Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: gbZ9ucGek96YtlunhjfioLsSCxVJlW4ZzidLzvs/TXQ=
Subject key identifier: E4:FB:50:B0:A8:BB:7F:3D:DD:C0:A7:A9:5F:3D:A1:EE:F6:D2:78:6E
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019F916D63E00C4E094BE246386C6A1BD315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0D38
Signing time: Fri 24 Jul 2026 00:01:32 +0000
Manifest this update: Fri 24 Jul 2026 00:01:32 +0000
Manifest next update: Sat 25 Jul 2026 00:01:32 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: 0SIMC93yVqXQb1wu/aQerSI8RDV/Qo/qj7DqhFXokvw=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:63:e0:0c:4e:09:4b:e2:46:38:6c:6a:1b:d3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Jul 24 00:01:32 2026 GMT
Not After : Jul 25 00:01:32 2026 GMT
Subject: CN=e4fb50b0a8bb7f3dddc0a7a95f3da1eef6d2786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:6b:9d:6c:b0:8d:7f:da:8d:74:a8:5a:1b:
78:78:fd:4a:ac:64:8d:b3:cf:78:55:02:4a:ed:b5:
a7:ca:55:0f:fb:05:18:fb:d9:d9:67:54:bd:eb:c7:
30:6a:ec:ce:b7:38:27:86:0b:41:e2:0c:83:96:ed:
42:45:3a:88:8a:17:17:d3:0a:ea:1a:f5:15:0d:d1:
fa:59:f7:5c:a3:dc:96:92:be:07:94:a3:c5:e9:8b:
1b:9d:1f:d0:42:0b:86:f4:39:8c:90:3a:98:a3:86:
9b:da:cb:39:86:3e:b8:25:3f:06:92:cd:9b:65:7f:
b9:1c:dc:86:cf:9d:72:29:2a:74:bd:ae:8c:a9:61:
41:89:74:b9:0a:c6:cb:ad:1c:9c:47:a1:45:f6:cf:
50:eb:c3:95:06:a2:41:95:b8:82:0c:c2:b6:49:6e:
7c:7b:e4:e1:0b:b2:44:83:07:4c:1e:e9:6f:c9:f5:
ad:d7:98:4d:0e:56:0a:2e:36:15:2b:7e:d5:97:da:
6c:b1:ef:db:28:34:80:35:de:75:92:91:0c:67:b3:
34:aa:64:9c:0d:d9:cc:d0:0d:fb:cc:5b:1a:24:19:
02:ca:51:8c:92:64:c6:6c:5e:b5:3c:69:42:e7:fd:
70:77:b5:0f:cf:48:21:fb:70:ac:01:a2:92:42:31:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:50:B0:A8:BB:7F:3D:DD:C0:A7:A9:5F:3D:A1:EE:F6:D2:78:6E
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1a:ab:78:1a:88:76:ff:df:5c:88:c5:28:15:24:6f:c3:f6:
3f:48:65:e3:b4:e1:d4:1c:5a:a8:be:13:29:dd:43:8e:96:25:
d4:54:1f:60:3c:48:91:9c:62:38:83:8b:70:43:c6:d5:9a:d5:
c8:ed:9e:74:1f:84:49:dd:ee:a1:04:74:c6:dd:2a:ad:ac:50:
a1:f1:41:0e:14:1c:f2:a4:be:01:62:0e:70:c8:73:24:da:af:
fc:25:2f:07:53:4f:00:f7:04:8d:57:1e:d4:16:2a:4a:6e:41:
a8:11:f2:cf:b1:e2:ae:b0:ff:7f:f0:99:50:53:4f:d5:80:1b:
79:0e:37:bb:75:1d:af:5d:7e:99:94:59:49:3e:14:a8:ad:9e:
ad:42:89:1d:35:28:1e:de:68:67:e4:73:16:23:c2:2c:7d:05:
fd:fa:e6:18:a0:f7:07:87:4f:b5:59:33:62:4c:f7:fb:c9:67:
4e:aa:0c:6c:93:66:de:c0:ed:fa:9f:64:b8:4e:92:b8:01:21:
32:e2:2f:09:9b:5f:3a:19:64:b9:03:e1:4f:33:7e:33:15:66:
f4:3b:28:cc:ce:e1:a5:d9:0b:cb:4d:5c:f3:22:71:76:9b:f7:
1b:d7:65:43:46:e3:a7:ed:4e:9d:26:88:93:cd:4c:52:4f:12:
80:3b:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:45 2026 by rpki-client