Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
File: sw0gR_9gfu-FKTdg6cEab1lB0bY.mft (raw, json)
Hash identifier: hZTmB4B/DTG731n7K5dSBnrHFNDEtQKd8elqFSoeomk=
Subject key identifier: 38:25:4A:D3:37:27:F2:24:D4:4A:9D:49:D7:85:E3:50:65:59:44:28
Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Certificate serial: 019CB0239D5680D686B4F7754DA3DC237301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
Manifest number: 0FE3
Signing time: Mon 02 Mar 2026 20:00:49 +0000
Manifest this update: Mon 02 Mar 2026 20:00:49 +0000
Manifest next update: Tue 03 Mar 2026 20:00:49 +0000
Files and hashes: 1: Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa (hash: hZkfinGaxG52M/5/J2Jc2UXy36GPloEbpDX2tpwbSVM=)
2: sw0gR_9gfu-FKTdg6cEab1lB0bY.crl (hash: icQ7itTSSWxQ4iEybvdOWxAvYYbzoheR5zMk2sOwKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:9d:56:80:d6:86:b4:f7:75:4d:a3:dc:23:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6
Validity
Not Before: Mar 2 20:00:49 2026 GMT
Not After : Mar 3 20:00:49 2026 GMT
Subject: CN=38254ad33727f224d44a9d49d785e35065594428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:77:29:25:a3:ad:bf:4e:d1:4d:2d:9e:4b:
f9:91:8a:42:8a:c8:a1:8f:8b:63:94:6f:4d:ed:d6:
bf:92:8f:d6:94:f9:7d:8f:9b:46:61:29:3b:c0:fa:
ec:e4:a0:ff:92:24:f9:dc:c5:1d:d0:bc:07:35:be:
3d:7c:5c:02:7b:a7:1c:57:ea:fa:fb:70:ad:c7:35:
0f:50:e0:8a:ab:71:18:f5:e7:14:ad:a8:a2:6b:24:
f6:20:89:4d:01:65:07:c2:50:56:23:78:9a:4b:eb:
8f:44:b1:7d:4d:24:96:11:1f:37:79:9c:32:bc:77:
27:84:68:37:53:87:a4:2f:cd:52:77:ae:cb:e1:3b:
93:fb:b7:ce:65:1e:ad:67:34:0c:0d:2d:a6:da:e1:
27:eb:42:69:23:62:00:10:a7:76:5b:3e:24:1f:33:
56:43:49:fb:82:45:53:7d:98:79:e3:ae:70:c2:a2:
25:fd:30:15:6c:99:1f:57:a0:12:8a:74:56:e8:8b:
22:55:2f:a0:de:de:db:44:55:2b:a2:14:38:fc:73:
d1:dd:19:41:81:10:c3:84:43:d8:ce:99:60:af:58:
34:0d:36:77:a6:80:99:3a:7c:60:10:b9:70:57:30:
7b:b5:f6:ad:12:03:d8:2d:c4:b1:5c:d6:71:f7:af:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:4A:D3:37:27:F2:24:D4:4A:9D:49:D7:85:E3:50:65:59:44:28
X509v3 Authority Key Identifier:
keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3c:bf:33:f5:26:8c:02:b4:ec:5b:01:39:09:6d:a8:0d:26:
69:c3:3c:57:ce:94:ae:08:0d:d5:f1:1e:af:7e:c0:ac:c4:94:
39:b6:b1:f5:a2:a4:fe:32:83:95:74:f0:25:18:ce:66:30:9e:
af:43:18:5e:b2:27:c4:58:dc:fe:a4:0b:cc:cd:78:65:15:bf:
f0:b3:79:13:27:fd:1d:52:f0:b7:cc:99:c4:04:d9:1f:d4:a2:
e8:22:ee:c5:40:5b:ea:6f:04:45:e0:66:17:29:1b:90:3e:8b:
d9:49:6d:48:95:4f:28:78:a0:47:b8:96:b5:ae:4d:64:69:f1:
28:fc:11:5d:c7:48:1d:b7:c4:d9:0c:c6:61:91:79:62:32:e6:
34:04:67:cb:66:7a:31:32:ff:7a:b8:8d:d1:11:bf:5d:e0:69:
eb:0f:09:f3:79:e7:31:b2:06:f3:71:3e:1e:90:26:a2:42:a2:
80:86:b1:9b:c6:c5:41:66:9d:88:61:a3:6c:56:98:5d:ea:6d:
ac:7e:83:f5:f2:0f:f0:c1:a1:29:52:b2:0e:5e:7d:08:36:63:
dd:91:54:76:75:12:68:23:c3:d5:e8:31:38:b3:b3:1e:6b:10:
e9:8a:e4:8c:27:c0:06:ed:11:bb:7d:cd:e3:57:ca:f1:35:37:
4a:ec:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:28 2026 by rpki-client