Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier: XWMz9hzUq3bIJLs3bxFr+k3g2s2R9BOF8U7WE48g5aY=
Subject key identifier: D8:A7:8C:31:6A:FF:63:8F:2C:51:6A:6C:E2:25:87:1D:22:8C:43:F5
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial: 019FA8D00EE91C31A8F1BF58DED21FDAC5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number: 028A
Signing time: Tue 28 Jul 2026 13:00:35 +0000
Manifest this update: Tue 28 Jul 2026 13:00:35 +0000
Manifest next update: Wed 29 Jul 2026 13:00:35 +0000
Files and hashes: 1: GPyEvupTAAk4EntAl2UXoifEv_U.asa (hash: SlWK5YVXz1F+IWgsNiL1MM+DTuo1ddzaVb7i1ICEbYs=)
2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: nrQ83Wbbz7CdWkhh/s0FpJw5cJyVir57kX+vqhLgslw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:0e:e9:1c:31:a8:f1:bf:58:de:d2:1f:da:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Validity
Not Before: Jul 28 13:00:35 2026 GMT
Not After : Jul 29 13:00:35 2026 GMT
Subject: CN=d8a78c316aff638f2c516a6ce225871d228c43f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:2a:e0:bf:37:05:72:55:60:c8:19:97:62:
e4:50:76:27:49:a3:aa:00:9d:0e:3b:ff:83:44:78:
99:6c:9f:f8:93:e6:97:9d:27:ce:2e:48:39:35:58:
40:a4:18:c1:dc:35:aa:93:27:d3:c3:2f:13:15:d4:
c9:28:5f:84:95:ae:ff:c8:64:a2:11:30:e3:67:77:
22:50:3d:ee:5b:7a:c4:79:4e:24:96:c2:73:89:04:
fd:9c:c3:b1:f5:b6:72:93:8f:f9:93:c4:3b:2a:f9:
60:a9:85:eb:8b:48:55:af:81:ce:0c:42:e9:82:0b:
8c:bf:7a:99:d7:5e:f6:b6:6e:25:d3:01:2c:59:fe:
3d:41:89:50:5f:bc:88:1f:d4:c2:19:be:23:6a:ee:
8b:26:22:0e:a1:a6:0d:f9:58:29:de:b6:8f:0e:6e:
97:04:8d:eb:8e:7f:d0:89:80:4a:19:90:36:33:33:
b5:18:ca:45:2c:b2:8a:74:82:25:af:ed:38:f9:9f:
1e:80:16:46:b1:72:57:75:90:13:98:c7:87:52:fc:
b4:eb:8d:4e:be:08:37:c7:b8:d7:6d:df:f0:0a:fd:
7a:c7:30:62:f6:f7:c1:c8:36:e9:10:25:e6:eb:cf:
30:48:b0:8e:3f:c4:1b:cf:e3:ab:76:20:c9:4a:8c:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A7:8C:31:6A:FF:63:8F:2C:51:6A:6C:E2:25:87:1D:22:8C:43:F5
X509v3 Authority Key Identifier:
keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a4:4f:0e:fe:b3:f1:55:d7:b4:b8:6c:e1:f6:e3:a6:3c:3e:
7e:bb:2a:a8:70:ed:b5:d0:e1:80:2f:e3:f7:f8:78:93:62:cc:
d9:f0:2b:9b:f6:a9:63:c7:54:7d:4e:fe:df:aa:78:b5:ff:99:
66:fe:25:13:77:90:62:0e:b6:b1:5e:b2:7a:23:db:16:97:eb:
0b:ee:37:6a:8e:4d:a3:d2:b0:c8:7e:c8:da:60:31:59:fb:bb:
10:99:6d:43:e7:88:38:1e:ea:da:52:af:a2:00:6b:d7:ca:7e:
be:bf:6c:63:0b:88:3d:c1:36:7f:6d:4a:3c:4c:2a:f5:44:a1:
2a:1e:18:6d:81:2b:c2:a0:41:5b:58:16:9c:12:b7:c2:4f:c8:
27:3f:33:5c:1c:d8:27:ad:86:e3:27:1d:2c:ce:30:37:64:17:
01:0a:2d:39:d0:d9:be:84:b7:28:cb:ed:72:61:14:fb:8f:e4:
75:ba:d8:3c:65:02:a2:f2:f1:01:46:4b:d9:46:66:02:23:a4:
f5:29:32:fc:a5:2b:57:ff:03:ff:aa:65:22:64:84:7b:75:b0:
14:54:a9:05:73:09:4e:d5:59:b1:cd:49:56:22:52:45:da:87:
5c:ec:e6:3c:99:2a:34:15:03:4f:25:b9:a2:1f:f5:15:fa:b8:
b0:c4:d7:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0A7pHDGo8b9Y3tIf2sWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2MwYmYzOTE5MzM5Mjc3ZWFkNmJhMWQ5NTVjYjVmNmMz
OThkZGUwHhcNMjYwNzI4MTMwMDM1WhcNMjYwNzI5MTMwMDM1WjAzMTEwLwYDVQQD
EyhkOGE3OGMzMTZhZmY2MzhmMmM1MTZhNmNlMjI1ODcxZDIyOGM0M2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcwq4L83BXJVYMgZl2LkUHYnSaOq
AJ0OO/+DRHiZbJ/4k+aXnSfOLkg5NVhApBjB3DWqkyfTwy8TFdTJKF+Ela7/yGSi
ETDjZ3ciUD3uW3rEeU4klsJziQT9nMOx9bZyk4/5k8Q7KvlgqYXri0hVr4HODELp
gguMv3qZ1172tm4l0wEsWf49QYlQX7yIH9TCGb4jau6LJiIOoaYN+Vgp3raPDm6X
BI3rjn/QiYBKGZA2MzO1GMpFLLKKdIIlr+04+Z8egBZGsXJXdZATmMeHUvy0641O
vgg3x7jXbd/wCv16xzBi9vfByDbpECXm688wSLCOP8Qbz+OrdiDJSoxM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNinjDFq/2OPLFFqbOIlhx0ijEP1MB8GA1UdIwQY
MBaAFP7MC/ORkzknfq1rodlVy19sOY3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUt
ZTFlNmU5NWI0YjdjLzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUtZTFlNmU5NWI0Yjdj
LzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaRPDv6z
8VXXtLhs4fbjpjw+frsqqHDttdDhgC/j9/h4k2LM2fArm/apY8dUfU7+36p4tf+Z
Zv4lE3eQYg62sV6yeiPbFpfrC+43ao5No9KwyH7I2mAxWfu7EJltQ+eIOB7q2lKv
ogBr18p+vr9sYwuIPcE2f21KPEwq9UShKh4YbYErwqBBW1gWnBK3wk/IJz8zXBzY
J62G4ycdLM4wN2QXAQotOdDZvoS3KMvtcmEU+4/kdbrYPGUCovLxAUZL2UZmAiOk
9Sky/KUrV/8D/6plImSEe3WwFFSpBXMJTtVZsc1JViJSRdqHXOzmPJkqNBUDTyW5
oh/1Ffq4sMTXiw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:42 2026 by rpki-client