Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: 1iRTrCMPMyz3y5E3ire++ZC4dfFUd1hrtvyZMhhewgQ=
Subject key identifier: 46:48:30:8F:F0:2E:F5:DD:7D:18:1F:0F:AE:89:FF:97:AE:09:30:D9
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 019D27DF96EC5C68E17123A33E20308CF9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 1021
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa (hash: hZkfinGaxG52M/5/J2Jc2UXy36GPloEbpDX2tpwbSVM=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: 5ezId4RVS++5mqSSZtjBk03fdQQXbi9ThiKDE8jW+XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:96:ec:5c:68:e1:71:23:a3:3e:20:30:8c:f9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=4648308ff02ef5dd7d181f0fae89ff97ae0930d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:f5:3e:ec:14:d6:98:90:66:c8:7c:83:2d:
a6:20:b6:05:2c:86:0f:5f:26:c4:7c:c7:75:e5:19:
60:ed:1e:4f:9e:db:6f:30:55:e6:d5:7b:62:d2:da:
19:0e:30:72:bf:94:77:0d:92:c3:a9:f2:38:d1:61:
38:85:d1:1d:8d:04:af:ed:9b:27:f4:e8:0a:5d:3e:
48:6f:e8:4b:8d:5a:e3:f2:cd:60:16:35:c7:e6:06:
52:a6:eb:5c:1d:67:d6:82:c9:39:de:cf:54:54:9f:
44:5f:c7:4a:14:b8:e2:08:67:be:3c:88:61:4b:aa:
d4:12:07:82:81:6c:21:c3:9c:3d:9c:bd:a8:22:39:
28:6f:79:1d:09:cd:ca:c9:26:1f:4b:0c:80:bc:80:
ae:b6:63:21:24:dd:5d:3c:7d:11:6d:f3:2d:57:b4:
b6:a1:93:a0:df:c7:e1:57:d8:89:8d:f5:6f:5b:23:
95:01:67:77:42:99:22:bd:18:1c:02:75:bf:23:d1:
d3:31:e8:68:bd:a8:44:05:a1:ed:a2:bd:32:65:8e:
62:e0:ca:32:ba:e5:bd:7c:60:a5:b1:47:f8:47:4c:
73:36:85:94:b1:ef:b1:fc:36:44:4e:f1:a4:9e:78:
2f:e4:a4:6c:a4:ce:04:33:01:6f:7d:08:2e:9d:f4:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:30:8F:F0:2E:F5:DD:7D:18:1F:0F:AE:89:FF:97:AE:09:30:D9
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:28:52:9d:88:66:01:f2:f7:5f:60:8c:5a:4d:eb:df:4c:c2:
ee:8f:1e:d1:95:64:a9:90:c4:22:09:9d:46:31:29:96:7f:b2:
26:78:3d:80:7e:34:d3:fb:0c:81:20:19:e1:16:de:f3:0b:76:
50:83:ed:f3:b9:82:28:68:9e:c4:57:3c:5b:fa:9c:09:65:b2:
ee:b1:26:65:d8:e8:58:fe:5d:64:e8:ac:9a:e0:f5:c5:db:c7:
fa:0c:83:63:54:4c:63:5e:b8:03:9b:c1:5f:b8:ff:dd:22:da:
c6:79:21:21:fe:69:24:62:80:b1:44:2e:c0:06:f6:6f:e2:aa:
30:fb:92:ba:27:52:5b:d3:1b:c0:bd:92:af:c5:85:a1:6d:3c:
d8:8c:d4:19:20:97:32:6e:18:77:c0:54:08:6a:9d:cb:0c:36:
ce:82:bc:7e:ea:ec:d2:17:ab:a3:19:98:35:21:23:e5:66:0c:
5e:51:6b:00:91:e0:06:d7:ca:e9:f1:4f:a9:13:d8:bd:fa:fc:
36:13:90:87:38:f2:31:43:1c:00:df:3d:8b:e9:06:5d:8c:74:
ea:c3:53:4a:4c:f6:ec:cd:18:98:a1:72:0d:79:84:4e:f9:34:
cd:02:42:f4:3b:d9:1f:98:77:1d:83:bc:e0:c3:d7:6a:63:92:
a9:5e:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:27 2026 by rpki-client