Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
File: sWpN-xkGscZ6u1SnCnbMkutIYn0.mft (raw, json)
Hash identifier: g/YMs5DZA8CEhgmEXd2EQuPTk0IQRaZ3kRU/nx7Xh9I=
Subject key identifier: B5:04:7D:89:CA:55:9F:D9:2C:20:3E:A8:4F:5E:24:ED:E1:BE:DB:82
Authority key identifier: B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
Certificate issuer: /CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Certificate serial: 019D2704742C9F64D970D7A31D4408BAC257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
Manifest number: 29
Signing time: Wed 25 Mar 2026 22:01:36 +0000
Manifest this update: Wed 25 Mar 2026 22:01:36 +0000
Manifest next update: Thu 26 Mar 2026 22:01:36 +0000
Files and hashes: 1: IZwnZzRSW9CWWDf4DhjKDHRJ7wg.roa (hash: 7+eI0t0v9gnlOSaSNccy+qkb/ocukTrfW/YihjIV1EY=)
2: sWpN-xkGscZ6u1SnCnbMkutIYn0.crl (hash: ioZEh4T7KGAc1FaYAL6DtCoOiocA41C9ma8V1RdDQoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:74:2c:9f:64:d9:70:d7:a3:1d:44:08:ba:c2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Validity
Not Before: Mar 25 22:01:36 2026 GMT
Not After : Mar 26 22:01:36 2026 GMT
Subject: CN=b5047d89ca559fd92c203ea84f5e24ede1bedb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:28:07:3e:b0:28:fd:82:e4:6d:53:50:fb:
e0:5e:5d:5a:cb:66:45:7a:cd:85:d0:7f:6f:48:32:
f5:38:e3:e2:ea:f5:45:7b:e1:78:6b:04:5e:17:eb:
4c:02:66:53:95:c4:6a:b5:81:d4:22:75:38:8e:dc:
ee:96:ad:01:b3:b7:71:4a:a9:05:80:1f:b2:e1:8f:
94:1d:4c:14:a4:48:89:d7:90:05:90:1f:f2:37:da:
36:4f:93:b3:a7:8a:cd:4d:48:ab:7d:54:36:87:c6:
3c:cf:ef:73:f6:33:47:5c:f4:49:a9:6b:a1:06:53:
48:ef:e6:83:c5:a8:16:86:ff:0e:55:f8:ff:bc:bb:
8b:72:64:d6:2e:ce:e7:d4:ec:50:d2:08:ed:56:f7:
34:e1:eb:16:e0:f4:59:22:a1:c1:b6:12:29:d8:0a:
8a:0a:63:1f:bd:1f:a3:5b:c7:b5:4e:98:2d:97:38:
5b:b2:ae:89:40:ac:79:8e:a0:a7:f1:05:f0:d4:66:
36:70:08:81:40:01:3d:68:f9:7f:ec:45:2c:05:c4:
a8:67:02:39:ca:7e:7a:b3:1a:aa:30:aa:d0:03:fc:
e7:ac:dd:4a:cc:12:e1:72:1f:69:e8:ee:9f:67:91:
d4:77:ec:40:19:99:32:3f:ac:7f:77:b3:15:7a:2d:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:7D:89:CA:55:9F:D9:2C:20:3E:A8:4F:5E:24:ED:E1:BE:DB:82
X509v3 Authority Key Identifier:
keyid:B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:27:f2:38:72:95:d9:96:aa:2c:ed:27:5d:32:c4:f4:bd:6d:
4e:8b:15:52:18:f7:6e:ae:da:39:9a:18:15:4f:16:95:04:b9:
8b:8e:96:10:fd:e7:c9:c0:b2:3c:d1:aa:f9:f1:0f:87:b1:6c:
5b:95:71:c6:f2:67:e9:96:e8:82:e3:46:ea:be:09:29:dd:c4:
7b:90:f1:4d:90:0a:29:b5:f6:35:f7:09:4f:40:0e:ea:d3:f3:
96:92:06:c9:64:23:a6:e9:19:31:bb:3a:88:b2:d2:46:c1:16:
52:4d:95:fe:f3:e8:19:1c:23:2b:4a:d5:fd:83:0e:cb:c6:d1:
53:09:7f:9a:d8:d9:d9:f3:5c:65:05:72:bc:e4:3a:27:4f:cd:
15:32:f6:cd:4d:7a:6c:9a:65:ba:85:58:c6:e4:f0:ae:80:5b:
2c:99:e0:d9:b1:d0:de:b4:72:b6:d5:aa:d8:fa:f4:64:0b:a9:
94:51:1b:e9:81:83:47:90:a8:52:1c:c9:b1:05:6a:02:1c:ab:
2d:42:ee:64:b1:89:4c:31:e6:ea:89:41:9b:9c:ac:8f:d1:23:
f2:b7:fb:95:ca:63:c0:9a:de:f9:f2:de:6a:e8:ad:04:ae:30:
e8:a2:a5:fd:0a:b2:e1:21:6d:3d:ee:31:d5:fa:f1:a5:07:fe:
76:1a:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:27 2026 by rpki-client