Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: BN8nDGLXVpWAZaL3T02ZaqeIXkWLdX4qwhu1g8Hy/0k=
Subject key identifier: 72:7E:EF:01:DE:96:1C:8D:63:69:61:60:16:7D:95:89:C4:F5:31:7E
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 01A1DE70D2E5A447D0915C98B647865F487A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0E69
Signing time: Sun 15 Nov 2026 09:01:38 +0000
Manifest this update: Sun 15 Nov 2026 09:01:38 +0000
Manifest next update: Mon 16 Nov 2026 09:01:38 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: N7cHxq0r0BV249pmSDbItv1vGtkUNueG02DUXyNQXDs=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:d2:e5:a4:47:d0:91:5c:98:b6:47:86:5f:48:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Nov 15 09:01:38 2026 GMT
Not After : Nov 16 09:01:38 2026 GMT
Subject: CN=727eef01de961c8d63696160167d9589c4f5317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:34:c6:c9:7d:b0:fc:f9:bf:0b:49:e2:57:
09:12:5a:81:4e:33:dd:2c:6f:51:59:56:75:67:9e:
d4:46:8f:ad:32:b5:7b:ea:69:13:27:9b:a4:fe:8e:
08:a6:76:f2:8f:76:e5:aa:b4:8a:3b:49:12:c6:e4:
65:68:5f:b8:b8:4f:4d:8c:b7:7f:e3:8c:a0:c2:21:
cf:d6:dd:9d:00:b2:4a:42:34:05:34:28:fe:ba:4e:
13:0c:f1:65:8d:b6:bc:1a:71:4c:24:38:4b:b2:21:
b7:f3:2a:a0:33:64:c5:f4:16:8f:cd:27:c8:b9:ca:
b6:38:11:14:39:76:19:8f:e6:a3:12:7c:35:e6:0e:
6e:2c:90:2d:aa:b7:79:62:01:0a:4a:cb:67:62:c4:
47:d5:8a:38:79:04:73:76:e9:f3:e8:07:88:ae:6c:
01:9c:b0:eb:bc:f6:96:2d:81:c7:c2:8e:11:41:4b:
b0:8d:ec:72:ea:ce:3d:b0:b2:3b:b6:ec:80:8d:19:
34:a1:d2:1e:79:82:de:6d:38:c5:e6:04:27:9b:bd:
d9:cd:1c:fc:e7:1d:88:c2:fc:27:4a:a1:aa:d6:b8:
fc:37:b3:d1:9e:ba:65:e6:24:79:a5:f0:34:ff:17:
da:f2:5a:28:53:1c:08:28:71:a6:7e:46:6d:76:3c:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:EF:01:DE:96:1C:8D:63:69:61:60:16:7D:95:89:C4:F5:31:7E
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d9:a9:54:21:e3:81:a0:9e:70:8b:02:e3:a2:14:5d:b5:cf:
f4:c1:fa:d8:c3:38:5d:e4:61:9e:34:25:52:d1:68:d2:6b:3a:
c2:42:d0:20:0f:a4:08:54:b9:46:94:b7:9e:34:ad:a3:b0:b0:
65:6e:a0:ab:93:57:05:19:13:42:eb:95:12:bc:55:1a:ce:30:
7a:2e:76:c0:60:d6:3b:a9:c7:f3:ee:54:f3:29:6a:f7:e7:f8:
5a:0b:93:92:4a:61:6d:2e:c7:d8:a9:ec:db:54:89:51:8f:12:
c5:3c:51:73:21:3b:dd:e3:d4:f8:30:48:ed:d8:ff:69:06:bc:
c3:91:59:62:3f:1d:50:9b:17:d7:af:74:ff:f7:b8:20:03:dd:
91:fb:d0:a7:26:07:57:90:25:2e:f7:1c:64:59:fb:6d:19:e5:
d3:bb:23:32:25:32:bf:98:fc:d3:77:70:1b:ec:09:5a:91:ff:
c8:2f:3a:c1:aa:47:43:12:27:e9:c8:87:da:22:71:93:72:db:
46:99:28:93:23:c1:63:cf:76:d3:25:70:12:a0:45:56:71:00:
24:30:9f:e9:ec:65:59:76:1e:0f:61:85:1e:dc:39:e9:cc:cd:
ae:28:bc:1a:d4:ad:45:f2:e2:61:fd:62:22:91:72:84:97:ee:
71:0b:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:30:03 2026 by rpki-client