Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: OBRZpHT13uTspeBqikd9P1N7WbmtR71GULUNJRKRxkQ=
Subject key identifier: 48:00:AC:D3:20:E4:07:DD:09:39:F5:83:52:2E:30:A3:AA:AB:62:CB
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 01A1DDCB98841D91124BB075AC949EB87CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 1A27
Signing time: Sun 15 Nov 2026 06:01:09 +0000
Manifest this update: Sun 15 Nov 2026 06:01:09 +0000
Manifest next update: Mon 16 Nov 2026 06:01:09 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: ApKfzKWPgTCOZLoOFhwWpnVoibSiQ9/J9LIiLG2nKjE=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:98:84:1d:91:12:4b:b0:75:ac:94:9e:b8:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Nov 15 06:01:09 2026 GMT
Not After : Nov 16 06:01:09 2026 GMT
Subject: CN=4800acd320e407dd0939f583522e30a3aaab62cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:d8:36:98:25:70:a1:01:1c:44:71:05:34:
4a:36:0e:d0:9a:d3:91:60:aa:6e:14:b5:cf:28:fa:
2d:b1:0a:7f:a3:ee:0c:30:30:3c:26:7d:83:e5:95:
cc:ba:94:10:7b:19:57:b4:ab:cf:21:8d:3b:a5:65:
ca:2c:90:6b:39:cf:76:14:31:e5:04:15:ed:6b:89:
17:33:13:4a:b2:a4:cd:d3:21:cd:54:b5:9a:73:6c:
89:a9:e7:ab:14:f8:f7:bb:0c:7f:59:a4:dd:da:eb:
88:f8:5f:3d:a0:d0:fc:c7:3e:a5:3c:ee:27:3a:e5:
76:af:c3:e7:a5:40:16:ea:02:58:7f:62:55:ff:5d:
b8:2a:87:ca:d7:74:71:86:7f:4d:29:ff:de:94:21:
61:41:d6:cc:5c:f5:0e:9d:c8:e3:95:c4:e2:3b:f3:
70:ee:40:00:44:8c:36:16:f5:7c:08:32:41:3f:83:
5f:83:ac:84:95:22:34:d4:f7:28:d1:bf:ec:0b:6e:
d1:55:75:41:07:74:5c:fd:a9:36:b4:2c:11:10:fc:
f7:d3:0a:00:c4:66:47:9d:b8:fd:20:fb:33:b0:0d:
c7:05:2d:8d:8d:e5:a7:56:9b:b5:73:ac:57:ec:a2:
ca:0b:00:f5:8c:2a:32:d6:9e:6c:ad:af:fd:07:34:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:AC:D3:20:E4:07:DD:09:39:F5:83:52:2E:30:A3:AA:AB:62:CB
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:49:ca:e9:8e:29:c5:d3:60:44:01:f5:af:70:e7:32:bf:52:
1a:f0:05:4a:cf:e8:f4:a4:bc:2f:9d:c0:b2:16:8e:63:fc:a8:
20:3b:d5:15:de:c4:8b:05:8d:d3:f5:5a:68:ad:71:a0:1e:9e:
be:6a:3b:99:d2:2e:76:43:9d:ff:6c:00:d6:9c:e9:e5:60:f9:
f1:7b:8b:6b:c2:2f:0b:9c:eb:c3:a8:a4:ad:5d:50:37:4b:98:
48:7d:0a:13:cf:1e:67:e0:26:e1:63:df:42:02:6b:51:5f:ae:
5a:27:34:df:62:ae:b1:b0:eb:ea:5f:15:9a:48:de:11:0d:d9:
0f:00:a1:b8:a2:df:7d:c0:c4:6a:3c:ef:66:48:91:b5:79:2b:
29:1b:a9:a5:3f:3a:c4:4f:83:e8:92:34:91:ab:c9:39:53:02:
8a:ae:b0:1e:66:7d:a1:8d:b2:84:9f:7a:1d:7d:53:51:e9:1c:
5e:5d:30:aa:e8:6b:b0:01:bd:a5:38:da:ba:a6:a2:d1:a9:d4:
ac:c0:91:7f:a2:57:f3:27:1b:9f:f7:8b:25:40:7d:43:3f:17:
99:12:41:42:d9:2f:17:9e:64:57:48:e6:c5:a6:c4:e7:5b:53:
8a:32:6b:a1:c2:e0:4d:44:07:b2:df:a1:d9:f4:a2:e9:91:60:
45:15:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:36:44 2026 by rpki-client