Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: obr5f1aQPW8m3As8iXT+jM5gJZQBPG+xJcQVtFNwqu0=
Subject key identifier: DD:61:C8:DB:26:4E:C9:C2:D2:CC:68:AC:F1:EE:8D:F9:E0:68:0E:0A
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 019D9BBE38C5D7E47AEA3C26B20654ACB5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 0533
Signing time: Fri 17 Apr 2026 14:00:27 +0000
Manifest this update: Fri 17 Apr 2026 14:00:27 +0000
Manifest next update: Sat 18 Apr 2026 14:00:27 +0000
Files and hashes: 1: GH-U3lzB4LZDFyVG2bUd3n4SBfE.roa (hash: sTn8rRWu0dVA+yyqQLOUoU8NLea1KDmgRn4CRX9pCbE=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: br874a+Ks/jDcj1b9RXZId+TaxxfCkZmtL1uhWZiYUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:38:c5:d7:e4:7a:ea:3c:26:b2:06:54:ac:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Apr 17 14:00:27 2026 GMT
Not After : Apr 18 14:00:27 2026 GMT
Subject: CN=dd61c8db264ec9c2d2cc68acf1ee8df9e0680e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:75:3d:ff:32:02:92:35:93:fd:6a:ce:4f:
46:5b:53:f1:50:c8:d6:02:d0:e0:18:7e:64:df:a7:
98:e7:fb:18:b8:ad:4b:1c:a9:6a:b1:c8:a5:06:27:
ea:b5:0a:8b:2c:97:3f:9e:12:70:47:99:ed:9f:65:
aa:9b:7a:e9:cd:b0:77:fd:a8:42:94:e6:67:14:ac:
6c:7c:2d:91:2f:21:ba:1d:d3:26:19:e7:58:8e:1c:
ae:92:cc:7e:03:e5:91:5c:75:ce:af:72:f9:7d:89:
0e:4d:d4:5d:2e:76:62:7e:86:3f:38:41:7e:7a:f6:
cf:2e:33:9f:bf:bc:c8:8e:86:19:24:23:f9:fa:00:
84:f0:47:0e:36:87:9f:29:3d:39:01:8b:59:fc:5b:
a9:cb:87:e9:7c:6e:29:3d:69:72:ed:85:4f:d1:be:
eb:8a:be:e1:b5:5d:77:45:1e:92:91:5b:00:48:f3:
e8:61:a8:57:61:fd:8e:39:ad:85:e2:e0:4f:2f:e3:
a4:f5:f4:0f:6b:98:a4:2f:b0:1a:34:74:bf:0c:31:
3b:84:4c:9e:e6:6e:cf:02:23:5a:b7:27:cb:7b:90:
0f:c6:a8:da:10:d9:38:33:f9:8d:4f:9a:17:c8:60:
a6:0f:25:90:c9:79:d3:ac:5b:0a:4e:94:09:b0:04:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:C8:DB:26:4E:C9:C2:D2:CC:68:AC:F1:EE:8D:F9:E0:68:0E:0A
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:17:10:5e:2b:a3:cc:f7:36:4e:c6:62:42:15:90:43:54:c3:
64:f2:97:23:fc:cd:b3:89:a9:83:09:a0:27:7b:69:dc:62:e4:
de:22:61:08:10:8c:61:65:20:f5:da:42:0b:4f:c1:2d:b1:fe:
fe:7d:ff:89:a6:05:71:9c:8d:17:ec:a5:6a:66:46:0d:7d:30:
bb:fd:a1:31:ca:4b:9c:98:26:dd:b8:94:cd:0d:41:b4:f6:d3:
2a:b9:c8:5e:75:10:29:7d:2f:9a:c9:ff:1d:4a:fe:02:60:6a:
27:18:51:e4:1a:d0:63:53:8e:dd:12:7e:15:a9:ec:2d:6d:10:
03:5d:c0:54:d6:6b:2e:cd:1c:4b:78:15:30:3a:38:26:a8:69:
40:13:1f:11:d0:15:f9:9e:10:89:35:e6:d9:1a:6c:94:a0:3c:
77:aa:21:cf:34:7f:85:44:f5:f4:f9:d8:d2:aa:d8:37:92:fd:
a1:86:28:1e:b8:1b:4f:88:d9:1b:bf:78:b0:6f:1b:f7:3f:e1:
f6:19:53:e8:4f:bf:22:97:fe:f5:92:0c:20:3e:2f:00:6c:f1:
95:dc:60:f0:73:e6:13:42:1d:91:9f:49:2c:c6:b1:de:92:3c:
ff:fd:c4:6c:be:5b:c4:0f:14:89:92:6b:f4:68:e4:dd:8a:53:
57:45:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:12 2026 by rpki-client