Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: r7hSie/CHV+9AeM5tAmS1p/Uv+nbzk6b35Emq8Mu0J0=
Subject key identifier: 06:84:88:5B:2C:BE:00:BA:E8:E0:54:81:1B:B5:7E:F7:17:C0:27:90
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019D26CD061ECB71627E26F3D8A596D437A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 1344
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: DA0rvG9+NihUXenevqlYJ3i6PLa9g/TbO/AwmAT1Bas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:06:1e:cb:71:62:7e:26:f3:d8:a5:96:d4:37:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=0684885b2cbe00bae8e054811bb57ef717c02790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:c9:c0:cf:a5:dc:d6:c5:03:c3:cf:d4:03:
e0:6c:da:74:b1:35:40:d3:00:04:c9:8d:89:a5:9d:
f9:50:46:3b:60:f9:75:f1:74:65:40:ea:5b:7e:7e:
93:8c:69:63:83:32:fa:88:e6:d0:69:f4:e0:9e:6d:
41:86:b3:c0:46:36:82:76:6b:24:0c:15:c8:69:c9:
f4:bc:c7:c0:03:de:08:42:b1:99:43:1f:9c:fd:c4:
af:0b:0b:e1:cd:90:3e:86:fd:42:2b:67:d8:4e:f7:
18:e7:a5:22:3a:14:6e:38:68:5d:3b:61:45:d5:2d:
82:13:ea:32:88:b7:a5:3d:16:f3:c4:8a:b5:c1:38:
1b:29:c1:40:34:64:87:3a:6b:05:a9:d2:2c:3b:9f:
7f:7c:d9:43:82:5f:e3:71:dc:35:68:12:75:62:63:
70:24:b2:5d:c3:c9:80:9c:54:e1:b0:b8:f9:41:0c:
06:49:fe:dd:dd:d7:5f:9a:71:c9:c4:ae:a1:79:90:
72:c1:6f:d3:9e:1d:a2:bd:44:17:64:ad:7e:b5:0d:
bf:f1:90:13:56:39:71:f2:b3:54:60:9b:e5:ee:ef:
13:73:80:f1:45:e1:3b:f4:07:35:b4:3d:75:af:07:
07:bc:68:48:67:16:9e:19:c6:82:bf:eb:d1:3d:42:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:88:5B:2C:BE:00:BA:E8:E0:54:81:1B:B5:7E:F7:17:C0:27:90
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:e7:29:69:50:e6:3c:57:19:33:ce:c6:7d:47:4a:fc:75:
0c:72:4c:d0:97:a9:c5:08:ec:b0:32:07:b7:f8:47:a6:f2:42:
2c:22:53:b1:67:8c:44:90:c9:6e:2e:9e:b5:8f:fb:72:4a:2e:
e8:3c:26:df:90:7d:4e:ef:39:11:49:46:84:18:7b:a8:95:0b:
0e:e4:3e:b0:10:96:4b:a8:b1:5c:24:6a:fd:e2:e1:42:5e:9e:
91:2d:a7:70:d6:8d:d9:dc:84:01:f9:21:ed:96:30:4d:ff:e0:
ad:83:2a:5e:b6:c0:6f:1a:8a:c7:32:16:35:23:1c:16:a7:e9:
2b:72:8c:da:16:c8:4d:d4:23:a7:29:23:78:2d:f8:a5:fe:83:
4f:6c:a1:19:24:b6:cc:df:b9:94:03:11:2c:75:0d:61:df:3d:
5b:58:2d:93:55:f3:4d:c6:0e:30:10:31:7f:26:85:98:3c:ed:
2a:4c:32:bd:0b:0e:e1:25:55:9e:57:78:6a:3a:e6:f6:64:57:
68:41:e9:02:f3:25:d9:ad:da:3d:43:8c:df:95:90:c6:25:8f:
56:06:f8:84:7d:b9:0b:25:f6:a3:ec:ff:77:ba:62:cf:17:7d:
f6:af:34:98:30:dc:e8:06:dc:29:6e:69:d4:34:cc:5f:06:c7:
e3:46:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:21 2026 by rpki-client