Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: fgkbHw60toUmrbLLefmM43uTj4BDDIVGtzYxdoWVLKE=
Subject key identifier: 5E:F3:BD:8B:DA:01:45:A7:7A:BB:74:6F:00:18:AA:79:87:F1:3F:D0
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 019F946DCF5CB121ECCA46F0C050C9B2DE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 1705
Signing time: Fri 24 Jul 2026 14:00:52 +0000
Manifest this update: Fri 24 Jul 2026 14:00:52 +0000
Manifest next update: Sat 25 Jul 2026 14:00:52 +0000
Files and hashes: 1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: XJuDrgkqfhvDGDxTgIB3cz/1bJA5HFNqj3heQ4Rih4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:cf:5c:b1:21:ec:ca:46:f0:c0:50:c9:b2:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Jul 24 14:00:52 2026 GMT
Not After : Jul 25 14:00:52 2026 GMT
Subject: CN=5ef3bd8bda0145a77abb746f0018aa7987f13fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:68:10:28:10:91:68:7f:a9:d2:52:21:e3:
1a:77:c2:b5:93:8d:4d:2d:76:13:27:65:ff:f2:88:
f8:d9:1b:77:b9:18:58:64:3a:c1:1d:93:61:14:cc:
4b:bd:85:6e:98:29:c8:68:a2:41:7a:89:2a:95:ad:
93:6f:7a:dc:61:e9:48:15:3c:f7:67:fe:47:71:ea:
87:61:cb:fa:47:3a:88:bc:80:e5:6c:3f:6c:13:64:
27:39:7b:a0:5f:ac:3f:c8:b6:57:ff:bb:9b:18:80:
18:a6:bc:53:02:cb:67:00:35:e5:6b:61:2a:76:6f:
63:f5:34:a6:a1:4a:81:5e:ba:c0:71:74:e1:aa:c2:
c3:3d:22:a4:65:f5:a8:2c:6f:68:93:8b:21:3c:44:
ba:d3:26:c7:dd:b7:2c:3e:76:a2:f7:85:96:ca:54:
79:d8:c2:08:b1:9b:20:65:c5:59:23:bc:a9:f3:80:
9f:d4:c8:30:b1:cf:6f:bf:75:9d:e8:d8:dc:59:66:
12:18:73:6d:f9:86:02:89:5c:30:d2:1c:42:56:6c:
86:63:0d:f0:aa:eb:e6:0e:bf:c0:d4:c5:8d:ab:6e:
ab:d8:f0:f7:23:f3:b2:00:a1:81:18:55:e7:b4:cf:
77:9a:e4:f9:d7:e4:b6:98:0b:31:66:3c:f8:3f:1c:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:BD:8B:DA:01:45:A7:7A:BB:74:6F:00:18:AA:79:87:F1:3F:D0
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a8:c1:3e:58:ee:9f:ac:6e:64:83:68:53:9a:91:bb:c4:cc:
ec:bc:73:a1:a3:4e:17:04:ed:fb:85:35:41:5a:36:7a:f1:df:
fc:3b:fe:75:be:f8:bb:82:52:0c:0d:04:b6:c8:ca:6b:24:dc:
98:f6:2c:be:07:eb:c7:9d:5b:2a:4d:2f:a2:75:1a:89:e0:89:
90:7e:f9:9f:18:f7:11:9f:ba:9e:d1:52:f3:d3:4f:d6:8c:e9:
55:38:0b:3c:a8:8b:47:0f:94:1d:d2:e0:5c:e5:45:bf:8a:d2:
19:70:4b:db:d7:f7:a0:6c:9f:10:a0:4f:1e:0f:22:00:88:12:
a7:92:30:ca:c2:2f:d1:f4:12:c1:05:84:ff:47:ef:80:50:3a:
00:9d:46:d2:4e:57:88:68:67:44:8a:2b:f2:1f:fc:57:f4:e3:
76:ea:3f:39:9f:c1:07:90:b2:ae:5a:77:01:34:f9:bc:e7:8b:
95:69:07:b0:9b:07:77:99:1c:af:cf:e7:85:80:ba:b0:f2:d2:
ae:22:95:29:85:9c:82:bb:9f:c9:6f:97:b8:23:28:c8:86:a4:
35:a8:12:d5:53:60:44:31:b8:cd:d4:3d:c6:54:92:62:e0:dc:
50:c4:0c:d5:f2:41:45:e0:76:92:b0:11:e2:95:23:ff:6d:36:
6c:ef:09:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubc9csSHsykbwwFDJst6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4
YWY4ZDkwHhcNMjYwNzI0MTQwMDUyWhcNMjYwNzI1MTQwMDUyWjAzMTEwLwYDVQQD
Eyg1ZWYzYmQ4YmRhMDE0NWE3N2FiYjc0NmYwMDE4YWE3OTg3ZjEzZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn1oECgQkWh/qdJSIeMad8K1k41N
LXYTJ2X/8oj42Rt3uRhYZDrBHZNhFMxLvYVumCnIaKJBeokqla2Tb3rcYelIFTz3
Z/5HceqHYcv6RzqIvIDlbD9sE2QnOXugX6w/yLZX/7ubGIAYprxTAstnADXla2Eq
dm9j9TSmoUqBXrrAcXThqsLDPSKkZfWoLG9ok4shPES60ybH3bcsPnai94WWylR5
2MIIsZsgZcVZI7yp84Cf1Mgwsc9vv3Wd6NjcWWYSGHNt+YYCiVww0hxCVmyGYw3w
quvmDr/A1MWNq26r2PD3I/OyAKGBGFXntM93muT51+S2mAsxZjz4PxwEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7zvYvaAUWnert0bwAYqnmH8T/QMB8GA1UdIwQY
MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt
ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz
LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6jBPlju
n6xuZINoU5qRu8TM7LxzoaNOFwTt+4U1QVo2evHf/Dv+db74u4JSDA0EtsjKayTc
mPYsvgfrx51bKk0vonUaieCJkH75nxj3EZ+6ntFS89NP1ozpVTgLPKiLRw+UHdLg
XOVFv4rSGXBL29f3oGyfEKBPHg8iAIgSp5IwysIv0fQSwQWE/0fvgFA6AJ1G0k5X
iGhnRIor8h/8V/Tjduo/OZ/BB5Cyrlp3ATT5vOeLlWkHsJsHd5kcr8/nhYC6sPLS
riKVKYWcgrufyW+XuCMoyIakNagS1VNgRDG4zdQ9xlSSYuDcUMQM1fJBReB2krAR
4pUj/202bO8J9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:12:18 2026 by rpki-client