Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: LqJ/wyEuPwk3Lg7H2yzkLtpvnxc9tVlSf0d2/rMUwLY=
Subject key identifier: 18:59:3C:A6:57:3B:8C:A9:B1:A8:AC:48:9E:B7:EF:CF:1D:0C:B4:74
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 019D29CE6D592F1887809B4892C392EEE96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0F58
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: HfrLlB4hKtVM_U8ec59MAiKWNM0.roa (hash: vvyUfIqwDg/vVPERqoykgaE3kPhLAXeAghrpbLhVekI=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: 3M7VNtGadt+C0vSXCsKzaX2NR2/WNCdKNzDCA7QrGaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6d:59:2f:18:87:80:9b:48:92:c3:92:ee:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=18593ca6573b8ca9b1a8ac489eb7efcf1d0cb474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:59:c4:a8:76:9b:33:78:23:e8:cd:4c:a2:
b2:ab:03:78:0c:4e:4b:31:f8:7d:e5:11:2e:77:a5:
04:4b:da:f3:81:99:7a:cb:2c:b6:2f:72:de:66:01:
69:8d:c8:94:50:37:5f:4c:12:c0:dc:0f:9e:f5:5f:
2f:1b:89:56:3f:b4:da:d0:3b:60:f7:e5:e4:4c:bc:
b5:b0:29:b3:1a:50:db:ec:5b:af:c2:5b:83:b8:c4:
f9:a9:04:ee:8b:ae:d0:fd:cd:bd:5f:cd:10:4b:9b:
b8:62:ff:03:90:24:b8:c4:85:91:c6:d7:9f:c5:fe:
1d:53:db:0e:b9:13:7a:e0:7a:20:02:0e:c2:99:1c:
6b:04:ac:46:9a:95:cc:c1:64:05:90:a0:51:1a:ef:
b0:69:c0:22:b0:33:10:b6:27:88:71:75:11:57:53:
5e:3f:5f:77:df:a9:5e:6b:69:63:f8:14:f2:3f:8c:
00:59:38:33:25:51:ad:b9:19:45:0b:26:d4:c1:d5:
e2:cf:fc:f2:c6:94:d9:2e:32:b8:7e:b0:41:fd:22:
46:a7:89:b0:cf:bb:20:0f:f6:cc:35:fc:fa:d8:96:
04:26:1b:80:5f:64:80:69:a5:24:62:60:68:24:20:
5a:fe:1f:2d:fd:be:ed:5e:3b:09:a9:b4:d3:65:9a:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:3C:A6:57:3B:8C:A9:B1:A8:AC:48:9E:B7:EF:CF:1D:0C:B4:74
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f8:69:83:5a:f7:9d:93:4d:f6:c4:f7:64:32:d4:48:71:61:
d3:04:d8:ae:a8:f7:0b:1c:36:d8:6f:03:fb:0e:a2:b3:8f:44:
94:af:5b:34:f6:bf:53:6e:98:45:be:79:06:75:aa:42:ce:85:
e0:4a:14:61:f4:eb:31:77:74:0e:1f:b2:4b:39:b9:2c:8c:1f:
2f:e2:99:bc:7f:dd:18:db:5f:0f:97:9d:2f:8f:b0:ca:39:4f:
94:7f:81:0c:fb:09:9f:a9:c0:f0:bf:5d:35:bb:94:de:62:7f:
bc:ab:69:ef:0e:d2:4a:67:54:85:b1:1f:0b:a9:bd:3a:c9:8c:
4e:8e:50:b8:5d:c8:63:8b:d4:2c:8b:89:dc:f6:59:50:9f:0b:
3d:1b:04:77:3b:89:12:07:5d:cf:29:80:14:60:08:07:dc:09:
14:fd:08:43:68:5e:b4:d5:fb:6d:61:fc:b6:8c:1c:05:1e:48:
ad:7e:fe:35:53:0d:74:44:50:a8:74:37:01:b9:56:c2:ee:ac:
29:91:36:c5:07:c5:37:58:2c:5e:1b:e9:fe:d8:cc:7e:34:bb:
01:b5:21:cf:96:0a:71:fa:16:51:87:7b:39:0e:66:1f:3c:5c:
44:9d:03:0b:c8:cb:e4:17:43:10:6a:20:e9:88:82:17:43:43:
a6:aa:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:40 2026 by rpki-client