Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
File: sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft (raw, json)
Hash identifier: JXX/7EJC2We31bWKaLQagDD0mrtdOn0feZd3sQMmKOk=
Subject key identifier: 94:74:2C:C6:A2:E5:7A:05:50:4B:08:30:B0:FA:90:19:EA:FB:13:8E
Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18
Certificate serial: 019D284E2F6BE440C6D489ABBAFFB7E13F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
Manifest number: 0837
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: 1-8KgAPre3SF7bRKA3fLmqxwchcI.roa (hash: u0Xe2ZYaUqmKlNfA25Uh4YAKw25zRG/IeNSgOriRYIQ=)
2: sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl (hash: EgHSAxe1iHLsPTD/R7YBTvNKd/fu0C4vhwYOzsq46QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2f:6b:e4:40:c6:d4:89:ab:ba:ff:b7:e1:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=94742cc6a2e57a05504b0830b0fa9019eafb138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:7a:5b:b9:25:56:2e:cf:7c:38:b4:36:ba:
b3:23:9b:b1:7e:29:09:42:34:d3:64:af:67:87:c8:
f3:14:9b:3e:76:8e:36:04:03:1e:8a:5a:20:81:4b:
b1:7b:26:13:6b:78:cc:36:40:62:79:ec:c5:b9:c8:
9a:6d:ba:33:74:62:a6:fd:b2:3a:24:fe:45:48:bb:
12:4c:3b:f7:c1:ae:d0:5b:87:59:4c:6a:70:ea:df:
6f:c8:8b:88:52:35:49:68:1f:e8:58:dd:b2:13:4c:
4c:5f:35:19:ee:01:ff:dd:18:cf:89:2b:4b:f7:73:
50:90:2d:0e:61:58:f5:b5:b3:25:df:29:e7:c6:01:
06:42:f6:71:f5:00:ca:d0:fc:d6:72:4a:1c:2a:7c:
ce:ec:04:3b:b9:40:77:96:4e:63:0a:ad:11:18:74:
fc:f4:a8:3f:73:a0:bc:5c:75:54:f2:e8:29:80:c0:
e6:c1:c5:e8:56:c4:2f:4d:56:db:6d:da:cc:49:24:
49:48:e6:cb:1e:f8:68:b3:cd:58:82:9a:cc:23:84:
39:b7:44:cc:77:5b:6b:b6:ba:c6:58:83:8e:ee:38:
bb:27:84:0c:a0:b5:3d:c1:6a:fc:54:25:75:da:ec:
4a:b5:e0:10:0a:cd:f8:3f:42:b2:66:7e:f9:19:02:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:2C:C6:A2:E5:7A:05:50:4B:08:30:B0:FA:90:19:EA:FB:13:8E
X509v3 Authority Key Identifier:
keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5b:1b:83:2e:da:00:a9:d4:17:55:a9:32:18:f9:49:c7:2f:
8b:af:4b:4b:8e:45:3b:bf:bf:b1:1c:ae:8a:80:d9:4b:37:86:
99:94:22:4d:b3:c2:d2:2f:83:0d:d0:06:57:ba:4b:29:a1:8b:
a5:80:65:7e:82:7a:2e:4b:71:3a:6e:19:48:8b:ad:43:09:e0:
37:80:da:ed:ac:a9:0e:51:bf:54:6e:1f:0b:49:4d:db:16:b8:
7e:aa:f9:e1:27:b5:30:58:a7:ee:10:fc:43:12:81:63:b5:0f:
c4:6c:27:0a:7d:e5:bf:1d:69:5c:f4:01:75:1f:5b:28:ba:1c:
18:d4:92:3f:56:99:30:36:17:6f:d8:d1:70:17:50:fe:45:6a:
d9:39:e9:6b:1c:90:73:29:18:f7:ff:4c:ab:cf:2c:a9:76:c4:
f0:5b:ab:77:a4:9f:14:55:20:a5:19:9d:00:9c:f5:73:ea:cd:
ba:68:15:d0:36:ff:16:5c:02:82:3d:27:90:0b:17:a6:9c:2f:
82:78:17:0c:60:63:b1:fe:fd:11:55:b6:ca:26:49:72:26:17:
c6:33:6c:9b:a1:b5:62:91:69:8f:aa:5c:ad:2d:17:96:fb:89:
1d:fa:8c:dc:2e:64:c7:63:77:85:27:bd:b4:1f:2b:67:c5:b8:
f1:8d:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:41 2026 by rpki-client