Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: 1mfX15w4J7qxrUA6U5nrWsr8i2vQXk1MKKvSY1Exv5o=
Subject key identifier: AC:9B:AD:5C:F8:43:54:B2:3D:D7:CC:C9:6D:6C:C2:70:5B:49:A4:1A
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 01A0D5393A005F51EAD260C0A62D9CDA0F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 199E
Signing time: Thu 24 Sep 2026 21:01:32 +0000
Manifest this update: Thu 24 Sep 2026 21:01:32 +0000
Manifest next update: Fri 25 Sep 2026 21:01:32 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: shW6Z7PqQ4GXCYWayRaCOe6c141oICGiIyf/GMLpL8w=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:3a:00:5f:51:ea:d2:60:c0:a6:2d:9c:da:0f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Sep 24 21:01:32 2026 GMT
Not After : Sep 25 21:01:32 2026 GMT
Subject: CN=ac9bad5cf84354b23dd7ccc96d6cc2705b49a41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:2d:14:96:ea:e1:2d:60:0a:7f:58:6c:a5:
96:1a:8e:6d:07:47:bf:53:77:05:3d:ea:a5:aa:b6:
bc:6a:82:65:29:dd:d1:95:61:32:59:18:f9:fe:2e:
16:ee:ef:87:4f:86:60:06:56:fc:4f:2a:14:66:f9:
85:37:d3:10:c8:7f:6f:4b:78:b4:67:9b:fa:01:0f:
29:b6:e4:0a:de:f2:16:c0:b1:b7:6d:10:49:f1:96:
a3:b3:e3:a5:a7:c2:41:12:82:de:fd:47:ad:d3:7e:
73:aa:d3:d6:a3:a3:50:0c:6c:af:da:07:68:76:ee:
f6:bd:75:ca:5c:5a:ce:ed:e5:fd:7f:59:9e:f8:7b:
4b:5b:76:47:af:b9:6a:60:53:97:86:74:52:20:d8:
e5:c6:b4:69:c4:5c:42:e9:15:b1:6c:d7:46:f9:1e:
42:8d:4b:c5:6a:e5:c2:5d:e3:65:44:4a:5b:31:35:
77:10:fe:b2:23:c3:55:25:de:ff:69:99:2c:cc:54:
42:e0:ec:d0:cb:83:3c:b1:7b:cb:ca:7c:76:ec:da:
69:8f:27:12:9d:6b:d8:4e:d7:81:d0:99:35:1f:c0:
b2:38:45:6c:a4:fb:cd:c6:89:92:e6:49:15:31:ef:
77:71:b0:e7:cc:3d:c5:b6:0f:45:3e:8d:12:10:4e:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:AD:5C:F8:43:54:B2:3D:D7:CC:C9:6D:6C:C2:70:5B:49:A4:1A
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:e2:57:6d:6f:86:a8:2b:e9:cf:ba:92:76:6a:c9:21:0c:
19:35:b2:49:44:01:ed:ab:e1:72:70:6c:d9:f6:45:97:cc:e8:
df:65:0b:a4:77:0c:72:e8:04:68:20:13:cd:e2:ba:46:2d:ff:
56:56:b0:58:a6:f8:fc:e8:17:b1:22:8f:3d:16:c3:b2:51:4f:
7b:ce:06:8b:03:9c:2b:00:4b:fd:21:ec:c3:91:c6:f4:ed:2f:
73:ef:21:88:fb:26:4e:3d:a8:0d:c8:9b:06:5b:06:74:1c:a2:
a9:fe:5d:90:ad:d1:d8:ec:4f:be:20:5f:46:f9:2e:7b:46:27:
84:61:44:a4:a4:4d:71:fe:6a:c0:4d:66:91:15:6f:49:bd:5e:
83:25:63:ec:8c:26:03:0c:35:41:99:49:97:ff:1a:90:33:b2:
63:b2:6f:b1:3f:68:fc:ab:82:7e:f0:35:34:28:ee:5b:ab:3a:
e7:cc:02:b3:d5:f8:50:78:22:30:5a:f7:2d:4a:13:ac:8e:50:
a4:49:88:13:ce:2e:30:7c:e1:18:d7:eb:54:b5:47:64:ea:9a:
5a:1a:45:f6:0b:9c:dd:b7:64:26:02:2a:f5:49:70:df:82:b8:
4d:3f:ce:a0:e7:b5:56:e2:e2:a1:3a:fd:2e:68:13:84:5c:0f:
8e:1b:76:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOToAX1Hq0mDApi2c2g+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4
N2Q0YjMwHhcNMjYwOTI0MjEwMTMyWhcNMjYwOTI1MjEwMTMyWjAzMTEwLwYDVQQD
EyhhYzliYWQ1Y2Y4NDM1NGIyM2RkN2NjYzk2ZDZjYzI3MDViNDlhNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomgtFJbq4S1gCn9YbKWWGo5tB0e/
U3cFPeqlqra8aoJlKd3RlWEyWRj5/i4W7u+HT4ZgBlb8TyoUZvmFN9MQyH9vS3i0
Z5v6AQ8ptuQK3vIWwLG3bRBJ8Zajs+Olp8JBEoLe/Uet035zqtPWo6NQDGyv2gdo
du72vXXKXFrO7eX9f1me+HtLW3ZHr7lqYFOXhnRSINjlxrRpxFxC6RWxbNdG+R5C
jUvFauXCXeNlREpbMTV3EP6yI8NVJd7/aZkszFRC4OzQy4M8sXvLynx27NppjycS
nWvYTteB0Jk1H8CyOEVspPvNxomS5kkVMe93cbDnzD3Ftg9FPo0SEE7d+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKybrVz4Q1SyPdfMyW1swnBbSaQaMB8GA1UdIwQY
MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt
NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk
LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7niV21v
hqgr6c+6knZqySEMGTWySUQB7avhcnBs2fZFl8zo32ULpHcMcugEaCATzeK6Ri3/
VlawWKb4/OgXsSKPPRbDslFPe84GiwOcKwBL/SHsw5HG9O0vc+8hiPsmTj2oDcib
BlsGdByiqf5dkK3R2OxPviBfRvkue0YnhGFEpKRNcf5qwE1mkRVvSb1egyVj7Iwm
Aww1QZlJl/8akDOyY7JvsT9o/KuCfvA1NCjuW6s658wCs9X4UHgiMFr3LUoTrI5Q
pEmIE84uMHzhGNfrVLVHZOqaWhpF9guc3bdkJgIq9Ulw34K4TT/OoOe1VuLioTr9
LmgThFwPjht2JQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:46 2026 by rpki-client