Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: fBH2mnGTKJoBOPRK6tLuvexwZoFULpX1TRHq9jLUmSs=
Subject key identifier: 36:E1:0F:9A:9F:56:44:56:5B:64:B0:47:A8:3B:45:20:F1:8F:D9:91
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019D98BDBE58C77535E4C143B7864DAA9434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 137F
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: L0X4tEW7HnbeHDlA1x21o3sAyrscRylxSGFoACo/+tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:be:58:c7:75:35:e4:c1:43:b7:86:4d:aa:94:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=36e10f9a9f5644565b64b047a83b4520f18fd991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:08:3f:a9:8a:ea:a5:72:25:9f:af:3c:ef:
92:0d:e6:ca:98:e5:fe:78:59:08:5c:b5:65:a4:8b:
95:c8:0c:1e:61:ba:20:b7:1c:51:53:e7:0c:1b:40:
3b:f6:f2:aa:27:a9:93:9b:e8:e8:a5:96:13:8a:f6:
a2:26:16:06:c8:19:57:89:47:70:b6:a4:fd:a8:57:
7a:4b:b4:41:8c:fa:f9:5e:e5:fa:ee:07:71:b3:5e:
e7:9c:2d:b9:0f:a1:0c:21:f9:4d:4c:7a:11:54:89:
5f:94:26:2b:ee:4a:c8:e5:f7:a3:61:f3:75:12:83:
19:fe:6f:a8:28:11:60:53:76:47:16:71:75:47:8c:
40:1e:3e:09:5b:f2:dc:59:c9:fb:35:65:74:d7:b6:
da:df:6e:9d:31:63:f8:bb:28:26:a7:ee:57:88:a5:
a9:44:9b:82:e3:ad:2f:8a:8e:77:e2:4c:ce:b6:cb:
87:94:73:f5:92:f9:0a:7e:30:fc:b4:87:2e:70:db:
d8:1b:d2:ca:6b:ae:d2:77:fc:1f:a0:27:f0:64:7c:
33:70:b4:2c:8e:44:4e:ef:30:0a:7c:65:af:9e:1c:
d4:f5:e4:0e:a8:90:78:c5:64:dd:a6:a9:ec:42:33:
3a:37:57:74:38:6e:91:29:3b:a8:95:c2:36:cc:df:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:0F:9A:9F:56:44:56:5B:64:B0:47:A8:3B:45:20:F1:8F:D9:91
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a8:9c:ce:49:4a:b9:7d:76:3c:77:2f:aa:cc:fc:8d:5c:a1:
83:43:0c:fa:6a:b8:24:0a:f7:92:37:90:83:4f:e8:b2:b7:3d:
45:9a:4d:36:08:27:9f:3f:35:5a:e2:ab:be:cc:9b:a0:0d:4b:
f0:24:8b:3f:2e:e8:80:6f:9f:f5:ed:79:64:e0:aa:7d:f1:08:
b9:b6:69:42:67:23:09:23:fc:38:75:e1:da:48:90:06:68:44:
9f:c2:e8:43:81:c5:e2:b6:94:7c:6a:01:09:e5:6a:95:2e:72:
69:52:eb:51:c8:e8:61:c8:d1:49:82:62:e3:b4:e2:f6:ca:16:
fe:dc:40:da:51:70:0e:87:7d:09:49:e9:77:11:1b:f6:a8:99:
06:dd:bb:a7:18:f7:2d:7e:11:05:e9:2c:93:04:34:bb:4a:c5:
43:43:16:b4:bf:ff:19:8d:e2:fd:65:9c:85:f6:a2:47:aa:3b:
dd:50:b9:e3:3e:2c:2b:83:f6:e3:dc:5b:81:f0:0f:b9:3b:8f:
27:33:fc:72:c7:2f:27:5f:5f:a8:76:c5:83:74:44:92:fa:19:
e4:00:7c:7a:4c:18:d2:cb:88:ca:49:f5:a4:d4:7b:69:bf:fb:
ef:13:1a:24:97:a9:97:f3:d9:76:fe:8f:e2:30:82:a5:33:54:
f6:0a:92:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvb5Yx3U15MFDt4ZNqpQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk
ZDgyNTcwHhcNMjYwNDE3MDAwMTA0WhcNMjYwNDE4MDAwMTA0WjAzMTEwLwYDVQQD
EygzNmUxMGY5YTlmNTY0NDU2NWI2NGIwNDdhODNiNDUyMGYxOGZkOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJEIP6mK6qVyJZ+vPO+SDebKmOX+
eFkIXLVlpIuVyAweYbogtxxRU+cMG0A79vKqJ6mTm+jopZYTivaiJhYGyBlXiUdw
tqT9qFd6S7RBjPr5XuX67gdxs17nnC25D6EMIflNTHoRVIlflCYr7krI5fejYfN1
EoMZ/m+oKBFgU3ZHFnF1R4xAHj4JW/LcWcn7NWV017ba326dMWP4uygmp+5XiKWp
RJuC460vio534kzOtsuHlHP1kvkKfjD8tIcucNvYG9LKa67Sd/wfoCfwZHwzcLQs
jkRO7zAKfGWvnhzU9eQOqJB4xWTdpqnsQjM6N1d0OG6RKTuolcI2zN/pyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbhD5qfVkRWW2SwR6g7RSDxj9mRMB8GA1UdIwQY
MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut
ZWI2NWYxZjQ2ZTBiLzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi
LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6iczklK
uX12PHcvqsz8jVyhg0MM+mq4JAr3kjeQg0/osrc9RZpNNggnnz81WuKrvsyboA1L
8CSLPy7ogG+f9e15ZOCqffEIubZpQmcjCSP8OHXh2kiQBmhEn8LoQ4HF4raUfGoB
CeVqlS5yaVLrUcjoYcjRSYJi47Ti9soW/txA2lFwDod9CUnpdxEb9qiZBt27pxj3
LX4RBekskwQ0u0rFQ0MWtL//GY3i/WWchfaiR6o73VC54z4sK4P249xbgfAPuTuP
JzP8cscvJ19fqHbFg3REkvoZ5AB8ekwY0suIykn1pNR7ab/77xMaJJepl/PZdv6P
4jCCpTNU9gqSkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:54 2026 by rpki-client