Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: TUGC6QMAaOxQq4dMvlPe4cRhwJzAcN/wpCjq/Kt8jn0=
Subject key identifier: C5:AD:00:7B:EE:C4:AE:2A:53:E0:72:E6:D4:D2:40:5E:A6:8A:79:15
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019D2960842494E63F1C4D9CD88B7250840C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0BF9
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: FvPylk1YctZljYKFEV5AdBmoRqtMpyqU+n7W1WZmDs4=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:84:24:94:e6:3f:1c:4d:9c:d8:8b:72:50:84:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=c5ad007beec4ae2a53e072e6d4d2405ea68a7915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:90:e7:51:2e:c9:57:8f:a8:cf:78:bf:73:
2e:d9:df:83:42:b8:7c:e4:8d:ac:c3:31:b6:9f:aa:
2e:67:bb:8a:d9:68:0a:bc:0c:0d:f8:aa:94:21:f2:
6a:54:43:c5:d1:a3:f3:30:a2:02:17:88:75:5d:ec:
3f:1e:80:1d:11:8b:1f:28:ed:47:26:97:fe:ad:23:
0d:b3:e3:dd:f4:bf:f8:38:18:56:2a:e6:fa:ca:58:
9a:09:2d:9d:bf:68:7a:78:ca:bb:61:42:c8:ba:3e:
4d:bf:e0:34:fa:ab:ae:c8:8a:16:67:6f:35:30:7f:
16:8c:4a:7f:3d:11:c9:04:d1:20:14:1a:f7:04:f6:
3a:7e:0f:e1:9e:82:3c:1e:30:81:79:6a:b0:7f:0f:
f2:0a:9f:2c:8c:b4:fa:02:cd:f7:ce:4d:b1:71:4b:
01:c8:69:37:3b:0f:dc:2c:d4:a2:b4:44:9e:96:b8:
8b:db:c6:ce:f6:91:57:f1:14:91:ca:c6:f9:dc:d2:
99:b7:c7:6a:33:46:ea:f0:ef:e5:29:7c:e9:85:f6:
f7:34:91:55:76:46:5e:71:9d:bb:8b:78:24:92:77:
d9:84:51:50:70:e5:de:04:13:46:b0:45:31:90:6a:
cf:b0:1d:bb:0f:96:bf:ac:8e:6a:1d:4d:e5:68:e9:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:00:7B:EE:C4:AE:2A:53:E0:72:E6:D4:D2:40:5E:A6:8A:79:15
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ce:2b:ab:cb:09:8a:36:9a:42:7a:36:8c:09:39:37:bd:bd:
3d:c8:7f:9b:84:49:7c:61:fb:ce:12:93:da:ca:78:ed:9f:7d:
0d:99:61:53:ef:89:e9:cb:74:09:87:91:d0:d4:20:dd:aa:1a:
cb:91:fc:83:1d:f0:64:0e:de:ed:f3:4f:35:5b:41:4c:6e:e6:
54:8f:9f:c8:fd:bb:17:44:a4:ae:95:92:90:71:b9:07:8a:cb:
d7:03:2f:66:ad:78:0b:0d:bb:4e:d2:72:40:12:ea:95:2a:00:
60:7a:4a:fb:3f:23:07:af:ee:18:38:a8:26:a7:1e:42:10:50:
fe:03:fe:9c:d6:a8:6b:1d:41:46:cf:6b:6f:b4:d6:00:a2:a0:
f5:de:b6:41:be:58:ec:a2:55:04:16:30:ea:5f:e8:b2:4f:b3:
cd:ce:72:5c:7f:ba:59:55:35:68:e3:45:af:95:c4:56:f3:18:
59:5f:85:8a:8d:c1:43:8c:f2:60:b8:02:41:89:23:9d:20:85:
98:5b:d2:0d:50:5a:eb:27:d2:55:c6:29:9d:67:8c:c0:fe:8a:
f4:5f:79:36:ac:ef:82:8a:1f:6a:3a:13:84:bc:e6:4f:ca:5b:
bf:24:6d:e2:95:25:8b:ce:ea:1a:62:d9:13:8e:4b:6b:e4:42:
2c:05:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:22 2026 by rpki-client