Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File: sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier: rHEe8wmCu081Llb7sixhIzpumxSO1JpBGOPXAN5KZc0=
Subject key identifier: 25:4B:62:A5:80:35:56:CE:2D:36:CF:9D:A8:71:89:0B:05:76:57:EA
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer: /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial: 019D254CB4E910E09B0E2A6B0F13771153A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number: 12
Signing time: Wed 25 Mar 2026 14:01:17 +0000
Manifest this update: Wed 25 Mar 2026 14:01:17 +0000
Manifest next update: Thu 26 Mar 2026 14:01:17 +0000
Files and hashes: 1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: hQpcniTLQqosDx+KCpBXgTvNC/LB5M6blITPi99Jf30=)
2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b4:e9:10:e0:9b:0e:2a:6b:0f:13:77:11:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
Validity
Not Before: Mar 25 14:01:17 2026 GMT
Not After : Mar 26 14:01:17 2026 GMT
Subject: CN=254b62a5803556ce2d36cf9da871890b057657ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:1b:20:b0:7a:c8:3b:80:68:ca:a5:14:ba:
96:ff:24:a3:f8:50:e1:68:a7:74:e5:e8:a4:89:e7:
f7:06:9c:16:b9:d6:c3:66:65:40:a5:6c:98:55:a1:
82:d7:11:0f:bc:09:f1:d2:e7:3a:7e:ed:08:7f:30:
a0:ad:be:24:cb:21:fb:ec:b1:1a:4f:c4:fd:6a:cb:
ff:fb:6d:17:2b:9a:28:5c:d3:bb:16:d2:09:38:fe:
bd:9f:0e:13:f1:9a:94:e7:58:ce:cf:ed:ef:3f:d6:
6a:fe:63:a5:5f:48:ed:a6:99:6a:15:22:54:13:ad:
96:7f:a8:00:f0:89:eb:38:36:fb:e1:44:f3:c6:f0:
11:4b:7e:fa:ab:fb:6c:aa:e9:8a:f7:35:37:b1:be:
3b:6b:82:76:06:2c:cd:c5:bb:8f:90:1a:85:05:ab:
50:58:1c:38:fa:21:e5:41:63:40:06:b8:27:3f:e6:
b4:44:60:ff:00:7b:4a:22:c6:7e:ab:f4:b0:f6:35:
3c:8f:c1:96:d5:88:55:c2:dd:5c:b2:40:e3:b3:b0:
ee:55:5e:f3:3e:16:70:ec:e5:70:b2:97:f4:1a:5e:
65:7f:cd:08:ec:81:7e:ad:6b:ec:e3:b6:97:e2:36:
c1:9f:86:5e:70:82:5a:0f:6f:70:ba:d7:7d:5e:a7:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:62:A5:80:35:56:CE:2D:36:CF:9D:A8:71:89:0B:05:76:57:EA
X509v3 Authority Key Identifier:
keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3e:08:16:c3:9c:24:52:5f:64:07:dc:61:a9:1f:b8:ff:a2:
ad:1a:70:c7:f8:3b:bc:ea:65:c0:dd:a6:5c:58:70:2d:d2:2c:
50:90:a2:99:38:09:34:6e:8e:08:40:38:92:1c:56:61:ed:eb:
8c:e5:8b:df:2c:c4:be:9c:19:bb:cf:23:6e:27:ec:90:bb:e1:
ba:c2:4e:cd:80:85:55:a9:64:2a:b2:0f:88:2a:67:03:2d:13:
2d:c1:5c:7f:69:db:c4:74:df:5e:3d:28:09:03:96:0d:eb:05:
61:d1:7f:1c:d8:bc:fc:34:fb:00:9b:e6:7e:01:74:b3:cb:c4:
38:d8:0b:3e:b1:87:7c:64:87:f1:21:67:db:d8:bd:b9:c8:61:
a7:9f:2a:fe:24:f2:94:5f:0c:5c:99:f7:43:bf:fc:69:86:05:
a0:ee:1d:8e:eb:66:bd:36:5f:fd:bc:6f:07:06:bc:e2:94:3b:
1a:b5:3e:29:fd:4e:12:e2:82:5c:52:59:84:0b:6a:bc:66:14:
be:d5:cf:ca:63:6e:d3:ef:5e:64:df:23:63:02:a3:60:42:e1:
e3:67:2d:aa:9a:d3:7f:45:28:67:f6:77:5f:9a:2f:cf:63:29:
ad:cf:0a:13:f1:11:cc:56:9d:96:f6:f5:d1:07:04:81:ae:00:
8e:c1:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:52 2026 by rpki-client