
V53Coe6vxq0FTUs7vCPZaND9GeGFFVlMPbgHdNzHkMW8qRJzRGNHgGF2TI+wlAAC
ELkYu7m0axHY6oo1lzGixSUaDCILWf6zUv6F2R900jzINfnOljUsSMpviyinfxa5
H27CUSJwrs4d2e0nBY2Fih8XGIXdTN4bsrFEmrueEUkyXDpgyoLRe7j1fzLX4TwM
uaBImHAD1qRU8yD746gmiHhUMV7eDUdmoo+W1KI4tMKyzplbLXkQb/25Os3+UQmX
rUcm2VI5FBb8KDpnJNS3VGTWUYSND/WeRNiTrZ1eVSuOukwnTCRZivpp15ARoeyf
jfpy/whwob4URA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:45 2026 by rpki-client