Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: zC3P21XrhhdoRVFfY7bNLHLrRu6WTwRI4anF/9syKrw=
Subject key identifier: F8:B6:DA:06:17:4B:90:C6:22:C2:A4:07:B1:0C:23:1E:C9:D7:75:59
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 019D2704B969D57CAEE5AB2AC222A5AB4E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 0B58
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: 66N3EQND1sjUmozxAsHIiHnUtjs.roa (hash: Di4TJGLfsG6JOPILuSIhdo5LxtGZyeTeA1p/OJCQbVw=)
2: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (hash: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: aJICSynj2dKcWgXDx1pzBEJDIrsSuyrIu8hHZQosoJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b9:69:d5:7c:ae:e5:ab:2a:c2:22:a5:ab:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=f8b6da06174b90c622c2a407b10c231ec9d77559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:06:11:b0:e9:a4:06:4f:da:d8:33:37:50:
09:89:0e:15:ea:9b:fb:90:95:d1:5e:3e:92:96:af:
94:88:cc:ca:b3:f6:2e:f0:3c:18:a6:b0:91:a1:c4:
5b:72:b5:36:28:4b:a7:57:64:49:4f:6f:45:4d:0e:
29:93:21:20:32:6f:f9:f9:11:d8:56:f6:bf:01:95:
5c:58:79:fe:f8:7b:d1:63:f2:c0:24:0a:d5:ea:9b:
21:dd:16:9c:30:0f:0e:27:2d:69:d0:b0:db:44:14:
56:16:28:af:db:ea:22:6e:3a:ce:6a:19:46:ef:7b:
71:db:8c:14:4d:d5:e6:86:79:89:16:da:23:df:b0:
ad:d8:7c:ea:7e:0f:de:a3:d4:5e:f2:5d:e0:93:ae:
a7:de:68:a8:37:99:a3:9b:32:97:7a:65:32:1f:1e:
34:28:b6:a6:1d:29:c0:5e:97:f8:d1:02:73:f4:02:
a1:94:00:d3:f2:32:a4:ef:cc:11:b4:d0:03:77:12:
c6:5d:e8:ab:98:9d:1b:09:19:8c:d3:f7:57:fa:fd:
e1:8b:bf:39:c6:15:5f:af:52:69:24:d0:f1:93:a6:
2f:7a:4f:3b:68:6c:a5:3b:6e:3d:bb:47:aa:b3:f7:
65:91:d5:ff:84:51:e2:96:1d:54:5f:dc:83:2c:08:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:DA:06:17:4B:90:C6:22:C2:A4:07:B1:0C:23:1E:C9:D7:75:59
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0a:df:6e:04:e2:28:6d:ab:c2:a8:30:22:89:7b:66:74:35:
3d:98:02:c1:5d:90:48:bb:7d:58:24:27:ec:38:9c:e3:92:05:
6c:8b:00:92:de:50:2e:b0:08:04:5a:42:a9:ff:a6:37:c3:53:
21:bb:bc:ae:2a:90:df:bf:c0:a0:16:51:19:60:ab:2d:84:3a:
bf:f3:39:c0:39:f4:56:6d:b9:a0:73:48:cb:a9:41:20:53:8c:
40:23:02:d3:fc:bb:2a:d6:c6:53:c1:e7:52:04:be:da:2c:58:
3c:b7:d6:09:9b:af:a9:6b:da:ae:dd:bc:ff:c3:99:5c:f6:ea:
ca:0c:ed:0b:2f:bc:5b:c8:9a:6a:2e:76:b1:93:29:b8:9b:23:
d1:ea:2e:e2:2a:98:5e:f4:3a:b6:33:9c:8e:06:4e:5c:96:8b:
42:17:ac:2c:74:94:3a:e2:fb:a2:e7:7c:65:8b:37:94:c0:1e:
e5:a2:a7:9e:46:f0:04:f6:47:0c:57:30:c4:1a:1e:06:4a:24:
04:6f:5e:64:fa:02:7d:e0:b7:4b:1b:03:35:1a:b9:7b:ca:2e:
7b:d4:0a:09:2b:28:81:b5:fd:8e:dd:48:ef:47:21:82:64:d9:
30:76:99:07:db:c2:ff:bf:46:81:38:87:7b:9c:7a:1c:11:76:
24:55:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:54 2026 by rpki-client