Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: JpS6s6TLzy/Em8MyanydZvt2y3UzTCMWylT/Hha5MOo=
Subject key identifier: F2:6F:C6:95:4C:BB:D0:BE:9D:4F:C0:B6:4F:2D:13:4A:3B:18:EA:A8
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019E30049315A860F89E2944B816263727DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0C81
Signing time: Sat 16 May 2026 09:01:06 +0000
Manifest this update: Sat 16 May 2026 09:01:06 +0000
Manifest next update: Sun 17 May 2026 09:01:06 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: R1IpAxfsahY3r4BsYwWBjU31N49H1VyOSFzYvlae4CI=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:93:15:a8:60:f8:9e:29:44:b8:16:26:37:27:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: May 16 09:01:06 2026 GMT
Not After : May 17 09:01:06 2026 GMT
Subject: CN=f26fc6954cbbd0be9d4fc0b64f2d134a3b18eaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:8c:32:4d:68:e6:39:aa:90:63:42:16:49:
1a:92:99:91:4f:0d:d0:ba:e7:b7:61:be:ae:ce:7c:
ea:a0:ec:76:e6:fc:b0:0a:53:08:cc:33:1b:97:f0:
9e:5a:6b:82:2d:3e:ec:0d:2f:f5:76:38:3b:92:7a:
7d:56:df:c3:a5:3a:29:20:e1:11:d2:b3:f2:15:5a:
08:4e:7c:83:e8:57:49:7f:dc:5c:cc:d3:a3:bf:fe:
e1:46:c7:c2:94:7f:b5:70:2d:2f:b1:63:28:d5:9d:
ea:5f:6f:56:17:ea:30:42:6c:32:9e:46:1d:4e:82:
9d:15:3e:4e:7a:4c:5f:ae:77:9e:ae:9a:11:9a:86:
33:22:21:f6:73:ed:30:d9:1c:14:87:54:4a:df:17:
6c:38:23:fd:a9:64:02:51:46:f3:5b:82:29:c5:e9:
45:73:2b:32:38:20:2d:b3:e6:e7:42:23:86:b0:bf:
72:28:90:85:1a:4f:8c:c4:4f:6c:84:f1:dd:05:f6:
28:95:3b:8e:d7:dd:25:b0:f2:ff:a5:cc:4c:5e:40:
13:09:71:88:8a:ac:24:18:5f:1c:72:51:df:57:09:
0a:25:03:2d:dd:fc:73:3e:50:e5:55:17:6e:77:8b:
47:a9:e8:1c:80:41:2b:b2:57:d3:8a:c0:b0:fd:70:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:C6:95:4C:BB:D0:BE:9D:4F:C0:B6:4F:2D:13:4A:3B:18:EA:A8
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f8:e4:03:20:14:05:96:67:c5:72:ee:7d:af:6a:ff:d7:f2:
df:4b:7a:bc:de:3d:90:10:a1:d8:db:9f:3f:35:b0:d9:83:12:
fc:b2:32:90:ca:e4:f0:ee:21:c1:56:f7:17:0c:0e:d9:03:74:
f2:0c:e5:bd:5d:d8:a6:e4:fe:f2:94:8c:4a:39:d2:6d:af:b9:
0b:6b:9e:30:ad:05:79:cf:22:60:8f:cd:95:22:27:23:2d:2b:
b7:3a:7b:e7:bb:24:7e:09:ec:8a:a8:12:64:b2:8d:43:bc:12:
89:1e:53:6f:ab:80:9c:db:5c:c0:59:1d:3c:6e:be:c6:f2:76:
d6:d2:98:b1:c0:aa:8e:7f:41:3b:3c:29:92:c5:9d:b3:8a:5a:
8d:fd:1a:7c:ec:f4:90:56:6c:bb:87:ba:9c:c9:e7:e1:ff:1d:
14:f4:45:aa:da:45:3a:7d:5b:b9:32:a9:d4:f1:8f:1e:73:84:
57:8c:54:55:9f:9f:31:26:9c:a9:ca:ff:51:97:6c:07:65:84:
f0:90:f2:94:e1:e6:a0:95:20:9c:9b:f8:10:4a:23:db:73:ff:
2a:ea:c5:51:43:93:69:76:60:6b:aa:56:a8:4a:f4:7b:fb:3a:
7f:e4:c0:98:bc:1e:31:49:8f:14:f8:69:7f:36:29:d0:fa:cf:
45:8c:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:37 2026 by rpki-client