Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: p83O4CwgfHUJOjGWnX7IxE3EDfRdWhPYlFMz7V2/fnM=
Subject key identifier: 29:B5:93:99:C4:64:77:49:5A:56:8D:B9:A9:B7:10:77:F2:34:79:8E
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019D9962E25A73796B2A46E59B74DEB618A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0C33
Signing time: Fri 17 Apr 2026 03:01:27 +0000
Manifest this update: Fri 17 Apr 2026 03:01:27 +0000
Manifest next update: Sat 18 Apr 2026 03:01:27 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: hrxO0Q/zbBDcXozZrES5HhEbsImSBN7hoAI1lr2BXgY=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e2:5a:73:79:6b:2a:46:e5:9b:74:de:b6:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Apr 17 03:01:27 2026 GMT
Not After : Apr 18 03:01:27 2026 GMT
Subject: CN=29b59399c46477495a568db9a9b71077f234798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:92:ce:e1:a9:18:c9:82:48:73:50:10:ee:
d3:58:c8:8b:f2:7f:96:d8:7c:1a:f1:3d:b2:30:ee:
22:a2:31:f9:21:94:c9:b3:cb:d6:ab:1c:05:56:5a:
21:44:9d:38:c7:9c:15:1c:95:31:04:e7:f8:a5:83:
d0:72:92:c9:09:de:54:19:a0:ae:9c:23:cd:76:5a:
5c:7f:e9:9a:35:61:2a:b6:01:ce:4f:04:4c:04:51:
6a:29:c5:06:a2:a4:71:fe:83:e9:c3:3f:d4:7d:94:
0e:86:91:c7:8c:23:ec:3f:d2:b0:75:84:f5:b0:76:
1f:43:66:4a:f8:27:fc:61:04:a7:7d:5e:95:1c:0b:
9c:91:38:c0:07:75:0a:e4:40:6b:3f:68:6b:88:26:
d7:c5:eb:01:83:8e:44:e8:73:5c:58:f4:b9:b7:8b:
8d:08:6e:d0:61:3c:e7:29:9f:8e:b6:6c:de:de:25:
fb:72:72:bb:78:36:1f:79:ed:7d:f9:5f:00:e7:81:
a9:33:52:df:a8:c6:c5:88:e4:6a:0c:30:a7:d0:9f:
79:b3:84:e0:40:73:15:6f:55:82:2a:99:bf:0e:e3:
de:82:b1:7b:79:78:32:5d:ac:4e:42:57:02:57:99:
a5:0d:9b:92:83:4d:8a:c9:5c:8a:ec:4a:0e:58:b8:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:93:99:C4:64:77:49:5A:56:8D:B9:A9:B7:10:77:F2:34:79:8E
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:45:35:96:ad:4f:1e:00:93:3a:3c:f9:26:d5:49:a8:fc:d1:
bd:66:11:4f:d7:d0:00:80:7b:42:92:b0:11:3a:c6:50:e3:5f:
dd:75:99:26:bf:9a:52:83:fa:79:3d:32:15:52:25:36:01:f2:
65:bb:c9:e0:c1:3d:d2:88:33:8d:62:81:c0:2e:8e:b1:33:5b:
e9:8a:1f:ad:9e:87:c8:f8:45:fb:a7:36:63:fe:ff:e6:8e:84:
24:9b:0a:39:00:d4:b1:47:9f:b6:8f:5e:da:a1:79:26:3f:32:
fb:1e:fc:73:41:2d:9c:55:0c:5f:22:c4:03:e3:31:01:23:8f:
79:a5:90:b1:19:f3:0d:fd:65:0f:43:f8:e8:bc:79:1e:72:58:
13:36:32:19:6f:88:4b:65:4f:c2:ac:af:ea:bf:80:a1:86:bd:
dd:2c:32:c9:bb:4a:f3:ea:73:28:b0:46:d4:0f:db:57:5c:70:
a6:61:44:b5:65:56:32:4b:81:21:bb:e3:0f:e1:ca:55:09:ce:
7c:fd:01:1d:7d:f4:b0:b7:39:05:80:b3:92:26:b9:61:8b:eb:
75:72:02:d8:6a:d0:2a:0f:be:6a:98:c2:f9:3e:dc:d4:d0:ba:
e2:58:c8:16:5d:fa:6c:21:33:81:75:14:bb:6f:31:24:9b:b3:
9e:af:f6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:43 2026 by rpki-client