Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: 2kpyTh0EcJt7TsZb1ki70tyQj2YYf/8ZBB7LK1vuB5c=
Subject key identifier: 3F:B8:A2:5C:EA:20:86:58:EA:58:EF:E7:97:0C:0D:49:D7:F8:DE:5B
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019D98508699F2549444E7FE5560ED53CA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:01:47 +0000
Manifest this update: Thu 16 Apr 2026 22:01:47 +0000
Manifest next update: Fri 17 Apr 2026 22:01:47 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: aok4OccdEilQcb/8XR4I8eBtqEYUFKqDPyBbo9q4pM0=)
2: tuHT2dEbGHjnKbIj5B7A7SzfIdQ.roa (hash: Q0+MdAPGMZoJ36JQC3VmRpgFrOBMqh93iBgxmBCVguQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:86:99:f2:54:94:44:e7:fe:55:60:ed:53:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Apr 16 22:01:47 2026 GMT
Not After : Apr 17 22:01:47 2026 GMT
Subject: CN=3fb8a25cea208658ea58efe7970c0d49d7f8de5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:9c:9c:0c:f1:24:1f:10:bb:ba:25:73:16:
9f:91:fb:3e:ef:d1:1b:b2:9c:37:17:3f:83:e6:57:
b0:40:0c:08:b8:bb:f8:53:bd:58:df:02:b6:de:fb:
d8:67:ad:72:e2:e9:fd:f9:74:5e:8b:9b:f6:65:2b:
b7:a5:d5:2d:a4:59:e6:08:3f:f1:15:ea:50:28:c1:
e9:a0:08:3b:02:df:1a:23:5a:d4:45:1f:65:aa:a6:
bc:03:73:32:28:65:3c:ea:52:32:a8:7e:43:c7:12:
2b:f6:03:14:ce:e3:8f:d3:16:42:50:d8:d2:51:99:
51:4d:05:b4:48:57:8b:ad:fc:d0:7c:53:ce:67:f1:
91:65:9d:27:a8:e2:64:3e:3f:d5:a3:88:44:c0:0c:
02:74:b3:28:71:ac:ea:d5:00:2c:81:7c:cc:1f:8d:
37:e1:93:f3:3a:04:84:14:4c:9a:ee:0a:73:fc:57:
4a:b3:02:62:83:e0:35:4b:a4:d7:2f:63:f1:4a:1a:
23:77:ad:0b:3f:a8:34:37:f8:20:9f:cf:de:ba:11:
e3:4f:a4:1d:26:00:fe:a2:31:90:5b:4f:43:07:53:
66:06:62:4e:9a:fa:be:af:05:6a:7a:a5:dc:9b:0b:
da:2b:8c:a5:e2:fc:45:eb:8b:4b:43:c2:d6:20:b8:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B8:A2:5C:EA:20:86:58:EA:58:EF:E7:97:0C:0D:49:D7:F8:DE:5B
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:25:7a:c0:ef:da:ed:a4:ef:fe:bf:20:f6:66:6b:ea:dd:
c9:c8:d9:c6:89:c4:df:1d:b6:5d:3c:bf:e8:53:48:4f:bd:af:
43:59:63:af:dd:f1:cf:af:4e:b5:c0:ff:71:22:30:28:ba:48:
a8:16:01:44:80:32:f0:3d:cd:44:41:43:84:4c:cb:70:3e:41:
3d:de:3f:f6:10:e2:71:78:f1:03:72:4c:d2:8a:51:c4:15:fe:
11:db:ee:6d:a3:4b:16:e6:ab:92:ee:54:44:2d:33:30:25:47:
1c:3b:08:c1:16:f6:cb:33:5c:4c:42:df:bf:5d:d7:07:ad:5d:
4c:7d:50:8e:9a:02:10:06:c2:50:4f:f6:98:7d:bb:1d:e7:d9:
ae:7c:fe:19:c8:39:4d:2a:06:70:be:9a:76:db:84:23:17:2f:
72:5b:86:0c:b8:d2:6f:e5:7a:fe:57:96:18:32:c5:fb:75:e3:
06:fa:2a:75:ea:a7:4c:2e:03:e1:65:6e:9e:3f:a3:e9:04:4b:
1b:69:94:8a:28:fa:43:71:f3:2c:99:1a:16:43:7f:07:e6:35:
3c:8d:92:83:95:da:40:3b:ee:c2:a0:5c:49:f1:79:a9:0d:d2:
81:b6:53:1b:f9:a5:b7:0b:3c:0a:bf:6c:6a:4d:e5:38:d7:b1:
fe:62:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:38 2026 by rpki-client