Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: 20Sw0TF/99xk/Jc324iRDXitTFR4yyCVFP6lRvM4XO8=
Subject key identifier: 26:66:B6:EB:F3:1B:2A:42:4F:50:A6:0C:91:32:90:5D:D1:11:C0:73
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019CADC740612153FD715FF31480232CE422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0BB9
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: owSZZ3WWiIzMiaevT2oqFQm/KZvNsrNkVhQeM2JSdWA=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:40:61:21:53:fd:71:5f:f3:14:80:23:2c:e4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=2666b6ebf31b2a424f50a60c9132905dd111c073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:35:21:76:d5:1a:92:b9:83:86:8b:3b:2d:
fc:ed:fd:f4:2a:2e:a4:8b:f6:66:e8:42:f2:ea:eb:
49:3a:fd:6e:4d:43:9e:60:c4:39:f9:83:34:c5:65:
10:bc:05:84:a1:8e:12:d1:b7:6a:f5:c2:bf:ee:17:
e5:a7:73:cf:9f:e2:5d:48:20:3a:0e:9b:75:95:32:
12:f2:76:58:7a:55:2e:c4:c1:91:27:b1:49:50:6a:
7a:06:b0:3d:6e:f9:c7:76:e5:64:d0:df:e5:57:0e:
0a:27:97:ed:5b:d3:d3:1f:ab:3b:41:d6:79:47:89:
52:43:eb:d5:f1:73:7a:0e:3e:46:78:c6:0d:c4:84:
36:67:c6:dd:41:56:74:30:d8:be:97:ea:23:98:ad:
2e:2d:15:66:fb:8d:e8:e9:58:13:7b:46:ba:a0:87:
d4:f8:5b:b3:f9:88:c9:26:22:a0:38:cb:11:72:9d:
c7:2d:20:1a:5f:7c:6c:0c:ad:b5:62:c3:86:12:67:
07:f1:d1:ac:20:86:82:ca:7c:ab:69:61:aa:e9:01:
d2:1f:c2:db:f0:9b:5b:75:36:a6:ad:df:6e:20:6d:
78:1d:c8:f6:55:13:32:07:57:3e:92:e4:b3:bf:83:
4b:0d:fb:3a:7e:d1:39:49:7c:0c:3b:34:4e:30:b8:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:66:B6:EB:F3:1B:2A:42:4F:50:A6:0C:91:32:90:5D:D1:11:C0:73
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:99:2b:6f:5d:00:9b:97:79:92:ae:8b:cf:68:e3:5a:c5:
b7:2f:81:fb:08:91:10:24:6a:be:5c:2a:1b:be:bf:3b:23:db:
19:a4:c8:02:c9:27:08:59:64:a5:b0:b9:c1:a2:7b:c4:01:e9:
4d:38:9b:af:df:ec:30:27:98:bc:da:fc:f9:af:3d:01:0a:2f:
ae:72:43:0d:e1:e7:ff:59:04:c5:9c:12:2a:15:6f:f1:bc:ce:
fa:b5:e0:7e:ed:a3:80:ac:de:27:bf:64:e8:1d:e8:04:4a:c2:
20:b4:e3:ee:d8:e9:86:df:08:f7:35:63:32:85:4f:a2:4d:3f:
b6:e0:7d:d7:74:d4:fc:f4:16:c4:e6:85:f3:07:1c:87:e3:b2:
75:16:3e:a0:a7:96:e0:c2:7d:cc:fe:f0:b4:31:f7:f0:a4:a6:
f8:29:7b:c8:30:0f:20:67:d7:92:65:bc:e8:e9:09:fe:86:1f:
67:dd:e3:5b:51:13:8d:7e:74:51:f3:72:1e:a4:d4:3c:65:3c:
a7:4f:6c:ec:cd:18:d5:e2:a1:69:60:49:db:5e:2f:b7:ed:30:
29:11:06:32:3c:9c:82:6d:a7:76:d3:5a:e4:70:70:2c:d2:cf:
37:c7:02:bb:b7:88:dd:25:c9:f6:c6:a8:66:5d:4d:d3:85:96:
ca:fd:6c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:50:01 2026 by rpki-client