Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: EFf151nxL1jCB8BaNoTxH4u1zRLTiPqLfHnS9+Z0zl8=
Subject key identifier: FF:BD:94:7B:2A:42:2E:8D:AF:F1:D8:8D:6E:3B:6D:21:F0:92:3A:F2
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 019D9818D03F7BDEFDF084C5486D040CE664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 0C40
Signing time: Thu 16 Apr 2026 21:00:56 +0000
Manifest this update: Thu 16 Apr 2026 21:00:56 +0000
Manifest next update: Fri 17 Apr 2026 21:00:56 +0000
Files and hashes: 1: IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa (hash: 6DhTi3XwDZIX8aIPWMhc+0Awf+2qKC+vCqi+I2myhow=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: DrDqWVBJ3ygUi93XXJCCuONqg5cAEvSMs772yvYRAEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d0:3f:7b:de:fd:f0:84:c5:48:6d:04:0c:e6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Apr 16 21:00:56 2026 GMT
Not After : Apr 17 21:00:56 2026 GMT
Subject: CN=ffbd947b2a422e8daff1d88d6e3b6d21f0923af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:22:df:5e:84:5f:5e:b3:95:db:8b:46:c0:
98:91:7f:c7:4c:ae:37:e1:2a:49:1f:d1:e2:67:bf:
85:b9:34:bf:1c:1d:a2:57:a5:ca:97:d6:e2:a1:fa:
5f:40:6f:4b:fd:dd:6e:bc:d4:d6:8f:1f:c6:55:d4:
3f:f7:af:64:0c:ca:9b:33:29:1f:08:a2:4f:4f:39:
0c:90:71:c3:8c:d3:3a:09:f9:b7:44:fb:19:db:0a:
e2:38:76:88:25:4f:1b:57:a0:f1:ae:24:28:1a:79:
a9:f4:19:36:90:1b:1c:08:0d:53:61:35:8a:85:95:
4c:48:04:bc:91:99:8d:0d:ba:f3:40:ea:a6:27:9f:
f7:e5:e7:57:4f:0f:39:5e:0e:22:ed:a4:65:74:eb:
90:61:f7:ef:de:9c:e6:57:e8:50:db:6e:47:2c:ca:
03:0c:e0:17:1e:16:25:2b:a7:b0:98:15:dd:ce:f0:
21:52:5f:b0:7b:6d:ad:20:a9:ef:fd:ec:cb:9f:a0:
39:20:58:0a:3f:5c:14:81:8e:4a:ad:74:3a:57:59:
2f:b5:2f:73:02:18:2e:cb:85:8d:3a:9b:f7:4e:1f:
2d:cb:4c:94:53:20:33:ab:21:3f:a8:3e:2c:d4:71:
bc:4c:7f:7a:2e:51:23:3e:13:93:f3:a3:43:62:50:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:94:7B:2A:42:2E:8D:AF:F1:D8:8D:6E:3B:6D:21:F0:92:3A:F2
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:22:69:b0:a5:04:a9:31:c3:ad:f1:43:9c:81:0e:92:7b:
43:15:cd:b9:29:ac:5f:a2:0f:fd:37:bd:21:16:f6:e5:7a:d9:
ca:42:99:41:b9:12:7b:ef:e5:01:a0:88:3f:25:11:91:72:ab:
cf:54:8e:92:a2:22:7a:1f:a4:a4:90:d9:3b:85:01:3b:9e:1a:
f4:1b:1a:03:f7:ae:02:41:9c:90:f0:ad:49:5e:14:35:df:ba:
0a:d0:f4:e6:11:15:36:c8:b2:a5:71:2e:19:02:01:38:55:56:
f1:24:2f:6a:bc:e5:a9:da:fb:33:b1:71:b3:f3:09:5d:4e:24:
d1:e6:0b:45:db:e6:fa:6e:d8:10:f3:1a:54:79:43:a7:a9:11:
96:38:92:33:92:2a:38:77:01:02:3f:71:34:b5:3c:18:90:f7:
48:09:e8:72:e6:ff:27:85:65:a7:0f:5d:3c:aa:5f:2e:12:7e:
20:5c:fe:f7:77:9a:a1:05:80:1e:d7:23:94:55:7f:96:5d:a0:
5a:9b:72:dd:ac:a4:e0:03:8d:b3:4a:0e:fa:9f:26:d9:1f:f3:
bb:08:ef:6a:2f:80:7a:b2:69:18:15:8e:57:c5:2d:1f:6f:97:
a8:c1:2d:cb:1e:68:39:cf:61:19:68:28:eb:82:5e:47:56:a0:
cc:2a:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:10 2026 by rpki-client