Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: IGoWMIw2/dJorv6xG9Qe/+ZGvXecYTsvHLzesScQ3kM=
Subject key identifier: 89:B6:B0:BC:0C:78:F6:B7:52:68:4D:87:59:81:7B:DE:68:94:E1:2F
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019CACB50506EA29977AB17B8D1AAB025AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:10 +0000
Manifest this update: Mon 02 Mar 2026 04:01:10 +0000
Manifest next update: Tue 03 Mar 2026 04:01:10 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: NKCHhxPkSJyO9dj0T8/kppKs9dN45SOF8EyDswYIoXI=)
2: tuHT2dEbGHjnKbIj5B7A7SzfIdQ.roa (hash: Q0+MdAPGMZoJ36JQC3VmRpgFrOBMqh93iBgxmBCVguQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:05:06:ea:29:97:7a:b1:7b:8d:1a:ab:02:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Mar 2 04:01:10 2026 GMT
Not After : Mar 3 04:01:10 2026 GMT
Subject: CN=89b6b0bc0c78f6b752684d8759817bde6894e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:ed:00:e8:35:09:9d:12:af:bb:e1:1d:37:
90:78:15:e6:04:10:3c:59:25:02:7a:83:8d:59:53:
39:ff:a3:ca:d9:30:7f:d0:bb:9a:9f:bd:37:ba:ba:
ae:60:89:ff:55:35:d5:68:90:9f:c4:51:81:8f:7d:
97:3e:cd:cd:c2:77:18:b0:f0:ea:39:9f:37:4e:e6:
09:8d:11:2e:80:87:e6:3b:0a:8f:b8:25:36:02:66:
39:ef:d5:de:e6:83:35:71:70:1b:3d:37:5a:1f:6a:
bd:f2:e6:19:c1:a8:ee:da:7f:e4:d0:c6:ef:07:85:
3e:20:dc:ba:b5:90:59:a5:a9:40:52:30:69:49:37:
e2:b9:8c:98:67:0f:54:44:1f:10:cb:a1:a9:b9:41:
34:ce:77:b5:92:4f:f7:ac:78:c8:90:57:3c:19:de:
a6:ce:e5:9d:41:8d:b7:17:5a:39:59:cd:bc:29:3c:
fe:fd:37:82:0e:51:f3:b8:44:18:52:03:b5:28:2b:
11:39:a0:6b:44:e9:73:2a:03:a5:2a:41:a5:fb:ac:
36:78:0f:f6:86:6a:b1:5f:a2:1e:9c:92:20:1e:cd:
69:ae:42:ea:e2:b1:56:67:e4:2d:58:1d:8a:31:74:
32:8b:e5:c3:d5:c6:9e:2c:5d:4b:72:cb:52:e5:81:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B6:B0:BC:0C:78:F6:B7:52:68:4D:87:59:81:7B:DE:68:94:E1:2F
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fa:86:b7:b7:8a:27:45:4c:f9:87:50:c9:44:d8:c7:79:0c:
d8:2c:c4:67:78:ec:39:21:f8:ae:3c:ee:d7:ed:8c:3e:00:e2:
48:b6:4c:46:4b:5a:d6:96:f3:6c:2d:ec:17:2a:9d:f8:71:d7:
81:44:b7:8a:c9:96:94:0f:9b:ee:f5:40:73:3e:2a:27:33:ea:
5c:a8:ef:90:b8:19:85:0e:40:03:dd:73:0f:a8:98:45:f6:0e:
49:ba:4d:d1:0b:54:17:f5:03:9f:e0:ae:4b:c9:62:c8:b0:54:
74:95:6e:df:cf:e3:db:db:8c:04:7c:61:23:04:4c:db:a1:fb:
46:39:b7:a4:60:29:39:ac:08:97:41:c1:db:79:fc:c2:99:22:
1d:44:a6:f6:49:4c:86:3a:d1:6d:c1:99:a0:e8:cc:87:1a:bf:
c1:6e:2f:70:2a:49:71:a3:13:d6:c8:27:c4:20:9b:61:72:0f:
e8:de:84:ea:b5:b3:f4:7c:be:d1:a9:32:b2:6b:88:39:b4:05:
44:8b:86:2a:1f:0a:d3:24:53:c9:cd:68:57:ff:90:1d:2f:25:
33:62:f3:f6:60:1b:3f:51:19:cb:3b:a6:d7:47:08:f6:88:56:
ec:01:eb:da:f5:86:81:20:94:83:00:f3:54:e7:4f:55:b2:2a:
3f:40:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:26 2026 by rpki-client