Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: XjIDgifrQN212JiUMEsss/XtaNrafJj8M+mQwpAvPDM=
Subject key identifier: B7:28:8B:CB:87:AE:BA:4A:0F:EA:06:57:2D:02:D7:19:CA:50:55:A3
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 019D25F1A42D68C7A3858745464AD2257640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 04F6
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: GH-U3lzB4LZDFyVG2bUd3n4SBfE.roa (hash: sTn8rRWu0dVA+yyqQLOUoU8NLea1KDmgRn4CRX9pCbE=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: AS8/j04RVWsCgMoDpCpO2mDqiN7ZtLPFGVhhKa/XuMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a4:2d:68:c7:a3:85:87:45:46:4a:d2:25:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=b7288bcb87aeba4a0fea06572d02d719ca5055a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:71:e3:8e:36:9a:32:77:78:74:cf:3c:08:
11:a6:6e:58:5f:93:8e:81:40:2e:63:1e:e5:69:1d:
1d:1b:33:52:2e:b6:6c:da:26:5e:ad:8b:92:69:e9:
d1:cf:e7:f9:da:72:5c:ed:da:db:e7:a9:d4:96:9b:
34:01:fa:be:e9:b7:16:2e:6b:83:bb:2a:d3:3b:dd:
be:d1:98:ec:95:39:70:cc:f8:76:ae:8f:85:8a:13:
45:6e:df:44:c8:4f:93:82:61:2a:2e:98:81:06:f3:
63:04:aa:0f:47:dc:83:b4:79:39:4f:9b:d5:9a:af:
2f:3f:a4:e8:70:a4:8a:92:ec:cb:e6:38:52:0e:ae:
65:08:2e:21:a0:f6:44:8f:51:6c:f2:fe:70:f6:95:
d4:f4:fd:77:56:8f:4f:61:e3:6d:99:0b:ce:28:c3:
97:2c:ef:a4:93:59:8c:98:12:63:33:42:c8:ef:64:
9f:5a:bf:12:72:37:1c:e8:44:e1:f8:15:5f:25:ae:
5f:68:ed:4d:01:3b:1b:1a:92:0e:fc:0b:7d:c9:71:
d8:a6:7e:ff:c1:d3:77:37:dd:37:f5:2e:96:54:1c:
bf:e7:0f:62:f8:b7:8d:f9:f7:b1:45:6e:a3:c4:f8:
8e:10:54:a0:ff:57:b8:14:19:e7:a5:97:1c:64:27:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:8B:CB:87:AE:BA:4A:0F:EA:06:57:2D:02:D7:19:CA:50:55:A3
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b3:b7:c8:aa:89:fc:83:f1:d4:ea:e3:42:0b:7e:64:d2:ed:
ee:48:42:43:d4:32:44:1f:16:10:6f:c3:23:de:37:45:a9:92:
83:2a:2b:15:67:02:99:95:99:74:08:84:07:57:b0:6e:d5:88:
bb:52:d0:91:5a:de:e4:ce:6d:40:03:ff:df:df:69:e1:f0:cc:
19:ff:f7:cd:aa:89:51:ba:f3:3b:bb:1a:45:b9:4c:99:1b:a6:
77:38:cb:73:02:a9:0f:9b:86:d0:84:6d:d6:12:97:27:62:da:
36:f6:24:aa:89:90:08:e2:d6:32:8b:f8:6b:45:4b:a3:f9:49:
d8:7c:06:92:26:e2:dc:66:3c:fa:57:58:ca:f3:ef:3c:d7:1a:
7d:f1:76:ad:fb:4a:18:4b:0e:98:3d:30:07:ee:bc:e1:cd:91:
16:85:9c:05:f7:6e:11:b7:fe:84:69:29:92:cf:d5:53:86:5e:
5e:b3:70:18:20:26:75:ba:a0:2e:46:41:eb:ec:9a:2a:d0:db:
cc:3a:8b:d6:2c:e3:1f:9d:be:bf:0d:4c:17:41:b3:4d:89:e2:
a2:0f:88:f7:8a:a8:00:80:86:4a:18:53:68:12:e1:8a:2b:26:
52:7f:bf:dc:59:ad:87:e0:40:1e:b1:27:e4:c7:1f:6b:c2:d6:
8f:fb:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:08 2026 by rpki-client