Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: 63AnKd31FCE/0PMCrDKwmhZEjhdhPZY2mIj5gaBmYuY=
Subject key identifier: F8:95:4C:EB:34:78:B5:0F:25:AB:BC:B1:43:4E:0E:BA:0D:DD:98:A1
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 01A0D2001D90B4C72679A81C0A62538C019D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 020E
Signing time: Thu 24 Sep 2026 06:00:17 +0000
Manifest this update: Thu 24 Sep 2026 06:00:17 +0000
Manifest next update: Fri 25 Sep 2026 06:00:17 +0000
Files and hashes: 1: NIIcsX27k87ZvHHrcQDVVWFUF7I.roa (hash: XAZFhlhX49012CDEB0tGnNBN2ZuACEMyJePTLHi2yA0=)
2: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: gTegZTYTlEcF1DLUKHKjAPAyS/q2bUZXFEQZZzxL6uU=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:1d:90:b4:c7:26:79:a8:1c:0a:62:53:8c:01:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Sep 24 06:00:17 2026 GMT
Not After : Sep 25 06:00:17 2026 GMT
Subject: CN=f8954ceb3478b50f25abbcb1434e0eba0ddd98a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:b6:10:e6:2e:8c:e5:06:9a:9d:74:73:45:
ed:88:5a:94:4d:8e:ec:62:8d:67:a3:b7:6a:dd:35:
6d:d9:ac:64:2a:9e:54:00:49:00:06:5a:db:c2:f7:
d6:16:8c:b9:57:04:4e:e3:28:7a:ad:0c:5f:97:ab:
28:0c:26:fa:47:c2:58:8c:81:01:9f:c4:97:4f:36:
91:ad:46:43:f6:31:64:c6:15:0f:49:73:60:51:75:
04:0f:1b:61:53:36:e6:66:29:e2:3f:42:8a:de:a1:
ad:6b:a1:fb:e1:6f:9c:54:81:c2:5f:6f:c2:17:72:
9a:a4:89:19:f2:72:ec:01:51:a5:f2:3e:9d:4d:7c:
3c:a5:ff:4d:0e:2d:d7:a8:3d:a5:22:0d:0d:77:f7:
e9:28:61:73:bb:af:4a:4d:21:99:b2:6f:fa:fb:27:
6c:b9:8e:26:e6:70:43:33:d6:bf:38:85:3c:2e:a0:
5c:4d:55:19:9a:7e:ef:e0:78:57:c1:6f:a4:4e:cd:
fb:a2:80:9d:d5:70:ef:e4:41:1f:52:f9:ae:3b:2c:
3c:22:50:4f:16:bb:85:e9:59:7a:60:82:f7:ea:d1:
a0:31:fd:ae:6e:ca:f9:71:38:8c:ca:9c:4d:30:09:
ee:5d:dd:41:07:90:54:8f:33:46:fc:86:5c:53:b9:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:4C:EB:34:78:B5:0F:25:AB:BC:B1:43:4E:0E:BA:0D:DD:98:A1
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:01:84:50:8a:00:e1:f7:a1:c5:5d:9b:0e:37:c6:17:d1:0a:
fb:e8:1f:90:b4:67:8b:38:57:ac:cb:1f:c5:f6:4d:36:2a:13:
b5:a6:58:2c:0e:15:36:4a:ee:46:0f:d1:9b:0e:83:4b:2b:d4:
68:cf:a6:b4:f2:ce:af:8d:f8:a1:dc:31:ef:44:cb:a0:2a:30:
c3:df:28:50:ac:24:14:32:9e:9e:a1:06:74:1c:46:03:0f:a3:
b0:ed:06:ca:39:85:ba:89:44:8f:14:cf:15:fb:28:b0:88:b0:
bd:12:31:1a:34:5a:c0:1f:fc:eb:dc:18:6f:ab:51:10:08:bb:
b0:a4:df:e6:92:f5:44:22:a2:41:0d:b2:55:cb:e2:ed:05:7b:
dd:47:50:0f:dc:43:ca:3d:65:2a:b3:5e:4f:80:15:59:f6:cf:
83:e6:e9:11:ac:37:5b:6d:1d:96:6c:76:db:da:4b:7f:59:31:
a4:77:e6:3c:db:d0:62:b3:ac:31:ea:20:a9:47:ec:3b:2a:bd:
2b:e2:db:94:5c:50:14:d1:36:b8:48:1d:70:ad:60:b3:be:98:
f3:e5:35:7a:33:1b:0c:24:71:c4:fb:26:1f:49:e3:dd:17:b0:
ba:5b:52:71:b3:c2:9b:32:7b:ca:6d:c6:96:fe:27:ea:dd:8b:
19:e9:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:49:17 2026 by rpki-client