Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: Tp0s7XPa8wUYCHtHTgFfEGPaJmTsqTflXd5FqUl+PzU=
Subject key identifier: CD:9D:7F:ED:56:4B:C9:C7:02:5C:DC:F3:20:14:F8:D0:35:9E:8F:AD
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019D26CCE1AE59593B0030321617F79E4F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 140F
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (hash: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE=)
2: l_UYfd627TWdVQUBGDcYXolbG3M.roa (hash: jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: BHsQ9zZTB5ncIpO9arJTWEg9+shIkAlcCBROcJ0aniw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e1:ae:59:59:3b:00:30:32:16:17:f7:9e:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=cd9d7fed564bc9c7025cdcf32014f8d0359e8fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:7f:e0:0c:c5:92:87:77:e1:9c:cb:76:99:
c4:9d:7f:d0:da:d3:6c:8b:30:ee:6e:ab:00:bd:bb:
20:34:f4:db:32:7c:f0:50:8f:74:ab:f7:02:47:a9:
8b:66:f2:fa:85:dd:94:e3:96:e2:10:28:2d:64:76:
cb:5d:a0:95:86:9d:23:30:2d:7f:84:36:bb:a7:18:
c0:ea:66:5c:e5:40:57:2e:7b:36:b6:58:b3:a9:24:
1a:88:1d:36:65:a1:71:61:a4:c1:f0:70:4f:7b:ac:
02:fd:fc:f7:a3:d6:6f:b4:aa:2a:81:4f:5d:92:42:
6a:5b:2c:fd:05:60:f9:84:ae:a0:d9:fe:e0:d0:7c:
5e:5c:64:71:c2:35:1c:95:e7:b6:83:66:4f:24:50:
1f:35:da:02:4a:fd:83:4e:6e:e3:14:1e:e3:ee:b5:
24:ab:c2:58:32:f6:ab:62:16:4e:e0:a9:7b:48:f8:
b1:66:a1:b2:90:7b:cc:32:6e:61:35:8b:67:38:09:
94:d6:73:04:f7:89:77:9b:07:5e:e1:54:38:47:c4:
50:82:de:37:2a:f0:95:3f:6a:19:c4:5b:6c:ed:79:
00:1b:49:48:11:43:1f:76:ee:3f:4a:f9:0a:9d:71:
2b:5b:cd:4c:a0:2f:66:15:6d:40:a1:ac:6f:ec:15:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:7F:ED:56:4B:C9:C7:02:5C:DC:F3:20:14:F8:D0:35:9E:8F:AD
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:55:ee:98:60:02:97:4d:db:b5:d5:bd:be:95:4c:78:91:1f:
d9:f2:0f:5d:5d:e5:ff:b0:a0:71:42:55:06:ad:6b:17:2c:2a:
2c:73:6a:60:0f:10:7a:de:09:13:2f:7a:74:0e:6a:58:a7:97:
1b:e0:d5:06:52:51:e5:6d:19:11:64:2b:e1:f0:0b:b4:09:c9:
17:d5:66:ad:2a:af:67:c7:52:2e:70:bd:99:a4:a2:5d:73:b5:
bd:a4:bc:a7:3d:5d:d9:b9:da:f8:b6:f9:b1:7b:23:5b:2c:06:
30:e7:93:66:d9:00:3c:92:21:dd:4d:4d:ba:60:b1:e2:54:49:
48:1e:ab:fd:0b:46:40:97:35:bb:2e:f5:1e:43:4e:1b:9c:1a:
16:8c:1e:28:29:f3:5a:05:6e:d1:83:1d:53:2c:99:6f:b4:11:
a3:62:29:12:73:22:8b:1b:77:bc:69:19:24:c4:58:3c:e1:70:
8e:93:1f:99:07:e1:b6:48:e8:a5:28:73:13:c7:c3:0b:43:b2:
ae:2e:8d:d8:f0:be:97:43:b8:e9:dd:29:db:a1:ef:33:4f:0f:
0e:42:9f:08:96:27:8c:c9:02:6e:e2:00:12:c4:6f:4c:d0:16:
58:40:8d:78:89:9f:9c:e2:79:9a:e6:d0:2c:5c:1c:84:ce:52:
7f:08:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:51 2026 by rpki-client