Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: cVKMxLunc71GXQ88rIKhrvBeOJeXQm7oi67E+kteHCY=
Subject key identifier: 2B:83:A2:D6:42:DF:34:A3:3E:7A:57:78:F3:89:AB:B9:1A:DA:28:F7
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019E1D9036D9A868314FB29E06A01268A311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 1000
Signing time: Tue 12 May 2026 19:00:50 +0000
Manifest this update: Tue 12 May 2026 19:00:50 +0000
Manifest next update: Wed 13 May 2026 19:00:50 +0000
Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: XG4XuLpxohgefTyQXjoScL2bsFq6nzBigxMqVHq0nD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:36:d9:a8:68:31:4f:b2:9e:06:a0:12:68:a3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: May 12 19:00:50 2026 GMT
Not After : May 13 19:00:50 2026 GMT
Subject: CN=2b83a2d642df34a33e7a5778f389abb91ada28f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:a3:f3:5c:21:ed:54:08:b6:07:4d:94:d6:
75:c1:94:36:31:08:05:c1:52:51:cf:3c:8a:a9:56:
a4:7a:bd:a4:ad:7d:36:83:31:cb:13:55:f8:56:f2:
67:e1:37:49:06:3c:ae:17:ab:f6:83:c3:e6:56:f7:
05:71:76:9b:48:66:b8:b1:05:bb:33:d7:26:dd:2a:
60:f2:59:ad:ef:40:7b:66:b8:16:03:f9:1e:bf:e8:
1c:87:81:37:b8:a9:56:a9:44:a5:2c:2f:5a:bf:b8:
43:57:88:7e:4e:d4:6c:bd:30:44:e0:08:12:e1:3e:
22:6f:cd:01:04:d1:d1:59:2e:2d:6f:b4:6d:86:df:
82:1e:77:84:73:87:d4:2b:48:fd:33:7a:c1:13:90:
a9:91:16:2d:8f:1f:0d:74:a4:51:44:46:14:39:14:
a3:87:96:9b:09:0d:45:40:50:33:a2:39:f2:c1:e9:
f9:b3:a9:7b:c9:8e:37:88:31:9f:18:8a:f1:b4:13:
23:91:18:cc:5f:6b:30:de:cd:fb:76:4d:cc:14:27:
50:fa:83:cc:4e:69:d9:70:1a:87:55:33:19:94:1d:
44:b0:27:5d:ed:19:e2:9f:c7:1c:28:dd:e1:16:f0:
ac:69:1e:e1:f2:1e:af:53:da:f8:8e:b1:65:bc:76:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:A2:D6:42:DF:34:A3:3E:7A:57:78:F3:89:AB:B9:1A:DA:28:F7
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:da:50:c2:63:53:7c:1a:d9:2f:c5:ac:cb:fb:cc:d7:08:83:
89:2d:cc:73:97:64:fa:de:1e:68:a6:52:93:03:a3:82:b2:83:
15:a8:bc:4e:da:0c:ac:bc:67:75:96:50:86:f4:52:dd:55:4f:
b0:30:3f:d3:ad:9d:7b:6b:92:18:1d:53:5c:0f:aa:83:ff:5a:
2e:5c:68:c9:47:9d:cd:78:58:40:b8:e0:90:61:f4:fb:c6:5a:
47:7a:0c:16:df:35:4c:e5:6c:8e:c7:8a:7f:72:22:a0:53:26:
57:02:94:1a:01:c5:41:3a:b0:79:32:5b:5c:88:36:fd:f9:2e:
1e:b1:f0:30:fc:cb:dc:27:b4:5d:62:a0:e6:1e:57:8c:7b:05:
9e:90:57:92:43:a4:99:2d:af:9e:04:f2:f0:3d:9c:e9:40:1a:
69:3a:4b:a9:c6:de:f5:fc:f9:36:6d:76:e9:28:88:18:a3:d8:
e8:b4:59:6c:9f:b7:60:9c:60:a2:6a:4c:4f:6d:e8:2d:a1:a4:
fe:6a:93:49:0a:1b:21:27:ef:87:c7:c0:c7:70:d9:6a:d3:18:
81:62:f9:6c:8c:73:d4:da:f8:9c:34:f1:96:da:a7:f0:3f:f1:
cb:62:eb:6a:fa:fd:67:6a:e8:2c:d3:a3:eb:5c:d7:4f:42:4b:
29:7e:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:18 2026 by rpki-client