Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier: kvSaKCRVIp29nq4gMmkfXc+pYu0QgqcoWSLLBcWPOVs=
Subject key identifier: 62:53:8C:9B:D6:FB:8A:29:21:CE:57:F2:DE:84:65:EE:7A:06:52:55
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial: 019D24DE4886C7FBE8DDDFEAB273C6A08159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number: 0139
Signing time: Wed 25 Mar 2026 12:00:40 +0000
Manifest this update: Wed 25 Mar 2026 12:00:40 +0000
Manifest next update: Thu 26 Mar 2026 12:00:40 +0000
Files and hashes: 1: T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa (hash: 9UlqFrtBpJ1m/jb2if0Qk7CFK/PRtZG8ru3Zi5n9cBk=)
2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: /Bwgsb4LMkWbVXCYO73NA135GA3gAC33XUE8Wcmdafc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:48:86:c7:fb:e8:dd:df:ea:b2:73:c6:a0:81:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Validity
Not Before: Mar 25 12:00:40 2026 GMT
Not After : Mar 26 12:00:40 2026 GMT
Subject: CN=62538c9bd6fb8a2921ce57f2de8465ee7a065255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:1e:35:23:4b:49:50:da:79:47:7a:d7:fe:
a5:21:c6:7f:61:99:e5:1c:91:ce:21:a2:dc:4a:ea:
de:3f:4c:71:a8:2a:0c:55:f8:2c:6d:b3:79:46:7d:
cb:c2:ff:69:87:82:d8:5c:4e:3c:86:c5:38:35:77:
82:a5:33:9a:30:99:8f:78:9b:5d:29:d9:a7:70:4b:
4d:55:96:d1:c9:8d:82:5b:83:4c:16:c5:6e:13:d4:
78:71:b3:82:e2:79:c1:04:20:11:73:ba:b4:c3:c7:
bf:7e:e2:68:63:ad:43:5d:74:60:c4:26:06:3d:2e:
55:85:96:c3:f4:90:8c:cd:23:11:5a:f4:41:36:47:
9d:ac:59:f0:08:1b:09:b1:2c:ba:fd:07:b0:51:3e:
38:fd:f8:28:23:79:8f:47:9b:22:b6:25:01:c1:4b:
0b:53:26:e7:12:41:66:23:f2:51:14:8c:83:15:66:
52:3c:2b:8b:60:8e:c8:3a:a0:7e:bb:4c:d4:f8:10:
25:de:2b:a1:70:8e:49:60:ff:cf:59:a8:36:d8:39:
82:d7:7d:1c:26:bf:b9:90:22:77:1e:c1:da:26:c8:
1b:97:2d:c6:f6:e6:5e:04:61:d7:6d:ac:16:a3:df:
e9:47:9e:7e:75:52:42:3b:88:90:3b:26:65:b6:9c:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:8C:9B:D6:FB:8A:29:21:CE:57:F2:DE:84:65:EE:7A:06:52:55
X509v3 Authority Key Identifier:
keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e6:bd:28:f2:e7:d3:a9:39:71:46:5e:32:8b:0a:14:81:b4:
8c:8a:8e:b0:c2:70:1e:84:c1:b7:4e:13:be:12:20:e8:0b:52:
2d:2e:15:8b:05:bc:77:fd:4d:49:d1:02:fc:15:27:ee:04:86:
15:43:4e:bb:39:84:de:56:b4:b3:d3:e1:dd:a9:fe:8f:12:e4:
c6:67:66:c6:d3:6b:1b:3a:16:0c:74:a6:62:d3:2a:1e:2a:c5:
bd:15:e1:de:3a:2b:7c:8a:30:10:b2:dc:b6:32:2f:5d:99:fb:
75:5a:16:24:af:e6:b3:3a:e6:ee:37:c4:21:fa:e2:5c:68:88:
9b:43:9f:f5:90:69:c9:14:d0:b7:e3:0d:58:f4:06:af:7f:7a:
75:8d:06:fc:2f:09:bc:ab:d0:0d:5b:ce:4c:21:2f:fd:4e:a6:
20:ca:8b:4b:6e:1a:97:0a:cf:ff:1f:0d:5d:48:de:7f:ec:31:
0d:a2:b8:2d:d7:6b:93:8f:40:da:76:6c:16:2c:be:0e:95:1e:
ea:8f:6e:65:0b:fe:7b:93:83:ba:35:5a:7b:8d:5d:a4:5e:2d:
3a:cb:bb:ae:14:d6:5e:d5:33:f3:1a:80:ad:41:ee:db:f6:51:
5c:46:d0:81:70:b2:12:51:c3:0b:48:0e:1a:b4:90:ef:2c:cd:
03:46:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:18:22 2026 by rpki-client