Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier: nMFpX1gA153M6aDU41qHGQ1/Pde6PqdEbY8q6tHM5d0=
Subject key identifier: B5:1D:1C:F4:F9:10:07:47:8F:82:53:09:56:5B:81:37:27:84:4B:7E
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial: 01A0D080009EDEE3CB7748D4E11D0529FFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number: 0324
Signing time: Wed 23 Sep 2026 23:00:44 +0000
Manifest this update: Wed 23 Sep 2026 23:00:44 +0000
Manifest next update: Thu 24 Sep 2026 23:00:44 +0000
Files and hashes: 1: MHpsCZyP0IVYMoHWzqfloOQWEZE.asa (hash: hTcP8Hkd9/FsM/qMperPFuWrlLFufrbGXDvfXB44n3Y=)
2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: xq4yTvGQqKOmbDAaRRMCvVMVXJKsNxXzU/DkGQls7ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:00:9e:de:e3:cb:77:48:d4:e1:1d:05:29:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Validity
Not Before: Sep 23 23:00:44 2026 GMT
Not After : Sep 24 23:00:44 2026 GMT
Subject: CN=b51d1cf4f91007478f825309565b813727844b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:8e:73:e0:bb:a8:2a:c9:b8:1c:86:ca:bc:
c9:d6:73:1a:aa:08:b2:67:2a:7f:0f:57:47:8b:14:
c6:53:64:f3:c2:b1:7a:d6:72:76:fc:48:ff:2e:d8:
37:77:aa:e4:7a:f8:79:8a:cc:24:7b:78:b0:88:c5:
87:db:5d:a9:08:8b:99:b2:d8:70:63:7b:a5:6a:0e:
1e:e5:c5:3c:ab:44:f3:49:32:4d:2e:4d:78:d1:05:
73:05:3f:c7:d3:17:68:ce:94:a5:55:e4:2f:13:8b:
ca:5e:3c:2e:3e:5e:23:44:05:b2:ac:87:9a:63:41:
22:57:87:46:d2:22:a8:cf:d7:ad:7b:1f:2c:ce:35:
cf:cf:72:c0:e0:f3:6f:44:79:56:4f:92:be:38:f4:
c5:57:7a:a5:a3:80:8f:6c:1b:d4:c8:c8:cd:9c:00:
77:bf:25:74:af:b0:f0:77:b4:6d:35:85:9b:46:a0:
27:d1:9e:bb:ca:fd:d6:a8:af:a7:be:19:58:be:fe:
94:2d:2f:42:18:cd:cb:8e:9a:e2:f7:e6:a5:41:39:
01:f2:5b:72:74:64:05:32:64:0a:d8:7f:3c:7f:ea:
58:25:42:17:07:a3:cc:e8:2a:b6:11:1f:40:63:38:
c8:13:e3:9b:54:f7:a0:74:ce:dc:ce:23:1a:f1:bc:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1D:1C:F4:F9:10:07:47:8F:82:53:09:56:5B:81:37:27:84:4B:7E
X509v3 Authority Key Identifier:
keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0f:cc:89:0d:b3:5d:22:93:8c:86:a8:c5:a5:46:e1:af:78:
20:15:c1:e3:68:bc:06:c0:51:c5:f0:52:df:08:fe:04:09:b1:
16:2b:57:3e:b0:78:a3:60:45:a1:57:5f:1f:da:e4:ec:1c:1e:
fa:f9:4c:4d:3f:2c:94:ff:66:14:77:b3:90:b1:a1:a0:4c:64:
e3:8a:2c:3f:88:86:cf:d1:94:23:21:c2:98:74:39:8f:a2:7d:
ed:19:83:40:12:5d:84:ae:71:3a:f8:e1:8b:5a:c9:20:f2:e2:
a3:52:d4:57:93:1a:ef:15:43:52:b0:84:36:c7:61:95:24:74:
f4:a3:37:6d:87:11:8c:e8:77:25:dd:b0:e6:a4:70:84:c4:1b:
13:e2:83:78:7f:08:ad:9e:87:44:d5:4b:3a:4c:2e:f4:88:51:
d8:bb:35:c8:dd:1e:2a:5c:c8:bd:a2:4b:4d:33:5e:b7:fe:04:
0d:32:50:59:aa:c6:fd:69:d4:31:9b:48:4a:37:16:80:44:92:
df:50:a7:ac:78:00:ac:39:a7:5f:ff:89:0a:a4:59:35:fc:6e:
5f:08:cc:32:53:04:d1:f3:91:53:3f:ff:a9:39:c7:d8:f6:b7:
cf:05:bc:42:07:65:e1:9f:90:b7:b5:84:84:6f:74:52:df:2f:
e5:b2:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:43 2026 by rpki-client