Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: abNNzZgrS9Q7gq1FOHR4ElZ2344gTc1K0PyT8xxFSdY=
Subject key identifier: 4C:86:35:45:C0:A6:BB:1D:93:6C:C2:C8:1F:4C:17:D4:5C:5E:57:B9
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019D26CD6638D413C9E0F9F69862F61F99AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 17B6
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: mQWqrdyY5TKM4UaH4YCOzK1dkqES+2Vw5P25K9rQ7F8=)
2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:66:38:d4:13:c9:e0:f9:f6:98:62:f6:1f:99:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=4c863545c0a6bb1d936cc2c81f4c17d45c5e57b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:a8:f0:73:5d:18:fb:e1:f0:01:96:4b:19:
70:fc:d0:b2:24:a4:f6:aa:81:23:64:c2:9b:04:dc:
0c:63:95:d5:a6:b0:10:e1:e3:8d:be:e9:02:f4:6e:
f8:1b:6c:1c:ea:4e:c9:46:bc:71:b6:3c:cc:0b:5f:
87:48:7b:11:c9:70:92:d3:ab:50:5d:f6:93:a7:3f:
fb:64:38:56:49:6b:ac:17:7b:ff:1e:48:d2:6a:91:
ca:33:bd:99:a8:ab:70:6f:1e:37:33:3b:93:26:17:
45:71:60:b1:a0:c5:30:84:17:a9:5b:a1:66:2b:99:
3e:ff:e7:ef:c2:66:86:df:32:51:bf:7c:d8:5e:03:
c0:69:52:91:16:60:cf:fe:70:6c:29:e2:60:e8:80:
86:50:d5:47:6e:98:a1:4f:95:d6:51:46:4c:2a:d0:
22:73:f2:40:6e:8a:62:2b:9e:57:ba:08:de:3c:87:
64:76:c6:e2:44:3a:3c:9b:46:5f:f6:90:42:7d:dc:
e1:04:c2:b8:2d:03:d6:19:9b:f7:3f:f2:05:80:af:
a5:f5:1c:62:8c:69:8a:3b:d1:d4:f3:f1:b8:6f:09:
b5:18:3d:d5:12:4c:d2:c3:77:da:d3:05:4e:5e:2e:
05:48:9d:41:33:88:d0:15:a5:00:ba:f0:87:3b:29:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:86:35:45:C0:A6:BB:1D:93:6C:C2:C8:1F:4C:17:D4:5C:5E:57:B9
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:5f:e7:23:d4:a1:3e:58:55:71:91:8e:7c:7e:00:2f:b5:
55:b1:43:b7:23:6a:6c:3d:e7:f8:f2:7a:65:b9:08:18:0b:1b:
44:34:48:58:1e:06:2e:be:60:49:4f:1e:1d:b6:24:ff:32:0b:
75:dc:ba:de:20:d3:42:b9:cf:97:1f:6f:de:d7:78:7b:6d:ee:
0e:6b:22:0e:78:bd:76:ae:b3:4c:74:9a:9b:52:7d:82:cf:27:
af:10:87:5c:e4:18:9a:98:c1:79:31:26:2c:dc:62:22:ee:65:
4c:0b:b9:9b:93:a0:5b:25:b5:1c:c2:4a:73:69:2f:a3:d5:69:
66:da:36:2a:0b:4b:c7:13:51:bd:55:90:26:9e:8f:b7:1b:0e:
cc:7a:b4:3c:8c:a5:10:4e:50:40:e6:60:0b:50:19:a2:e0:21:
e2:7b:87:de:cf:04:71:a0:a7:49:33:9f:b5:47:29:ad:0f:3a:
d3:f1:b6:73:a5:3d:0b:97:4a:f0:50:09:78:40:93:54:fa:20:
9a:24:5e:ca:07:b4:b0:81:c2:a4:b7:65:ae:f4:8c:fd:57:f1:
83:2d:80:21:2a:b9:85:74:ae:b1:e0:c2:e2:f5:49:0f:bb:15:
1d:28:c0:37:63:43:d5:ae:19:1c:7d:55:df:fd:81:d7:83:d8:
41:5a:af:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzWY41BPJ4Pn2mGL2H5muMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4
N2Q0YjMwHhcNMjYwMzI1MjEwMTI4WhcNMjYwMzI2MjEwMTI4WjAzMTEwLwYDVQQD
Eyg0Yzg2MzU0NWMwYTZiYjFkOTM2Y2MyYzgxZjRjMTdkNDVjNWU1N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65+o8HNdGPvh8AGWSxlw/NCyJKT2
qoEjZMKbBNwMY5XVprAQ4eONvukC9G74G2wc6k7JRrxxtjzMC1+HSHsRyXCS06tQ
XfaTpz/7ZDhWSWusF3v/HkjSapHKM72ZqKtwbx43MzuTJhdFcWCxoMUwhBepW6Fm
K5k+/+fvwmaG3zJRv3zYXgPAaVKRFmDP/nBsKeJg6ICGUNVHbpihT5XWUUZMKtAi
c/JAbopiK55XugjePIdkdsbiRDo8m0Zf9pBCfdzhBMK4LQPWGZv3P/IFgK+l9Rxi
jGmKO9HU8/G4bwm1GD3VEkzSw3fa0wVOXi4FSJ1BM4jQFaUAuvCHOyk8zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyGNUXAprsdk2zCyB9MF9RcXle5MB8GA1UdIwQY
MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt
NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk
LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJlf5yPU
oT5YVXGRjnx+AC+1VbFDtyNqbD3n+PJ6ZbkIGAsbRDRIWB4GLr5gSU8eHbYk/zIL
ddy63iDTQrnPlx9v3td4e23uDmsiDni9dq6zTHSam1J9gs8nrxCHXOQYmpjBeTEm
LNxiIu5lTAu5m5OgWyW1HMJKc2kvo9VpZto2KgtLxxNRvVWQJp6PtxsOzHq0PIyl
EE5QQOZgC1AZouAh4nuH3s8EcaCnSTOftUcprQ860/G2c6U9C5dK8FAJeECTVPog
miReyge0sIHCpLdlrvSM/Vfxgy2AISq5hXSuseDC4vVJD7sVHSjAN2ND1a4ZHH1V
3/2B14PYQVqvpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:43 2026 by rpki-client