Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: X8m2qh8GINY3ttitUjubeKrEyn8X+FjN5h+LnsBoKa8=
Subject key identifier: 2D:55:B7:9B:19:09:63:2B:01:65:AF:6E:44:D4:9C:81:17:0F:8D:5B
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019D9AABAA3F21AE8B3373D7FD8603771002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 144B
Signing time: Fri 17 Apr 2026 09:00:34 +0000
Manifest this update: Fri 17 Apr 2026 09:00:34 +0000
Manifest next update: Sat 18 Apr 2026 09:00:34 +0000
Files and hashes: 1: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (hash: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE=)
2: l_UYfd627TWdVQUBGDcYXolbG3M.roa (hash: jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: ghvpd8JosKoAHKJnTx93B4fLmduE8E6oBW2kYiigPmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:aa:3f:21:ae:8b:33:73:d7:fd:86:03:77:10:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Apr 17 09:00:34 2026 GMT
Not After : Apr 18 09:00:34 2026 GMT
Subject: CN=2d55b79b1909632b0165af6e44d49c81170f8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:e8:ed:eb:7e:78:71:05:b3:1f:0f:12:e3:
a3:7e:ea:0a:a8:65:9b:28:44:2c:14:34:bd:c9:86:
a1:47:49:ac:95:d3:75:a1:7b:96:90:26:9c:d4:9a:
af:36:c5:a6:34:f7:d8:92:a8:68:5c:e4:ba:29:a2:
df:fd:04:02:b3:f7:68:04:fa:db:52:73:66:e5:b1:
e3:74:91:4b:c9:b3:17:7e:57:bd:50:8c:f4:25:99:
0b:de:31:dd:b4:36:1d:cb:3a:9d:67:4d:62:db:62:
0a:82:bf:33:43:75:1b:07:90:d5:5b:ca:98:a0:e2:
6b:97:e2:a0:64:d2:d8:5d:6e:b4:6e:48:ee:f6:9a:
37:54:1d:9a:10:90:39:50:6c:d8:e6:a5:cc:37:b5:
50:fc:85:7b:f2:39:6d:9d:c9:23:53:1b:1d:1b:c5:
d4:38:d2:24:75:f8:5a:23:5b:bb:15:76:9e:7b:39:
d4:45:2b:1a:6b:54:e3:7f:1a:51:a2:0c:3b:b9:7f:
9d:e7:da:7b:0f:43:4c:24:68:31:bc:19:2f:99:fc:
e8:b1:3c:5e:e9:20:11:07:3e:60:20:b6:c0:c4:92:
b6:77:be:ba:f7:27:db:10:c2:ac:5c:9f:85:33:2c:
74:99:35:06:be:54:50:f9:04:e2:d8:2b:c7:d1:87:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:B7:9B:19:09:63:2B:01:65:AF:6E:44:D4:9C:81:17:0F:8D:5B
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:19:f1:3b:f3:3f:87:67:23:31:1f:07:91:c1:55:a1:0e:cd:
78:32:8e:a5:26:06:22:be:92:0d:b8:9c:17:ef:06:ff:06:d0:
aa:dc:ae:3e:ec:05:e8:74:50:79:a7:03:98:96:f6:5e:53:ba:
ad:30:8b:10:02:55:89:e0:07:51:54:26:67:f5:f9:5e:12:02:
b4:66:b5:a2:93:75:21:9c:a4:e6:6e:b1:eb:bd:8f:35:f3:ca:
9a:f2:02:e6:d9:72:c7:76:5a:12:09:68:27:99:a7:5b:14:b0:
a8:b5:4f:67:68:f2:51:1f:b9:a3:f7:6f:c0:ed:af:10:f8:7c:
88:9d:d8:dd:c1:48:ac:d4:31:44:3e:89:bd:43:cb:78:ca:47:
f7:70:24:fc:42:40:bd:28:fd:e8:01:0d:08:e1:83:d1:5c:c7:
61:2e:74:6c:ef:f0:75:e0:e7:41:11:73:62:a3:e1:84:97:20:
77:ea:87:04:3c:bc:c6:07:de:c1:89:a7:8c:d3:30:8e:4e:c1:
97:99:a5:38:82:4e:a6:04:3f:44:e8:64:ba:b2:17:12:ee:f6:
cc:32:a5:8a:ab:67:6c:c5:50:bb:02:e3:e6:46:c2:be:27:1d:
57:61:05:93:fe:be:62:42:8b:94:36:27:1d:66:7d:90:89:f7:
f4:72:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:17 2026 by rpki-client