
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: GFAv44230EwJEEhYChxOPcAWoPywMjH6Y3cg6z9Mjpo=
Subject key identifier: 35:C1:A9:6D:22:BD:7E:D5:F3:AA:CC:E8:94:B2:77:04:1C:BC:B4:28
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 019CAB6AF1A9B6BB9043AAE4A0613E1AC3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0F2B
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: nwPb4kbhS3PS3xenSExweEdRBgog9QkiN2FZ/bTdZeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f1:a9:b6:bb:90:43:aa:e4:a0:61:3e:1a:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=35c1a96d22bd7ed5f3aacce894b277041cbcb428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:c9:ac:73:05:3a:e7:6a:ae:9d:c3:0d:60:
2b:24:9c:97:52:b6:2c:07:6f:47:fa:8f:a4:42:51:
3b:07:e6:a0:30:f6:91:d6:ee:60:ca:86:72:a8:d1:
74:f3:44:96:55:41:01:16:ba:e0:bc:3c:7e:5d:64:
8b:c7:00:0e:1d:6e:b8:05:75:40:ab:45:b5:36:85:
fc:29:d3:11:bb:50:89:ed:cc:2a:46:05:db:a2:02:
2c:96:31:a9:7e:4a:b0:67:5b:7d:ae:84:62:1f:8f:
dc:b9:1a:96:47:f4:58:45:85:51:11:bb:44:db:f2:
0a:2d:ca:36:0c:b8:f7:1c:a7:fb:b8:83:e3:e4:69:
ce:41:6b:16:92:c6:5b:d8:cb:59:74:eb:e7:90:ce:
37:62:dc:ca:d7:79:e7:70:74:2c:34:74:20:0f:5b:
77:15:7e:4e:64:42:bc:be:53:8b:aa:bd:28:67:4b:
3b:df:8f:26:a4:95:d5:97:76:ac:5b:fd:e8:7b:bb:
b9:41:82:31:09:3c:73:c3:af:85:2f:e2:0a:90:56:
aa:f6:ec:2b:02:ad:c8:35:c2:83:11:46:df:f6:91:
b6:5e:d4:32:b3:6a:ae:7e:60:35:48:0a:6f:ef:5b:
bf:fb:82:7c:83:a3:b2:78:f9:51:41:53:db:7f:02:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C1:A9:6D:22:BD:7E:D5:F3:AA:CC:E8:94:B2:77:04:1C:BC:B4:28
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b2:41:74:a9:d6:35:6f:1d:4b:74:ae:3d:1a:63:fa:0a:e9:
ef:a7:ca:5c:27:f9:a7:a1:88:77:13:dd:3f:17:57:69:e1:92:
85:fe:89:32:c6:d2:cc:9d:23:57:87:6b:bc:e5:81:e5:ff:a8:
c0:af:93:88:36:c8:04:16:b7:c4:ac:f8:10:1b:45:b4:ed:76:
1c:58:8c:9f:24:ae:fd:a5:8a:2c:57:3a:20:48:bf:b6:a3:0a:
17:5a:ad:59:28:d8:55:7b:18:ba:fa:12:de:af:3a:5d:28:04:
ef:48:68:12:d4:23:17:12:f9:43:df:08:83:70:26:84:8a:a5:
69:5f:24:c8:75:c9:ce:fe:e4:29:9a:32:a8:b2:32:be:92:82:
bd:83:42:d7:26:d8:0a:d0:5b:d5:01:e9:49:ed:20:61:aa:d3:
75:48:8e:d0:bc:b1:d7:94:18:d8:48:a2:b0:01:31:73:e5:10:
c0:b7:57:00:92:78:39:ee:08:73:e5:b2:66:79:c9:e0:ec:d2:
f6:ae:dd:e7:17:31:89:2f:45:a2:ad:97:71:d9:79:a1:69:b6:
43:81:75:73:72:d1:f8:1b:be:95:0b:3e:7d:d9:a9:94:fc:f6:
3e:78:4c:c0:77:b7:85:8c:ce:da:c8:cc:f9:6f:8a:63:29:75:
d1:8f:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:49 2026 by rpki-client