Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: 7zHCSAXceFPnF1u0PtZkDKoJSOI2Kdoh1SJ84J9M7OM=
Subject key identifier: 77:91:C0:6C:FB:4F:03:44:85:5A:A5:0D:F9:73:9F:B4:F7:4E:55:77
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019D38D2A20E84461046213DD2C03A133CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0C01
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: VRX5vEG1y5fjjmUxEfyQZ076ExbE3nHw1as6A1PLIAM=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a2:0e:84:46:10:46:21:3d:d2:c0:3a:13:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=7791c06cfb4f0344855aa50df9739fb4f74e5577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:1b:7e:d1:bf:32:33:95:71:f1:3f:a0:21:
e3:24:ce:bb:a3:5d:11:b0:96:0c:e7:c1:9c:89:55:
ca:0b:b0:c9:d2:66:65:1e:8a:0e:3a:db:c7:d4:f5:
2a:e0:6e:ba:7b:8f:f7:08:ed:9a:e1:8a:cc:ef:36:
be:f5:8d:e1:2c:72:f0:64:10:18:d2:4a:e1:83:4c:
94:ab:06:d4:4d:d5:cc:5e:a1:44:76:21:d8:ce:02:
8e:1b:06:d7:85:e9:0f:4c:94:2f:66:c9:70:26:77:
7a:70:29:f8:58:65:22:b5:f1:25:c4:65:03:51:02:
ce:f5:ea:6d:7c:8f:e0:c9:8d:df:92:90:c2:91:fb:
f1:49:28:d1:92:17:68:b8:9b:d8:af:f9:65:a9:dc:
ef:bb:18:ba:b3:d2:df:ec:75:ad:88:1c:44:57:da:
52:4b:d6:fc:bf:b5:b6:bf:ff:d0:00:e2:20:6a:4c:
00:52:83:b7:69:bd:f9:fa:9a:42:94:9e:fc:bf:28:
d4:75:d3:67:fc:d9:ef:36:7c:40:8f:d2:e6:3e:ef:
14:8a:5d:09:35:c0:12:b0:75:6b:0d:f6:b9:14:54:
7c:f9:9b:57:db:77:14:a1:b7:86:f2:64:b0:9c:d2:
04:85:70:12:87:48:3e:a1:53:1a:9e:51:de:05:52:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:C0:6C:FB:4F:03:44:85:5A:A5:0D:F9:73:9F:B4:F7:4E:55:77
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:22:a2:0a:76:82:db:95:70:df:ec:0b:91:bc:5a:c4:10:ad:
85:ab:b1:3e:69:f8:35:aa:e7:b4:a8:49:d7:a4:30:8d:83:7f:
99:2f:14:61:bb:8b:68:f8:2e:e6:06:bb:dd:bc:04:4f:fb:cd:
0c:e5:3c:da:c1:44:0e:79:a7:15:83:82:fd:05:be:46:d7:9e:
a4:38:eb:d2:96:8f:11:a4:b3:65:6b:52:8e:00:4c:80:2e:a5:
ba:0a:88:16:f6:9b:ad:82:e5:8a:6a:3c:26:88:d5:21:60:2b:
3c:8b:b3:84:1c:12:f6:30:53:8e:06:86:3c:30:3a:02:aa:e3:
d7:e7:89:bd:34:50:2b:ba:b9:0c:b1:69:e7:90:cf:a0:0c:c9:
09:1c:a2:6e:57:59:63:90:d8:0c:f6:d9:0a:1a:c6:b7:51:4b:
b4:56:91:01:48:1e:78:cd:4b:22:b1:62:b0:c8:08:2a:e4:1b:
94:d9:2a:8d:ee:b7:9c:32:4f:7d:a2:6f:9c:b6:ae:50:31:6b:
4f:e3:c3:5b:e2:1f:01:0d:06:53:c5:92:b3:ca:74:08:73:07:
25:b3:53:43:16:17:05:17:b9:00:df:8f:90:d8:b2:e5:bd:7d:
db:ae:e2:4f:5b:cb:9a:b7:06:a6:71:8c:2e:6a:eb:be:90:cf:
8e:4d:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:32 2026 by rpki-client