Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: Sc7OMTUnri/Y0ts/fGRRCgCZHRkXlBpxpQGyLljArzk=
Subject key identifier: EB:B9:1C:3A:13:0D:B2:61:7F:0C:64:44:DC:BA:DC:0E:E1:5E:5C:F7
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 019CAE357B57228A7BC6FEC1F60FB74DF5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 04B8
Signing time: Mon 02 Mar 2026 11:01:06 +0000
Manifest this update: Mon 02 Mar 2026 11:01:06 +0000
Manifest next update: Tue 03 Mar 2026 11:01:06 +0000
Files and hashes: 1: GH-U3lzB4LZDFyVG2bUd3n4SBfE.roa (hash: sTn8rRWu0dVA+yyqQLOUoU8NLea1KDmgRn4CRX9pCbE=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: SzxyrdOMoUbl3yG0sPLhlP00c3povJmeHA1KsaMJyNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:7b:57:22:8a:7b:c6:fe:c1:f6:0f:b7:4d:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Mar 2 11:01:06 2026 GMT
Not After : Mar 3 11:01:06 2026 GMT
Subject: CN=ebb91c3a130db2617f0c6444dcbadc0ee15e5cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:2e:ef:ae:a5:28:93:55:29:9c:64:50:bb:
7d:1f:67:35:8b:f6:00:41:62:17:be:37:7b:9d:cd:
c7:39:12:ea:a0:ce:75:0e:30:52:20:6f:2f:62:72:
82:8f:ae:fc:00:ea:28:74:57:e2:31:f6:76:dd:33:
e9:d1:d2:db:19:a4:52:fd:86:3c:c1:23:3e:8c:ff:
7c:0a:67:f8:94:19:bf:11:d0:60:d1:1f:f2:5f:7e:
dc:b8:7d:ce:e6:9e:35:4c:7f:f8:d9:56:ca:0e:a2:
fe:fd:e8:58:c4:ab:3c:0b:5f:2b:b9:80:15:74:ed:
3b:a1:46:57:12:b4:a5:41:94:71:46:3e:ee:be:ea:
ca:1e:ad:2d:e9:3b:ae:8e:78:01:7d:80:19:6d:23:
d6:5e:16:a4:7c:c0:e5:b4:a1:74:ed:3b:b0:8f:2c:
b3:d6:1c:e1:39:19:95:d9:18:25:a6:93:0c:2a:12:
ae:eb:be:0b:4c:cb:42:af:fb:08:77:3d:54:a1:ef:
10:de:29:5b:d9:09:02:b0:8a:7f:17:cb:d7:ed:60:
d1:07:32:5d:81:db:60:5b:9f:9e:14:5a:cd:96:ce:
da:49:8b:30:3b:a8:bc:35:fd:75:01:cf:e0:d6:2b:
d5:09:84:4c:f3:6e:08:76:44:52:d0:fb:2e:fb:b9:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:1C:3A:13:0D:B2:61:7F:0C:64:44:DC:BA:DC:0E:E1:5E:5C:F7
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:d5:94:b3:ad:0a:59:2f:69:e4:a6:4b:44:50:4f:45:fc:
93:8c:38:ac:c2:61:fd:02:a0:d5:81:53:00:82:2b:b0:8c:03:
48:4e:d9:fe:66:17:90:77:eb:e6:1c:ff:96:cb:57:87:bb:0d:
39:60:d6:28:0f:96:2c:c4:c9:82:f1:00:46:3c:ce:c1:70:67:
a3:1c:ab:fb:d0:0b:c2:98:5e:5a:49:68:b3:dc:47:25:61:3d:
9f:41:74:93:c9:09:e5:2e:bd:a6:1e:2d:42:b8:5a:14:bc:23:
f4:19:8d:96:6e:25:3f:b9:56:75:3f:59:52:21:97:73:e9:09:
1e:27:0d:d8:7a:8e:ef:81:bb:98:d2:17:14:d7:cb:6a:16:95:
bb:c5:18:48:10:32:eb:6b:63:d9:8e:d3:f2:74:1b:2e:e8:bf:
48:59:66:e8:0e:cb:26:b7:bd:0e:98:37:f8:05:a0:4f:91:2f:
2a:7b:48:f2:0d:80:cd:ad:5a:96:84:3f:c0:ec:4e:a4:c8:3f:
f4:19:40:4f:37:1e:18:7b:e4:05:d7:53:e5:2e:f8:6d:c1:32:
ad:e6:71:6a:f1:92:23:b3:26:fc:57:c4:77:51:65:9d:dd:fd:
e8:3a:30:ad:c2:23:12:c4:b4:cc:7a:7b:69:77:54:97:33:8a:
25:50:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:05 2026 by rpki-client