
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: 56U9kfXtlxDnYJ7TevYAdpa1b5YHke5is2gRBRN6kZs=
Subject key identifier: A7:2C:EC:84:D9:73:D1:03:96:2A:1E:90:F9:25:96:5C:75:6B:FC:F3
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 01A0FBD88D8F838C395AF0FE6FF2F046E7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 1540
Signing time: Fri 02 Oct 2026 09:01:08 +0000
Manifest this update: Fri 02 Oct 2026 09:01:08 +0000
Manifest next update: Sat 03 Oct 2026 09:01:08 +0000
Files and hashes: 1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: znYuJT2d9mI8YSvfea0Fz5qR0L73YzcVZ7vKYaZMx2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:d8:8d:8f:83:8c:39:5a:f0:fe:6f:f2:f0:46:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Oct 2 09:01:08 2026 GMT
Not After : Oct 3 09:01:08 2026 GMT
Subject: CN=a72cec84d973d103962a1e90f925965c756bfcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:c8:39:98:eb:17:33:5a:ab:6f:5d:86:f1:
c5:c3:50:c7:3d:fc:d2:94:d4:23:d5:c3:53:0a:a1:
ab:b4:3c:4c:69:c8:0d:93:ff:e3:0b:5c:fb:c9:c9:
e3:ac:42:41:f4:9e:c6:de:95:41:93:d0:ec:29:4c:
83:40:30:49:58:65:ec:e3:02:e5:40:6f:a4:29:34:
78:94:7c:25:d9:88:c2:ca:a9:97:05:2e:7f:d5:93:
fc:1a:45:e4:d1:d4:57:91:f1:c9:46:11:ed:47:7a:
d9:ce:04:b0:5a:71:ec:3d:cf:c5:60:46:06:52:7e:
6f:00:57:8e:ba:50:a3:f7:54:38:c0:11:3f:28:c5:
30:0a:24:aa:31:32:70:66:9b:cc:f9:06:5f:93:cc:
0b:45:de:1c:90:e8:d3:4b:12:2a:49:ce:7c:00:2f:
e6:c5:47:4b:78:5b:d7:46:e1:bb:49:56:48:6d:24:
13:45:13:0d:69:9f:61:f4:41:fa:72:5d:8e:73:67:
54:4b:0c:99:30:29:a8:2a:58:0d:51:a7:a1:c5:dd:
3f:6b:20:11:6a:14:50:c4:7c:30:55:e8:ce:d1:85:
87:76:cc:78:df:9b:3b:36:ff:b5:58:2f:93:4d:11:
d0:02:4b:03:fb:ea:d4:8c:3c:f9:fc:dd:89:7d:12:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2C:EC:84:D9:73:D1:03:96:2A:1E:90:F9:25:96:5C:75:6B:FC:F3
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:ba:ac:e8:7e:ce:4b:41:07:d0:34:49:68:ed:16:e6:bf:
8e:8b:d2:de:67:cf:93:e6:24:3a:09:30:84:09:36:e9:50:20:
7d:e4:d5:ec:ae:eb:72:85:4d:9e:0c:49:f0:db:66:e5:27:c8:
41:07:8d:6e:24:6e:52:82:23:e0:28:28:03:1c:48:70:66:27:
7f:e6:22:2b:80:8b:ee:4f:ee:fd:a6:b4:84:5e:96:8c:51:73:
23:08:a5:22:d2:52:b5:3a:4f:35:58:02:f5:39:09:11:7b:ab:
22:89:da:f7:e6:28:9b:a9:08:62:8a:99:9a:3e:df:ad:0a:21:
cd:1d:7e:91:f4:2b:80:a5:5c:39:41:c4:ef:8e:b8:03:2d:bb:
29:d1:98:59:c6:28:96:87:b8:ce:b9:2d:56:ea:d8:ff:d7:5f:
24:94:41:f3:bf:06:a7:7b:9a:90:9f:33:86:07:83:0b:73:4e:
3f:6b:b0:3e:44:b2:73:7b:f7:dc:f3:c1:3d:3e:96:2f:08:cd:
17:ff:43:2c:a1:28:b8:95:3c:09:56:f7:8d:37:85:21:77:cf:
f0:96:ea:a7:83:cc:7b:1a:37:d4:d4:4b:be:96:b5:ad:69:7d:
62:2f:05:de:2b:1c:a8:db:54:ca:38:b4:14:b9:17:42:70:5d:
e4:07:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:16:11 2026 by rpki-client