Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File: 1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier: N6WX0zAHpb706Qbs6LRD6bl6hTLRlBFCvFUUCKi5Q4c=
Subject key identifier: 0E:5E:33:93:6A:1F:DC:A7:49:2D:C7:C2:52:C0:E5:69:D3:8E:7D:B1
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer: /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial: 019FA8992F904E4C51E17D8F091A2E75B49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number: 0D44
Signing time: Tue 28 Jul 2026 12:00:39 +0000
Manifest this update: Tue 28 Jul 2026 12:00:39 +0000
Manifest next update: Wed 29 Jul 2026 12:00:39 +0000
Files and hashes: 1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: 9aEacCUy46KqUH/qrWqLEFg4MU4mGCM0VeZhyuIBxFw=)
2: 8Rm2H-IL6eNvw3lpHGt-o1PcDJ8.roa (hash: 9FKwS55i+1+p+2HxlxmcIMZVMYQWfrV0brMMqmnc7tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:2f:90:4e:4c:51:e1:7d:8f:09:1a:2e:75:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Validity
Not Before: Jul 28 12:00:39 2026 GMT
Not After : Jul 29 12:00:39 2026 GMT
Subject: CN=0e5e33936a1fdca7492dc7c252c0e569d38e7db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:c6:0d:5f:23:f3:58:ea:80:9e:c1:d2:08:
2a:2d:12:2c:38:73:c1:43:ef:1d:d3:69:16:51:fa:
a3:e8:93:74:01:8b:42:fe:ea:8f:9b:fb:ec:a6:64:
1c:b5:37:28:46:8a:50:2c:0f:09:23:c7:a8:3b:3c:
6f:f1:c9:f5:61:80:60:08:00:03:1a:2b:f0:90:f7:
d7:0a:07:a8:9a:d8:25:c6:30:e9:e6:c0:d3:3b:47:
c4:15:a2:6a:2e:70:9b:47:38:74:d7:28:ec:f2:cc:
8d:58:71:71:3b:57:14:f3:d7:ac:be:bd:3b:fb:dd:
5e:f8:e2:b2:40:22:8f:97:f8:24:18:e1:58:0c:93:
00:de:ac:8c:f0:4d:c0:96:fb:31:69:14:5c:05:a4:
25:f0:00:c3:d2:fc:e9:13:08:e3:c8:30:8e:d3:47:
5c:eb:40:5e:11:cc:b9:ec:8c:77:5a:8e:09:22:5a:
28:eb:46:51:d8:02:9c:19:4f:29:48:7b:b3:e4:f4:
83:48:2a:26:0e:96:aa:77:c9:33:e7:a2:62:dc:b9:
aa:63:7a:02:d3:c1:55:a1:b6:db:cf:cd:00:04:6f:
2d:ce:dc:f1:bb:46:35:b0:1f:a2:10:fd:a8:5f:18:
2c:79:73:f0:ea:57:69:23:1a:7f:88:8b:44:84:da:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5E:33:93:6A:1F:DC:A7:49:2D:C7:C2:52:C0:E5:69:D3:8E:7D:B1
X509v3 Authority Key Identifier:
keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7b:f1:96:9b:2d:91:ed:de:c4:94:dd:ec:ab:11:7a:76:72:
80:54:cb:8b:24:0d:d6:60:3f:a0:53:0f:e2:d7:fa:51:c9:73:
2f:0f:50:61:86:a2:88:0f:b7:09:5c:dc:8c:59:88:a4:f7:d1:
34:8c:de:77:8c:eb:bc:52:87:1b:6d:51:2f:76:a9:ec:09:55:
c9:8a:db:08:5e:5f:8a:a7:11:b5:d7:67:7c:e3:5f:9f:59:01:
71:6b:6d:a0:f8:20:e9:35:ab:70:4e:7a:87:78:64:e6:05:0f:
49:92:25:10:31:a0:31:43:95:5c:60:4d:12:9b:5a:d1:c3:9c:
34:43:a4:c2:c6:51:8c:e3:fa:15:d5:7f:f0:6b:00:ad:67:1e:
4f:9b:b4:26:dd:75:aa:d5:e8:25:63:0c:1a:1a:1f:6d:2f:18:
d8:cb:94:dc:bf:6b:8d:20:7e:12:3e:ab:23:4b:60:74:29:bb:
40:da:cf:16:70:1d:6a:a6:0b:15:33:65:d5:46:23:83:35:d6:
b3:7f:e3:57:7c:b8:8c:48:a0:9d:ec:ed:3f:1e:4e:fb:1b:01:
46:0e:d8:58:85:10:90:08:bf:a9:2b:74:d4:43:f8:92:be:b3:
b0:f7:4d:2c:41:f9:0d:f5:67:5d:41:86:43:43:4e:ad:2e:f1:
08:ab:47:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omS+QTkxR4X2PCRoudbSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2NlODllZWE0NTFiODI5NGE4YmI2OTdjNDk5M2FlNDRk
MDVjNmYwHhcNMjYwNzI4MTIwMDM5WhcNMjYwNzI5MTIwMDM5WjAzMTEwLwYDVQQD
EygwZTVlMzM5MzZhMWZkY2E3NDkyZGM3YzI1MmMwZTU2OWQzOGU3ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKbGDV8j81jqgJ7B0ggqLRIsOHPB
Q+8d02kWUfqj6JN0AYtC/uqPm/vspmQctTcoRopQLA8JI8eoOzxv8cn1YYBgCAAD
GivwkPfXCgeomtglxjDp5sDTO0fEFaJqLnCbRzh01yjs8syNWHFxO1cU89esvr07
+91e+OKyQCKPl/gkGOFYDJMA3qyM8E3AlvsxaRRcBaQl8ADD0vzpEwjjyDCO00dc
60BeEcy57Ix3Wo4JIloo60ZR2AKcGU8pSHuz5PSDSComDpaqd8kz56Ji3LmqY3oC
08FVobbbz80ABG8tztzxu0Y1sB+iEP2oXxgseXPw6ldpIxp/iItEhNo/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5eM5NqH9ynSS3HwlLA5WnTjn2xMB8GA1UdIwQY
MBaAFNbM6J7qRRuClKi7aXxJk65E0FxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEt
Njk2ZTNkMTg4ZjJhLzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wYTYyN2UtYzQwYS00NTkwLThjOWEtNjk2ZTNkMTg4ZjJh
LzEvMXN6b251cEZHNEtVcUx0cGZFbVRya1RRWEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3vxlpst
ke3exJTd7KsRenZygFTLiyQN1mA/oFMP4tf6UclzLw9QYYaiiA+3CVzcjFmIpPfR
NIzed4zrvFKHG21RL3ap7AlVyYrbCF5fiqcRtddnfONfn1kBcWttoPgg6TWrcE56
h3hk5gUPSZIlEDGgMUOVXGBNEpta0cOcNEOkwsZRjOP6FdV/8GsArWceT5u0Jt11
qtXoJWMMGhofbS8Y2MuU3L9rjSB+Ej6rI0tgdCm7QNrPFnAdaqYLFTNl1UYjgzXW
s3/jV3y4jEigneztPx5O+xsBRg7YWIUQkAi/qSt01EP4kr6zsPdNLEH5DfVnXUGG
Q0NOrS7xCKtHFw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:23 2026 by rpki-client