Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: nxNDrCmuUk5D3XOnj0wSQeBF6sOza75l7nR9QIxSY9E=
Subject key identifier: 30:FD:5C:45:83:93:85:32:C6:C1:25:F6:5A:17:F7:C9:22:5C:37:B6
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019E1C1033DB5A61879AAB9689E1BEEDA7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 1835
Signing time: Tue 12 May 2026 12:01:24 +0000
Manifest this update: Tue 12 May 2026 12:01:24 +0000
Manifest next update: Wed 13 May 2026 12:01:24 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: my9pfP0zp/QrNdJnU503dsXmzY9FTrN8H9oCbxSleMQ=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:33:db:5a:61:87:9a:ab:96:89:e1:be:ed:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: May 12 12:01:24 2026 GMT
Not After : May 13 12:01:24 2026 GMT
Subject: CN=30fd5c4583938532c6c125f65a17f7c9225c37b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:51:2a:ce:12:fd:9d:ff:34:4a:2c:3e:bc:
fa:61:78:49:d1:83:f5:73:ac:5a:b9:1d:5d:42:e7:
81:ff:1b:99:4f:fd:88:5a:7b:66:36:70:a7:3d:38:
1d:72:24:dd:70:61:cb:7d:64:19:2e:17:ce:d7:f9:
75:de:6f:45:ee:f0:59:e7:a9:ea:37:35:24:04:d5:
0d:59:df:ec:5a:d4:0e:0e:41:24:c0:6d:d3:3f:2a:
f4:92:13:8d:41:5c:eb:b0:64:92:ca:fd:13:3d:bb:
f1:db:4d:1f:32:35:8d:46:86:74:76:66:ec:98:ea:
c3:0f:f0:b8:a5:35:fd:b1:c3:55:f3:97:26:d0:c6:
08:a4:f3:d7:2e:cd:8e:1b:27:21:e2:e7:03:55:24:
11:38:a0:5a:f3:65:20:58:4f:89:7a:c0:5f:e4:ba:
49:ab:8f:22:5f:e4:29:ab:d9:8c:3c:53:32:e6:0a:
25:b2:8f:c2:70:bb:15:e4:f1:58:57:f9:3b:9d:2d:
56:36:bb:7b:e4:6f:0b:99:ba:17:82:5e:42:4d:2c:
93:4a:5e:d5:97:99:79:cb:c4:6c:1a:38:9a:6d:0f:
47:93:d2:32:cb:ae:9f:8b:da:8f:2f:8b:20:5e:eb:
23:33:fa:5d:fc:96:57:bb:a6:35:c0:ba:61:4f:79:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:5C:45:83:93:85:32:C6:C1:25:F6:5A:17:F7:C9:22:5C:37:B6
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:f5:30:98:6b:49:35:3c:92:6d:10:75:a2:a9:fd:c9:11:
1d:95:2a:dd:c5:c9:e4:12:e0:52:b8:c8:8f:06:bb:4c:e5:92:
01:7f:85:75:f6:7a:c0:c1:1c:bb:7a:97:08:e6:a6:87:48:1f:
f2:1e:a7:89:1a:d6:48:9f:f4:7d:5f:64:30:15:25:0a:2c:31:
37:74:ea:22:72:47:7e:6f:74:b8:b6:ed:8f:86:90:7a:35:cd:
e5:c6:ce:d3:67:3c:c9:49:44:1c:c9:0c:24:a6:39:11:fc:45:
e9:07:7b:f4:07:79:c1:70:21:4f:36:ca:5f:a2:97:00:a7:b0:
76:52:fd:7e:81:d2:e8:de:85:51:d7:08:5d:65:07:a3:c1:d5:
83:34:61:27:f0:42:90:7e:18:50:b1:64:f7:bd:36:5e:5f:b5:
cf:02:f9:a3:d7:17:f9:53:e0:b8:16:78:1b:f1:1c:4c:5b:88:
69:4a:a5:3b:1f:fb:08:de:7f:7d:97:d3:50:2f:d5:fc:3a:31:
ce:45:c0:9d:69:f6:1d:80:4b:e2:59:35:3e:ae:3d:1a:bc:90:
7d:da:72:79:67:64:23:34:9d:7b:e3:2a:ad:34:3a:00:3e:ad:
dc:46:06:b0:92:b4:78:9f:b0:3b:8a:cb:e2:64:1b:7b:c4:f2:
27:11:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:17 2026 by rpki-client