Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: DgZ2L1PVclsd3XIzCA0j5L2mQDMiDYn3gSlgpP4W0kA=
Subject key identifier: BA:B3:8A:98:C2:CD:7F:37:5B:BF:A0:E8:95:A9:E4:CB:C1:52:E5:B0
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019F17C32427DAF63C93A08B502B1C242052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0CF9
Signing time: Tue 30 Jun 2026 09:01:32 +0000
Manifest this update: Tue 30 Jun 2026 09:01:32 +0000
Manifest next update: Wed 01 Jul 2026 09:01:32 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: sye8WIg2Fxq94pmnXSToXw7kpyJLN8hQk2oHHzw6/QU=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:24:27:da:f6:3c:93:a0:8b:50:2b:1c:24:20:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Jun 30 09:01:32 2026 GMT
Not After : Jul 1 09:01:32 2026 GMT
Subject: CN=bab38a98c2cd7f375bbfa0e895a9e4cbc152e5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:8b:46:8a:ec:e9:6c:d5:d6:15:bc:c4:ea:
88:c2:c4:10:0e:52:73:57:f0:f6:76:16:fe:67:81:
e3:36:26:60:77:39:18:37:56:f6:ba:f1:1a:fe:c1:
7e:5e:12:69:e6:b3:6c:a1:8d:90:9f:aa:f3:a5:8e:
55:cd:3f:ca:e3:2d:6a:7a:d0:23:ce:06:bc:20:37:
b0:89:82:af:46:bf:7d:6f:45:24:63:86:ed:cc:54:
89:04:f6:09:32:70:d8:85:ad:eb:ba:a6:8e:c2:69:
d8:e6:fe:6c:ff:9e:d5:61:70:c3:e7:66:04:5f:ae:
7a:0f:32:7e:07:4a:42:e2:84:49:09:ae:3a:7d:1e:
4a:10:ef:13:58:74:c6:1b:ee:46:b4:84:1e:91:c7:
59:4e:23:3d:ce:89:c9:4e:f7:a8:60:fd:44:d6:32:
94:47:77:72:e2:79:e9:b6:2d:81:b1:d8:6b:0e:41:
48:e8:99:a9:43:38:01:ff:75:51:c7:f7:37:d9:b7:
12:f1:3b:0d:cf:71:81:2c:49:1c:a1:94:2a:a1:fb:
10:68:e2:d4:42:38:1b:6d:97:70:59:af:2b:32:e9:
4a:b0:8a:2a:ba:8f:42:20:28:11:ad:ed:48:ac:9b:
13:ed:6b:96:74:16:3a:e5:f6:44:84:e8:41:29:96:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:8A:98:C2:CD:7F:37:5B:BF:A0:E8:95:A9:E4:CB:C1:52:E5:B0
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:31:1b:9e:4e:34:a4:59:fc:c6:e0:27:8a:5e:7a:db:6b:9c:
e0:03:3e:ea:b4:f1:0c:2a:fb:05:d8:6c:66:0c:b3:39:9b:c1:
27:7b:dc:98:8c:8e:e5:5b:ed:95:16:c2:42:31:89:a0:82:20:
60:bb:9d:31:05:f8:17:16:92:77:98:6b:b0:9c:6f:1d:a3:8a:
0d:f2:4d:68:60:40:b1:f9:d8:fc:00:bf:da:19:23:ec:ad:bf:
7e:20:4e:80:86:3d:41:2d:12:73:88:7d:27:b7:f1:96:95:ef:
b3:d2:a1:fe:2c:f1:20:6e:62:c2:d6:3f:02:17:33:a5:67:5f:
f6:1e:50:b0:7f:ab:9f:f6:56:0a:7a:96:b9:90:9c:42:2d:35:
d3:24:8e:8f:c0:39:2f:c6:81:18:97:81:68:aa:0e:a9:59:55:
17:c3:8f:93:fc:c8:6b:0a:ee:fe:10:50:8d:e3:d4:b1:23:ea:
2b:fa:b1:1e:bf:72:46:54:95:0b:b2:07:fe:c9:7b:85:ed:3e:
00:09:1c:67:3a:3c:ba:3d:37:d6:c0:f8:4c:f9:c4:f9:51:58:
b9:14:ea:41:60:7d:77:f3:c1:90:c3:de:72:45:9f:6f:22:03:
ff:6d:2c:77:39:d2:77:fe:95:cd:2e:95:1e:e9:4f:77:d5:8b:
75:9a:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:23 2026 by rpki-client