Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: Wnz95IpyG7B17hQrf7MXCAFe3GzQKnrJqDq7Pow2WoQ=
Subject key identifier: CB:39:E3:EE:80:85:4D:77:B6:F8:AB:0F:D8:29:7D:1F:D0:F2:B2:AB
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019CAB33FA7D2CE477E64460D315F705243B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 1304
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: J1m6CCibAseH6jC/5C1np9P+Y/3tJ5viAi/EmE1Abbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:fa:7d:2c:e4:77:e6:44:60:d3:15:f7:05:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=cb39e3ee80854d77b6f8ab0fd8297d1fd0f2b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:46:51:3f:ed:1d:dc:a7:68:69:64:21:9a:
76:a7:4b:96:fb:57:c7:82:6a:87:0a:cf:80:79:85:
00:fc:a6:ce:0c:82:06:d6:41:f0:d1:2a:e4:14:9e:
0b:71:46:92:6d:07:28:4f:a6:dd:e2:77:a5:59:3d:
2d:71:20:ec:56:67:5f:74:b7:6d:d1:3b:08:eb:59:
38:4f:d0:eb:bd:77:e2:56:3d:63:a8:1e:a4:98:07:
34:a1:ba:fe:2f:49:b3:0f:67:e2:1a:12:78:ba:3e:
f4:6d:07:2f:0d:fb:ed:b4:12:46:43:19:76:14:9a:
09:86:3a:07:82:d9:4e:83:2a:b5:2c:17:dd:ff:4a:
57:ee:cb:d7:7f:1d:84:39:96:88:6a:0a:ef:a0:cb:
cf:1d:6f:4d:ef:65:3c:2f:43:0a:a9:6b:94:d8:5d:
a7:b5:49:70:a6:9e:01:ec:14:98:72:eb:c5:34:3d:
f9:11:d8:5f:c1:a3:12:2d:16:00:4d:d2:44:16:45:
1c:63:c5:94:de:bc:c4:a0:18:07:f9:a0:cb:1a:d6:
34:34:33:53:1c:52:39:16:5f:92:28:98:1a:7a:63:
a8:f2:bd:38:6a:b3:0a:3d:74:66:c1:77:b6:5a:b2:
8c:e2:02:28:42:75:9f:83:52:36:a3:aa:77:82:23:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:E3:EE:80:85:4D:77:B6:F8:AB:0F:D8:29:7D:1F:D0:F2:B2:AB
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:72:ed:bf:4c:c8:25:34:dc:54:b8:17:b7:ef:96:8e:9f:51:
f9:9a:db:74:92:fb:01:ca:cd:19:ad:3c:b1:04:49:39:f9:6d:
ec:90:ac:12:b1:a8:82:e2:9c:f9:01:15:b3:97:b8:93:93:91:
f7:ef:e7:4a:c5:c3:46:75:a8:44:d7:57:df:4e:a9:84:8c:38:
b6:59:c3:95:34:31:c6:04:0e:c0:15:71:d5:c3:b8:4f:84:bd:
c7:a2:cb:66:d2:9f:e8:ee:eb:47:58:6e:4b:18:90:3d:d1:0d:
82:dc:d5:19:5d:37:88:7f:b7:8a:c8:9c:36:97:3f:6e:af:7f:
91:f1:75:33:cd:a9:ee:78:c9:22:b2:0b:79:e5:c0:d8:d1:64:
17:11:d6:5f:fb:cf:d8:8c:76:69:eb:6a:35:94:e1:9c:5b:11:
92:66:78:d3:93:6d:bf:78:df:44:53:15:16:2e:81:f3:7d:e2:
44:42:a5:b7:bf:53:a8:87:77:33:e9:53:ad:61:96:79:3f:d2:
58:f4:8b:50:cd:46:79:97:91:90:a7:55:ca:18:4a:a0:ca:0f:
75:a0:27:d2:d9:09:18:5e:cc:80:73:a2:32:52:6d:19:6b:ef:
82:b1:1d:39:4e:ab:4a:ea:52:b7:f9:45:37:47:12:9c:d5:f2:
37:58:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:27 2026 by rpki-client