Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: +wfIzABpkao5mFsfticiu/DTShSVJjdyqhlK06lZV2M=
Subject key identifier: D2:9C:83:33:09:B3:D6:59:7F:2C:85:02:19:1D:FA:4A:1E:26:BE:50
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019F9059EFE4F623A508871711D530EB7F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 0166
Signing time: Thu 23 Jul 2026 19:00:40 +0000
Manifest this update: Thu 23 Jul 2026 19:00:40 +0000
Manifest next update: Fri 24 Jul 2026 19:00:40 +0000
Files and hashes: 1: 1h7bS52T8p0Qo0xIK6GUocpO5fY.roa (hash: 9RKPt8LzkVQ+IULuF/1Rfms3vMWB7oi0nwO0y4XGgFo=)
2: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: KESD0YVMrkBnlLznw+XbE/5NyiSTbwucqDHLXAiSIMM=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ef:e4:f6:23:a5:08:87:17:11:d5:30:eb:7f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Jul 23 19:00:40 2026 GMT
Not After : Jul 24 19:00:40 2026 GMT
Subject: CN=d29c833309b3d6597f2c8502191dfa4a1e26be50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:c1:44:82:1a:69:b8:97:59:3a:8e:51:9d:
50:40:49:d3:f3:42:56:a4:e8:f6:9e:74:3c:35:a0:
94:5c:5c:2a:ad:b9:fc:4d:f7:fb:43:1f:1f:aa:df:
d4:7c:87:a0:f3:48:39:7b:74:0e:ab:17:b4:4e:8f:
f0:a3:98:1c:c2:85:e0:77:ec:7c:5d:1e:1a:c8:fb:
60:9b:fd:f6:88:07:76:b7:61:a8:64:74:00:fb:00:
cf:95:12:1b:67:a6:df:6c:7e:2c:34:0e:f4:67:51:
b6:a2:b6:8d:89:0a:f4:4f:f1:56:ea:17:3d:54:74:
45:ae:d6:59:fe:06:bd:56:cd:6b:78:66:b2:f5:56:
40:a8:c9:d0:05:da:42:a7:55:ef:c7:e7:a2:bd:6a:
dd:45:92:6f:9a:6c:e1:6a:c3:46:5c:10:35:22:49:
07:04:2e:00:19:d3:45:b0:09:01:eb:55:43:76:47:
b3:8e:c9:a3:4e:6f:af:88:60:d3:04:63:08:1b:11:
f0:19:b0:df:da:9a:2d:ab:83:ef:89:26:12:6f:cd:
80:e4:c9:9a:73:21:87:c2:cb:51:96:2c:4c:40:6a:
7a:2d:51:ab:b4:75:c2:93:47:e8:2a:48:c3:0f:77:
cf:1d:93:aa:79:a0:16:eb:9b:bb:49:48:e3:22:a6:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:83:33:09:B3:D6:59:7F:2C:85:02:19:1D:FA:4A:1E:26:BE:50
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f5:d4:7b:d8:70:fc:a6:55:47:3f:0d:e1:19:6f:42:b0:97:
ce:f9:b8:1a:6e:50:12:78:c8:09:3e:14:ba:09:9a:76:38:4f:
0f:37:a7:26:5f:89:01:d0:2b:ee:b9:d4:2f:de:e9:8b:43:63:
6b:cb:bb:64:39:c7:6f:a4:b1:70:1d:6f:63:48:28:49:5c:91:
6a:21:a6:2f:50:11:6f:8a:d4:34:4d:07:e9:42:7e:12:61:10:
35:8c:5d:cc:de:af:38:c8:50:0a:ea:a9:83:73:b7:c3:67:04:
6d:0a:9c:d3:3a:ab:d5:cf:b6:ee:7e:c8:b0:a1:99:e3:a7:8e:
8f:b3:77:d8:78:55:03:e6:5d:b1:e7:db:7f:db:7b:e8:41:6a:
1a:49:87:8f:f5:81:26:36:dc:df:02:1e:7b:34:df:11:5d:fe:
3c:04:bb:fb:85:72:58:7f:66:23:ec:5f:64:f2:1c:e3:6d:17:
a4:27:11:4b:4e:06:97:ad:52:c2:53:b7:47:46:ee:af:26:6c:
8e:95:d1:4d:fc:a4:c4:40:67:f2:f4:69:a9:88:6a:76:4f:0f:
33:a9:55:31:bf:27:48:24:49:1a:94:84:d0:7c:e0:8d:c3:92:
a7:1f:69:e5:82:81:be:9b:08:44:96:03:4e:4b:c1:9c:ef:f3:
85:90:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:58 2026 by rpki-client