Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: Orzlqn9tYgcJO2XrscGYw3xzhSJqoyBTIT21/YYTOSY=
Subject key identifier: B4:C6:FD:E6:D1:F9:1D:33:FA:EE:03:43:25:ED:8F:9B:9A:79:C1:E9
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 019CACEBC4332A2ECBBB662110E767BB853B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 1584
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: prCk8CP4iVBojr12IyOBj5SAMPhL2QCgEzL8WGGKW7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c4:33:2a:2e:cb:bb:66:21:10:e7:67:bb:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=b4c6fde6d1f91d33faee034325ed8f9b9a79c1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:df:85:14:7e:47:d9:c9:a4:bd:79:5e:34:
b8:c9:25:6f:b6:12:d9:12:c4:d9:c7:ab:4b:90:73:
92:73:a8:74:67:8b:f2:49:ee:83:1c:5c:aa:f7:1a:
b1:80:91:1a:e8:74:52:02:18:75:77:32:fc:27:2c:
9d:b6:18:ae:1a:5f:e1:1d:a9:92:03:1c:fb:f3:c1:
bf:50:52:46:e9:45:b0:f4:6d:b3:2e:85:9c:13:47:
1c:bb:30:1a:3e:b5:4e:02:19:8a:4b:7b:c7:ea:35:
ed:6e:1b:84:fd:5b:a9:8c:44:0d:80:9a:ea:bc:9d:
c3:47:b1:f5:6d:c3:74:e7:25:3d:8c:88:78:99:33:
fd:3f:bf:d6:19:ef:91:ae:3a:77:0e:ac:a0:91:4d:
a2:29:d3:73:47:5b:92:6f:24:7e:01:49:2a:6f:ca:
9e:e4:58:1a:01:6d:33:15:48:2d:40:29:e8:96:cf:
8e:6b:8f:52:7d:50:ce:ee:34:c7:7b:bb:fa:9b:e7:
ae:a4:8e:40:06:98:f0:12:41:36:d6:aa:71:3d:c0:
80:e5:d6:7c:76:39:c1:84:ce:8e:a6:34:7a:8a:e7:
7b:6f:6c:64:eb:88:4c:af:fd:df:d7:97:c1:0c:3a:
91:56:83:0b:8e:46:b7:e8:46:e3:b6:01:9e:1a:0f:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:FD:E6:D1:F9:1D:33:FA:EE:03:43:25:ED:8F:9B:9A:79:C1:E9
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bc:69:5d:fd:68:74:c4:69:3a:d9:52:02:ef:1b:ce:6b:ce:
7f:37:43:e0:d0:07:ef:65:de:0f:bf:6d:38:93:6d:1b:a9:e4:
82:38:0d:66:45:30:3e:c0:70:8b:25:bb:be:7d:a3:ce:4a:84:
60:1f:d9:32:08:9f:05:5a:a6:51:a2:84:c1:df:68:3d:b4:e2:
f9:6b:07:87:4a:16:54:69:5a:06:7a:44:8d:dc:fe:50:fd:a9:
53:bb:b1:8d:9f:94:09:62:b5:11:0e:99:14:c0:1a:06:3a:44:
7b:f6:c5:6a:02:55:bc:78:67:37:18:47:58:55:db:fb:55:d3:
78:ba:6b:39:56:a2:8e:ca:f1:f5:c4:64:30:29:fd:38:23:10:
54:cc:b1:03:2b:46:80:37:47:b5:85:07:23:ca:fe:e9:d5:f9:
e8:85:97:9b:f8:e5:94:d4:bd:53:62:c7:36:19:82:f5:d8:1f:
12:67:9c:cf:e3:ee:50:2c:a1:6e:78:f2:4e:47:0d:11:70:42:
5a:fc:49:33:1b:3b:f2:e4:78:0b:5d:1b:be:67:be:00:04:c1:
6d:35:58:d3:5c:25:fb:b3:44:22:25:d7:81:fd:eb:a5:31:20:
cb:d5:93:cd:f8:40:70:b2:49:d1:6b:2a:10:19:7f:1b:91:3a:
fc:08:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:27 2026 by rpki-client