Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier: 4vmuRO7YdaNqZrHlPAqSAGdSM4wAqysYCpUDQpnzTbo=
Subject key identifier: CA:19:55:09:EC:80:8F:BF:44:C2:E9:86:2E:2F:4B:6B:95:19:51:E6
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 01A108EF6B82E76F701A2A64CC1F5BA6793F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number: 1A8D
Signing time: Sun 04 Oct 2026 22:01:10 +0000
Manifest this update: Sun 04 Oct 2026 22:01:10 +0000
Manifest next update: Mon 05 Oct 2026 22:01:10 +0000
Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: BMCpAWkfu0h9yqQhuqLArQ9UcA93x8XT0CBwaB/wDiY=)
2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:ef:6b:82:e7:6f:70:1a:2a:64:cc:1f:5b:a6:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Oct 4 22:01:10 2026 GMT
Not After : Oct 5 22:01:10 2026 GMT
Subject: CN=ca195509ec808fbf44c2e9862e2f4b6b951951e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:dc:95:e8:b9:10:7b:a8:34:6f:3c:90:d3:
c7:eb:1a:ba:55:d4:85:3e:97:26:a1:d6:83:b5:f3:
17:db:cc:49:bf:3f:ff:a8:03:f2:08:e8:dc:ee:64:
d5:a4:43:9b:13:1b:44:25:b0:1a:86:0f:44:4b:89:
9e:0c:b1:89:64:08:11:67:c9:35:73:a4:49:d8:6f:
0c:5f:dd:68:b3:73:fe:90:0a:13:00:7d:5f:35:3c:
74:93:66:59:5e:e2:0f:a8:86:e6:81:5c:ef:ca:f4:
8f:f7:75:47:a0:8c:6c:42:8d:65:4a:05:9f:b3:08:
48:e1:49:c8:f2:20:76:2b:85:e8:9c:ad:64:1e:5b:
4d:f7:8d:51:74:0c:ee:03:e2:56:ff:38:90:b6:3c:
7f:ed:fe:ef:1d:fb:77:b4:48:0a:02:19:26:29:0b:
16:b2:d4:36:97:48:17:da:d7:c7:30:40:68:42:46:
e1:61:4d:75:79:43:c5:1f:2b:ee:20:c6:00:ca:9e:
67:83:7a:6f:4f:c8:2f:25:32:9b:59:09:e0:66:7c:
f5:16:3f:8b:1a:62:0a:21:ec:1b:e6:e6:53:4f:82:
c5:18:b5:94:b7:e8:fc:c1:1f:df:13:dc:f6:0f:7e:
bb:3c:eb:b2:c0:a4:00:c9:b4:7b:ce:47:17:bf:25:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:55:09:EC:80:8F:BF:44:C2:E9:86:2E:2F:4B:6B:95:19:51:E6
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:30:4e:e6:12:6c:9e:1a:d0:25:6c:61:0c:97:9f:33:9a:83:
ca:ca:c3:74:74:26:04:48:f2:33:97:31:71:4b:bb:c6:40:40:
a1:20:b0:c1:1e:6f:cf:e9:30:6b:16:8a:bd:ba:83:34:99:ba:
99:1c:1f:9a:50:06:94:14:e3:81:4c:66:77:97:76:16:18:c6:
08:a0:bd:b0:0f:00:28:b9:df:90:ac:aa:ef:0a:bb:d2:5c:37:
7a:c3:c1:ba:f3:eb:0f:7d:b6:8d:47:05:d6:31:87:61:04:12:
f0:20:cf:6f:b3:7a:de:b4:bc:cf:fb:eb:26:4c:f0:db:79:b7:
7e:d2:8e:d1:ef:8c:e0:b8:48:33:6e:60:ac:3e:2d:89:7f:e1:
5b:2a:68:59:87:56:ec:7f:35:ef:44:9a:26:d7:62:36:de:f0:
8d:d2:1a:54:4b:85:e7:eb:c0:3c:ff:2f:97:07:70:46:21:54:
1f:26:c6:ed:32:7c:ce:0f:82:fe:21:c0:59:03:79:18:66:4c:
d4:ae:3c:ff:aa:b8:2f:f3:f8:d7:37:76:5a:f3:e9:ab:3a:fd:
e2:16:64:df:07:ed:13:a1:a4:6b:08:06:62:f8:94:2a:c6:17:
7b:f4:92:44:b1:77:c1:9f:f1:41:f8:73:91:e6:23:33:68:d9:
99:96:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 04:00:36 2026 by rpki-client