Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: UdDLOiJmLBCOL/ZPS0NNo237kcdZq2NQnIPkTVZsr38=
Subject key identifier: 90:40:E5:A3:26:0C:5C:95:AB:E7:C5:6F:22:0B:A6:2F:37:6B:F4:5F
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 01A0016F484DD8A93FB734FBA7C2E732BF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0D72
Signing time: Fri 14 Aug 2026 18:01:05 +0000
Manifest this update: Fri 14 Aug 2026 18:01:05 +0000
Manifest next update: Sat 15 Aug 2026 18:01:05 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: 6Fkd+VyW6Y5wI5Kvg1tecnJ3+7DvejcftiMKyVWVcN8=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:48:4d:d8:a9:3f:b7:34:fb:a7:c2:e7:32:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Aug 14 18:01:05 2026 GMT
Not After : Aug 15 18:01:05 2026 GMT
Subject: CN=9040e5a3260c5c95abe7c56f220ba62f376bf45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:ad:ad:5e:98:4c:5e:32:93:62:de:48:0a:
be:ce:14:a8:97:6e:e3:44:21:b6:7f:f8:ab:b3:d8:
89:86:82:e5:55:43:c9:d3:5b:f2:26:ec:d4:1d:2c:
f2:c4:15:62:2b:58:26:f7:20:a9:64:5c:e5:0e:ce:
8a:10:e5:9e:b5:9c:f3:8a:e4:69:d0:04:77:9b:f2:
d8:95:40:5c:a8:c5:4f:bc:c0:c2:46:b9:8d:c7:7b:
ff:78:96:f9:d2:5f:42:ea:b6:42:8f:70:0c:89:37:
0e:7f:18:89:91:a5:01:84:92:3b:f2:ef:ca:26:75:
33:a2:a8:a6:8c:d2:c8:41:64:0a:eb:a0:93:7d:d4:
38:c8:ea:0a:df:6d:0f:1c:56:95:89:18:d5:42:92:
55:7c:8f:62:7c:5e:92:5c:de:6b:10:e3:3a:0a:50:
27:31:a7:c9:d4:8c:2a:65:36:6d:33:a9:3c:17:5c:
e3:a1:cb:92:3c:a0:03:3d:78:ae:f2:4f:7b:ea:9b:
31:9e:f4:ac:c1:cf:4a:c7:d6:d5:5e:fe:86:ad:95:
c5:6f:1e:9d:03:ba:7d:6d:d9:96:3a:49:16:78:f0:
4b:8c:71:23:ea:5d:6e:84:c8:30:24:45:86:2b:00:
00:ed:11:69:b2:a4:7e:16:23:2e:bb:db:83:be:f6:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:E5:A3:26:0C:5C:95:AB:E7:C5:6F:22:0B:A6:2F:37:6B:F4:5F
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:4a:c9:54:61:bb:84:a0:6e:21:f9:f8:fc:83:61:2a:21:
cf:dc:d4:ea:07:cc:26:72:47:fe:16:2d:05:00:8d:d8:96:52:
28:5c:19:c5:87:aa:e6:1d:2d:1c:0e:50:fa:6a:1e:2d:31:9b:
af:a5:81:1b:66:a5:db:e7:a1:8e:a0:dd:f3:43:28:6d:aa:19:
12:77:f4:08:60:cc:3d:79:ab:b0:07:b2:bb:3f:c3:fa:9f:78:
3b:87:2e:b1:e1:f5:12:8e:48:d5:6f:8c:a9:88:87:fe:a9:c0:
f6:ad:d5:39:bc:25:b3:53:3f:d4:d3:11:84:f0:47:f3:05:f1:
cf:52:43:4f:7d:1d:fc:a9:fb:a3:7b:ef:56:22:4b:f0:a0:f6:
88:e2:97:74:ad:c7:95:6d:f3:a2:c4:ef:61:5f:56:95:9d:94:
b3:50:6b:04:1a:26:60:af:c3:cf:2f:02:4f:0c:6f:f9:11:c2:
b7:ef:9a:91:02:4c:9f:8f:7d:53:76:70:a1:bb:52:c9:04:fc:
1d:31:d4:cc:5a:ba:71:44:41:38:05:7f:6a:20:81:52:c3:ff:
fd:c1:66:d6:24:21:70:a3:16:74:a9:a8:a8:87:df:c2:90:18:
38:ce:29:09:4c:5a:a4:6e:e5:bf:4c:be:ff:23:95:b7:3c:c0:
b2:3f:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:44 2026 by rpki-client