Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: PA917k2XfnPmFnxbeUUjw+uW9Q1MF9WALRuhfHaYJ5U=
Subject key identifier: B1:79:60:18:26:02:1B:1A:34:0F:0C:89:CB:26:88:05:81:D5:02:78
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 01A0D200D6660B12685AE34B853FCD87C1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0DDE
Signing time: Thu 24 Sep 2026 06:01:05 +0000
Manifest this update: Thu 24 Sep 2026 06:01:05 +0000
Manifest next update: Fri 25 Sep 2026 06:01:05 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: 3kMRx9mY7T1gECmbRb/gDJWaUwqj2AJLT1zno95n108=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:d6:66:0b:12:68:5a:e3:4b:85:3f:cd:87:c1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Sep 24 06:01:05 2026 GMT
Not After : Sep 25 06:01:05 2026 GMT
Subject: CN=b179601826021b1a340f0c89cb26880581d50278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:48:5e:92:8f:fe:51:8a:66:7b:5a:a4:c0:
80:df:6c:1d:6a:13:66:83:0f:50:eb:4f:4b:e8:f9:
88:c2:3f:e1:d5:75:be:0c:4b:d2:49:a6:60:52:fe:
ef:1d:ce:cf:bf:49:95:d2:f5:34:9c:48:6e:4b:f5:
b7:43:36:1a:cc:24:08:ac:c6:2e:a7:32:46:ce:85:
d3:49:a6:53:aa:02:6d:97:1a:99:cf:8f:5e:7c:6b:
5f:49:e2:9e:72:cd:c9:50:05:71:94:a5:60:8e:19:
fa:b5:60:5b:12:65:eb:39:52:ba:3e:b3:62:e3:d4:
c8:ab:8f:5c:3e:0b:94:b0:8c:7e:84:19:5b:f9:60:
47:17:8f:46:4b:33:67:21:ec:7b:d1:00:b6:0b:47:
8d:a6:9e:9c:c6:5e:e4:56:ca:27:13:5c:c7:b0:ba:
25:93:5d:26:1c:d1:88:4f:37:6c:3d:8b:2b:59:fb:
72:08:55:58:3e:38:5f:39:e7:e7:cc:c9:e3:4f:91:
44:da:d1:3f:b1:e3:2d:65:12:b4:f5:2d:fc:52:73:
4a:1d:9a:3f:7d:10:06:f8:bd:a1:6d:a1:28:8a:1c:
a0:78:84:9c:4d:9b:f6:3b:57:1f:01:d0:54:fb:8c:
58:0e:04:60:98:22:a6:e2:74:20:df:66:c8:04:5f:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:60:18:26:02:1B:1A:34:0F:0C:89:CB:26:88:05:81:D5:02:78
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c1:be:95:21:76:74:8b:e5:3d:3c:c9:29:69:e5:08:05:86:
a8:e1:27:a8:40:67:60:af:19:ca:66:d3:7f:09:d3:0f:89:07:
6a:0d:84:e9:7a:e5:b4:aa:d3:74:0f:c8:43:0c:65:45:d6:72:
e3:79:1e:14:79:4b:b3:92:03:35:0e:78:69:ce:25:cf:aa:1f:
e6:0b:e6:9b:cf:ce:c9:a0:9e:2c:63:5e:f5:f0:92:39:fb:62:
b6:14:a9:8c:01:fd:22:77:d5:f7:ec:2d:69:b3:a9:d8:24:1d:
56:71:c4:73:57:a2:a0:ac:28:c6:6b:e7:f5:a1:62:01:34:57:
26:f3:7d:3c:d2:81:3d:53:b2:17:1c:ac:39:61:c8:dd:76:d8:
a5:29:72:6a:5b:67:fe:c0:1e:dd:a1:4c:55:2d:18:e0:68:cd:
08:39:ac:33:d8:1a:bd:01:1c:5b:d8:ce:b2:bf:fe:3d:c3:43:
c4:5a:36:fe:74:75:72:79:d4:09:8b:5d:77:a7:fe:f7:11:7d:
00:36:b6:1c:5d:ee:1f:ca:8d:9b:1a:db:7b:28:bf:70:96:57:
49:7e:8a:92:5e:84:b9:21:00:41:7c:2a:81:40:b9:69:aa:c3:
23:82:e3:d2:99:07:54:5d:be:a5:28:93:10:67:35:83:85:5a:
86:fd:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:11:34 2026 by rpki-client