Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
File: sWpN-xkGscZ6u1SnCnbMkutIYn0.mft (raw, json)
Hash identifier: UpIuz6W8zmH3mWr9fdCa3R4HfNzrgy/miTxEyWw9y9g=
Subject key identifier: 87:CB:E8:2E:D6:11:8E:B0:C8:C6:D8:55:6A:53:0C:A8:AA:54:CF:2E
Authority key identifier: B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
Certificate issuer: /CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Certificate serial: 019E202449D88E416DEBB8A12EA9BAE3111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
Manifest number: AA
Signing time: Wed 13 May 2026 07:01:49 +0000
Manifest this update: Wed 13 May 2026 07:01:49 +0000
Manifest next update: Thu 14 May 2026 07:01:49 +0000
Files and hashes: 1: IZwnZzRSW9CWWDf4DhjKDHRJ7wg.roa (hash: 7+eI0t0v9gnlOSaSNccy+qkb/ocukTrfW/YihjIV1EY=)
2: sWpN-xkGscZ6u1SnCnbMkutIYn0.crl (hash: /QURiLgMw3I3cKvcnXqcySiYvvzVF0+d59TkshckWJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:49:d8:8e:41:6d:eb:b8:a1:2e:a9:ba:e3:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Validity
Not Before: May 13 07:01:49 2026 GMT
Not After : May 14 07:01:49 2026 GMT
Subject: CN=87cbe82ed6118eb0c8c6d8556a530ca8aa54cf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:a3:ee:ef:08:f9:36:21:72:5e:90:44:f8:
4a:c4:48:1a:33:91:55:da:62:71:e2:3d:11:22:60:
7d:e1:33:2f:aa:4f:9e:34:ce:f1:42:bc:37:7a:82:
7a:0d:34:ca:8e:db:b9:df:ba:be:0c:a6:c6:3f:6a:
e7:f2:4f:04:86:2b:d4:b4:a5:82:9d:12:2d:4d:55:
12:0d:46:51:6e:7c:e0:52:c0:62:e4:b1:fe:6a:d2:
26:64:1e:dd:f5:9c:55:ca:e9:62:52:f5:c9:05:aa:
3d:a9:71:a9:da:9d:cc:5b:71:12:bd:e2:cd:b4:fa:
f4:4f:51:bf:25:a7:08:db:62:76:dd:bc:e0:2b:e0:
d6:5c:f0:e1:3d:c6:17:65:23:03:96:0b:ac:86:ef:
d8:1f:96:84:be:09:69:10:ee:8b:e2:de:3a:67:c1:
46:35:31:f4:a0:f7:b1:5a:4c:09:f9:9a:f4:f9:8c:
c5:67:43:24:e1:17:5e:15:83:67:d8:bb:5b:28:7e:
de:9e:4c:dd:6f:34:8e:95:92:95:94:36:6d:85:3d:
98:f3:a0:d3:26:e5:d0:86:34:63:17:ba:17:e0:5e:
de:ad:50:ce:92:b0:07:72:45:b7:6a:21:ab:2b:f5:
9e:85:c8:90:4e:68:e8:43:a7:dc:b4:57:80:2f:5e:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:E8:2E:D6:11:8E:B0:C8:C6:D8:55:6A:53:0C:A8:AA:54:CF:2E
X509v3 Authority Key Identifier:
keyid:B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e3:68:67:d5:5b:1a:72:db:df:b3:3a:73:9c:f8:57:56:a7:
1f:dd:b8:5c:28:43:e0:16:4c:e8:3e:b6:fb:c3:d2:95:b7:04:
0a:d5:42:be:da:a1:ae:7a:40:f8:b1:6e:f5:4c:a4:5b:46:81:
17:16:5f:17:81:fe:ba:e6:b2:9a:d0:1b:79:25:b0:fd:17:cb:
45:f3:ca:1c:25:c8:61:c9:7c:80:c6:ee:69:a3:92:50:a6:2e:
11:17:df:10:10:1e:78:be:f1:13:58:fe:48:1c:18:37:4c:7f:
a9:a0:98:02:1f:2c:82:d7:3f:ff:a9:50:97:4c:7f:05:29:81:
5f:00:a8:30:12:9b:61:3a:d9:a3:46:8f:f5:c9:85:07:79:ac:
fc:0f:bd:0f:41:d9:d2:4d:e1:7b:8f:65:1a:0e:b9:25:f5:79:
eb:7e:80:e7:e5:d1:70:98:41:ca:1d:83:29:73:8a:57:c5:64:
b8:10:a5:d0:47:b1:f4:79:06:5d:02:92:8d:4c:f7:55:52:06:
6d:89:df:ee:14:77:0a:c8:13:2e:08:3e:a9:c0:74:28:9a:f7:
ac:59:25:d2:65:e1:87:60:3e:18:e9:bf:13:c3:fc:15:2c:aa:
29:81:64:8c:14:0b:5d:c0:b9:3b:d8:77:c7:bb:04:6f:d2:51:
da:7e:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:16 2026 by rpki-client