Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: 3J7FF1QXDSnMMskNb09p4YcuVMR1+D+Qtd2B7i1Nd/I=
Subject key identifier: B1:6A:5F:41:23:E6:68:DE:37:68:B9:29:7D:E1:8C:40:AF:96:C2:D8
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019CAD22F9E02B85F629EE748B7E7FDF4B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 13D0
Signing time: Mon 02 Mar 2026 06:01:16 +0000
Manifest this update: Mon 02 Mar 2026 06:01:16 +0000
Manifest next update: Tue 03 Mar 2026 06:01:16 +0000
Files and hashes: 1: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (hash: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE=)
2: l_UYfd627TWdVQUBGDcYXolbG3M.roa (hash: jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: fUeCChWBpPkQWIDPq7wd7cp04kQImVg10L9S3eXfpUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f9:e0:2b:85:f6:29:ee:74:8b:7e:7f:df:4b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Mar 2 06:01:16 2026 GMT
Not After : Mar 3 06:01:16 2026 GMT
Subject: CN=b16a5f4123e668de3768b9297de18c40af96c2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:df:23:9d:a3:be:1d:99:00:2c:fc:a1:f2:
d6:bc:de:39:9a:a2:b7:46:94:ef:ae:4c:23:9a:0d:
9f:cf:d1:d3:dd:db:4f:58:0b:7f:0e:12:ac:da:1f:
f4:e9:b4:b3:47:5d:5b:ff:ad:3a:0b:6c:6f:8b:2e:
69:10:6a:48:31:de:98:8a:15:8e:e4:8c:7e:5a:11:
80:c3:db:0b:a4:6f:60:c2:4c:87:a7:16:fc:c6:04:
a3:df:35:07:f2:b6:6e:2c:b3:b9:42:c0:07:fb:d2:
67:90:e3:b0:cc:28:8d:b1:df:70:94:b3:79:ea:f2:
1f:68:78:77:35:92:4b:b0:86:50:70:ee:2c:e4:0a:
05:8c:8a:66:1c:a9:6e:95:73:72:32:79:e5:fa:45:
13:39:b6:f6:fc:c5:e4:6f:57:69:4f:fc:14:1b:e1:
a4:04:00:e0:94:be:5e:c9:7a:17:cb:cc:99:5b:7c:
24:0b:b2:e6:a2:b4:39:1d:3e:1b:1d:bd:c6:cb:18:
2b:d2:cf:08:e2:09:35:fe:b7:b4:6c:6c:d0:40:4f:
a0:a8:6d:e7:27:09:1e:b9:f6:75:74:34:46:20:ba:
dd:b4:1e:c3:d4:a1:12:b2:4b:04:4d:ba:8a:17:15:
ba:46:14:e0:48:33:16:a1:6d:4d:71:39:b5:ef:af:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:5F:41:23:E6:68:DE:37:68:B9:29:7D:E1:8C:40:AF:96:C2:D8
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:c9:4f:97:3b:0d:92:53:e2:2e:77:25:3b:83:1c:00:d6:
05:ba:e4:75:ba:54:cb:87:17:84:a5:68:7c:69:86:3d:81:f6:
c1:fb:0f:04:5f:33:22:02:a9:17:4c:2f:f3:dc:f0:9f:57:72:
31:2e:c7:87:4a:a8:26:32:eb:10:f1:a5:0a:86:b8:90:ec:ca:
4d:d0:d1:0b:27:cf:bf:05:14:9f:8a:f4:02:70:5e:3b:1e:11:
b8:59:e5:40:12:e7:31:31:0d:6b:8c:73:c7:35:80:c6:a2:2f:
e5:b2:2a:e9:a8:96:29:1c:a5:bc:1b:0e:10:b9:49:00:c6:bc:
77:8e:1a:37:14:80:7e:56:06:b4:13:09:98:9f:97:63:d4:24:
38:ba:ad:bf:36:17:d1:0d:08:8f:26:26:9c:56:e0:ac:d8:86:
1d:63:de:f6:de:ed:66:4a:fd:ee:cf:ea:f5:85:7b:04:37:2b:
d7:5f:e3:d5:99:6c:5b:15:21:d7:23:13:ee:58:d1:d8:2d:75:
5a:71:c6:3d:75:63:8e:4d:80:b8:e1:95:3c:d2:c7:4e:fb:21:
3f:91:2a:39:b8:13:aa:be:a9:65:d9:0d:96:b9:eb:53:20:c0:
fa:de:ee:41:bf:32:f5:34:91:9c:ed:cc:07:a4:3b:3f:51:77:
93:db:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:10 2026 by rpki-client