Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: 3SPa12C3IbsQucJYjxFTbOBx6/tJwgXVakNXoq3uydM=
Subject key identifier: 30:2A:6F:6B:33:28:94:05:DC:C5:FB:AC:85:E6:54:35:1A:85:15:02
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 019CAC4753CBB9481C055594D7F139128F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0F17
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: HfrLlB4hKtVM_U8ec59MAiKWNM0.roa (hash: vvyUfIqwDg/vVPERqoykgaE3kPhLAXeAghrpbLhVekI=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: Ey8GreQtIzafd6UNdxo1ChYaeTNQJyeNZ1C3tb7PoVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:53:cb:b9:48:1c:05:55:94:d7:f1:39:12:8f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=302a6f6b33289405dcc5fbac85e654351a851502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:46:27:ef:5f:e9:97:b4:af:15:f2:1d:a1:
a5:da:04:63:dd:b2:3b:53:7d:9f:4c:99:27:e9:c1:
2d:a9:85:c0:7a:c3:dd:75:b9:8e:b2:d4:c2:88:3a:
54:1b:73:9e:97:b3:64:f6:5f:f5:1c:6e:9a:22:c7:
a8:ea:08:38:b0:9c:b3:86:4c:c4:fb:5c:0a:bf:df:
f4:36:11:d0:88:3f:9b:f9:35:bd:4e:7a:d0:bf:99:
a4:7e:c3:9d:6e:1b:d3:35:8c:39:a4:ce:6a:af:3c:
93:42:c9:f8:eb:71:7f:f1:0f:48:58:23:93:b5:8d:
4b:68:de:98:85:10:6c:fe:f5:fc:28:76:0e:b7:e1:
6b:de:34:40:4f:26:af:0c:b1:88:d4:c9:aa:8d:f1:
42:84:6e:4d:20:d0:63:c5:d7:ea:81:ba:5f:53:59:
70:19:ea:3c:d6:80:7c:d3:56:81:83:70:c7:a9:e1:
f5:85:37:38:38:85:eb:47:d6:0a:6b:d7:aa:b3:85:
1f:04:26:72:b2:e2:f5:7b:e6:aa:7d:55:bb:eb:7d:
42:72:8c:bf:4e:bd:91:9a:7e:41:f9:1b:1b:15:5d:
dd:bd:04:07:03:9e:3d:00:3a:0f:2b:0e:40:c7:3f:
0b:2c:91:55:79:ad:f0:3d:21:fa:f5:50:78:a9:4a:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:6F:6B:33:28:94:05:DC:C5:FB:AC:85:E6:54:35:1A:85:15:02
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2e:fd:3e:aa:0c:75:1d:c1:fc:e1:c3:f4:bd:7d:30:87:20:
60:41:c0:e0:95:d8:9a:b3:25:c1:84:d9:2a:24:33:b2:ab:df:
3d:f7:32:06:48:e1:d6:f0:de:32:ab:ba:b9:da:40:fb:5c:81:
fb:4c:cd:25:d8:d5:aa:29:3e:ee:cf:79:26:0d:78:67:07:0f:
12:26:72:0d:2e:c3:ca:05:86:93:3b:d7:97:54:e5:32:fe:c6:
30:e5:4c:0e:88:6f:32:ce:88:ca:b5:9c:db:ea:06:93:7d:d4:
f6:9c:ee:11:d3:e5:26:28:55:71:4e:0d:8d:b7:92:cf:c1:5b:
8a:b2:5e:12:b1:b4:df:c6:fa:63:4b:4d:05:c2:97:8e:87:3a:
29:50:69:ff:70:e3:2c:5b:bf:dc:c8:3a:26:d8:49:57:3e:3e:
c0:f1:77:4f:b6:7b:4f:8f:61:93:fa:8b:31:fb:df:c5:3d:f8:
6f:a4:8d:2e:d5:29:93:35:bc:7d:ea:4b:4f:d1:8b:ab:b5:a6:
cf:4f:e1:3d:95:d2:20:f0:dc:75:7d:0a:6d:ba:22:58:5d:2a:
cd:e6:8e:21:e9:7a:21:8b:d0:ba:34:8f:bf:23:ec:0e:b4:50:
33:3a:4f:36:c0:46:15:4e:98:1b:3c:40:47:61:6c:b8:9d:a7:
2a:26:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:54 2026 by rpki-client