Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: d2gAbG2bZVpuAzC3VBA3rKeH8tJ4Z+sQHofnuxpZuhM=
Subject key identifier: 13:A7:58:6B:C3:16:64:F4:BD:73:14:3D:D6:9C:5B:9E:0C:DB:01:68
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 01A0C859216AC3BCA3147EF1857419F8266A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0DD9
Signing time: Tue 22 Sep 2026 09:01:19 +0000
Manifest this update: Tue 22 Sep 2026 09:01:19 +0000
Manifest next update: Wed 23 Sep 2026 09:01:19 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: aPWVzH3P4XrJdaU+997HgWDIVA1+ZAT/u8k4dvr2qUo=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:21:6a:c3:bc:a3:14:7e:f1:85:74:19:f8:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Sep 22 09:01:19 2026 GMT
Not After : Sep 23 09:01:19 2026 GMT
Subject: CN=13a7586bc31664f4bd73143dd69c5b9e0cdb0168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:72:a6:ed:47:fd:e8:f0:5a:8d:d6:dc:da:
7d:5e:c1:b6:e3:c3:4f:4c:26:7f:80:6a:38:7a:1f:
d3:57:e9:c8:7d:88:b0:38:2b:70:ed:3d:ac:19:5b:
50:ca:44:8e:52:9f:02:5b:08:99:81:94:f7:80:72:
e9:db:25:bf:85:fd:3e:93:5b:8c:9a:4f:a0:99:49:
b7:2b:a1:41:17:29:12:8b:d1:e1:5e:c4:14:30:e7:
21:00:bc:01:6d:97:0d:93:db:ab:39:07:96:bf:73:
4e:c2:5d:64:2c:15:6a:93:0b:ed:04:4b:ad:34:aa:
0d:d6:3a:bb:94:32:ad:90:86:4b:fc:8e:6d:7f:ae:
3d:c4:1f:23:3e:a2:e6:e8:5c:a4:57:50:87:d3:d7:
11:43:73:3c:c1:a8:79:bc:1e:aa:35:09:4c:0f:c2:
9f:05:cb:49:d3:28:7a:ce:7b:4e:88:0e:f9:ae:1d:
75:03:9c:89:18:0d:99:79:66:95:08:b4:c1:d4:81:
f9:6a:2e:11:58:71:71:4d:3a:d5:04:11:78:fe:8e:
41:3a:bb:8c:f9:9b:e0:34:31:57:3a:7c:51:f7:9e:
8f:c3:e4:bb:2e:19:70:97:9a:fd:c4:64:ac:0a:fd:
13:87:2f:48:0d:71:24:bf:e2:59:32:bc:47:98:48:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:58:6B:C3:16:64:F4:BD:73:14:3D:D6:9C:5B:9E:0C:DB:01:68
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:58:d7:cd:e6:1c:cd:71:11:ea:21:a1:dd:c7:49:b0:ac:
0d:e1:8f:a3:7a:4d:51:4e:93:7a:e1:57:d9:bf:a1:38:24:03:
4e:6c:8c:94:51:58:a0:de:86:10:da:1e:e0:fb:d4:ad:a1:fb:
67:a5:98:b5:71:89:fd:28:6c:54:e6:df:1c:5b:1b:ae:de:a7:
f9:a6:3f:3a:75:cd:74:db:f3:42:6a:75:7e:24:2f:ad:4e:6c:
4a:db:50:c6:67:f4:f4:16:f2:c9:94:f5:5b:31:57:0f:89:bb:
75:07:9d:61:33:da:ea:b6:24:56:05:56:4e:43:1f:e4:ff:60:
f2:ea:9a:a0:57:05:4b:7f:b2:a7:77:fd:f9:a5:e3:8f:40:ca:
df:5f:e8:62:a2:e7:2d:40:4c:90:5b:12:fd:fd:cd:07:fa:18:
5a:24:f5:2b:e7:a7:e2:85:89:7e:ce:05:38:6f:f7:d6:c7:4d:
fb:b6:95:a1:ec:a6:2d:7d:8e:1b:a1:09:de:78:13:6d:9a:f9:
a3:25:fa:e5:d7:d0:0e:30:e8:c3:15:02:22:ed:cd:3f:4d:98:
0e:bd:b2:6c:fb:91:7c:a7:e4:7f:ab:f3:10:c1:31:5e:97:85:
d4:52:20:f2:d1:6b:30:59:01:e4:52:50:d0:de:8b:eb:04:3b:
bd:ec:0e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWSFqw7yjFH7xhXQZ+CZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk
MDVjNmYwHhcNMjYwOTIyMDkwMTE5WhcNMjYwOTIzMDkwMTE5WjAzMTEwLwYDVQQD
EygxM2E3NTg2YmMzMTY2NGY0YmQ3MzE0M2RkNjljNWI5ZTBjZGIwMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEhypu1H/ejwWo3W3Np9XsG248NP
TCZ/gGo4eh/TV+nIfYiwOCtw7T2sGVtQykSOUp8CWwiZgZT3gHLp2yW/hf0+k1uM
mk+gmUm3K6FBFykSi9HhXsQUMOchALwBbZcNk9urOQeWv3NOwl1kLBVqkwvtBEut
NKoN1jq7lDKtkIZL/I5tf649xB8jPqLm6FykV1CH09cRQ3M8wah5vB6qNQlMD8Kf
BctJ0yh6zntOiA75rh11A5yJGA2ZeWaVCLTB1IH5ai4RWHFxTTrVBBF4/o5BOruM
+ZvgNDFXOnxR956Pw+S7Lhlwl5r9xGSsCv0Thy9IDXEkv+JZMrxHmEgh2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOnWGvDFmT0vXMUPdacW54M2wFoMB8GA1UdIwQY
MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt
Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh
LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCRY183m
HM1xEeohod3HSbCsDeGPo3pNUU6TeuFX2b+hOCQDTmyMlFFYoN6GENoe4PvUraH7
Z6WYtXGJ/ShsVObfHFsbrt6n+aY/OnXNdNvzQmp1fiQvrU5sSttQxmf09BbyyZT1
WzFXD4m7dQedYTPa6rYkVgVWTkMf5P9g8uqaoFcFS3+yp3f9+aXjj0DK31/oYqLn
LUBMkFsS/f3NB/oYWiT1K+en4oWJfs4FOG/31sdN+7aVoeymLX2OG6EJ3ngTbZr5
oyX65dfQDjDowxUCIu3NP02YDr2ybPuRfKfkf6vzEMExXpeF1FIg8tFrMFkB5FJQ
0N6L6wQ7vewOUg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:16:42 2026 by rpki-client