Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: Bw95j4lsSHrE+QklXLGZp+yRc5quBuUynglvQqyV2cU=
Subject key identifier: AA:8A:B3:B3:D7:60:18:CE:AB:98:D4:99:50:AE:39:68:3A:94:2E:9F
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019D284E102805D67928CD8DE776CEA0783B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: AgduNJ85NizeDe3GCSYTRIIXNJZMaGIuKmKUbb/Kbqs=)
2: tuHT2dEbGHjnKbIj5B7A7SzfIdQ.roa (hash: Q0+MdAPGMZoJ36JQC3VmRpgFrOBMqh93iBgxmBCVguQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:10:28:05:d6:79:28:cd:8d:e7:76:ce:a0:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=aa8ab3b3d76018ceab98d49950ae39683a942e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:28:74:f3:5e:6c:25:4c:5f:33:40:91:9e:
e8:c6:a1:ad:4c:43:cf:ea:75:04:69:bd:07:ef:07:
63:91:a5:18:e3:11:0d:f4:b4:bc:62:d8:69:a7:90:
1c:60:ac:f0:33:d4:37:e8:f1:15:a3:4d:03:de:04:
f4:51:5f:04:5e:aa:64:80:b7:c9:a8:28:20:e6:76:
23:dc:b9:60:bc:24:42:9a:e0:4e:71:38:b2:71:a5:
b1:27:79:28:9a:36:5b:97:c5:b9:d0:0d:36:c2:4b:
af:7b:93:dc:dc:61:6b:b9:bd:9c:58:d1:61:fc:2c:
6d:a7:52:30:1a:f6:5d:7c:84:ca:80:0f:2d:68:bf:
92:27:b0:c0:91:7b:bc:fc:d2:e7:38:23:53:9c:e3:
ce:cd:9c:34:ea:af:31:23:28:99:7f:48:12:eb:d0:
93:a3:2b:47:33:a8:be:46:ba:48:e5:10:0e:ae:dc:
b6:d3:3d:81:22:39:3e:79:03:97:78:1b:5e:ea:7a:
37:e6:e7:f9:0e:59:92:e7:93:32:dd:02:d2:49:8c:
7f:85:44:c5:f8:75:d4:1d:b8:85:81:8e:82:f4:de:
d4:77:12:74:43:9a:0a:d7:6f:8d:e9:39:17:20:d9:
94:54:8d:f1:6a:09:08:f3:52:90:8e:5a:d1:2d:41:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:B3:B3:D7:60:18:CE:AB:98:D4:99:50:AE:39:68:3A:94:2E:9F
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:e6:eb:04:62:0b:cf:1f:90:e5:0b:76:cb:35:9c:ac:4e:
9e:55:54:05:69:96:3d:ee:6c:21:05:06:ac:41:35:41:76:df:
59:6d:c7:59:9b:4a:50:b0:cd:d3:b3:e9:95:37:39:f4:f1:ac:
22:4b:d0:84:e2:44:29:20:0b:a1:5b:19:3c:ef:75:b6:84:93:
2a:eb:16:82:7c:64:0e:5b:d0:f0:a2:a0:2e:5c:0b:d6:d2:2c:
e4:5a:bf:28:93:13:ed:36:9e:d0:41:cb:82:d8:1a:9e:ad:51:
b5:9e:4d:bc:e3:2b:86:f4:ae:37:e8:af:6a:bc:7b:98:30:f2:
62:08:00:4a:f0:be:61:d4:d6:b4:7e:fa:4e:19:f7:c3:d6:f6:
37:ef:34:82:8c:e3:33:50:f6:f8:01:5c:17:ee:ab:43:86:1e:
f1:04:ca:4c:15:85:09:49:f8:81:ce:33:0f:5a:55:2c:d9:b2:
b2:70:38:22:4f:8a:45:18:7b:5b:19:ae:a6:99:59:97:7d:e6:
70:7d:6b:10:d5:48:04:1e:6f:9e:9c:1d:34:2f:47:ab:73:03:
cb:4b:97:82:a8:ec:c0:82:87:9b:5c:b7:08:3c:fb:ef:29:02:
86:cc:78:7b:cd:07:7f:68:52:ad:9a:12:c8:6e:98:8f:15:ae:
b3:78:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:41 2026 by rpki-client