Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: vY4FJz2LjxSpfqLXvjhp1tWpp1SxCp0NSg5ezqh9CPM=
Subject key identifier: F1:A8:BC:84:90:A8:2C:93:E0:64:2A:02:D3:AB:01:38:E9:BD:45:AA
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019CAA8FEBCB631731FAF426BEE0185E8E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1474
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: P41_d-OKREkue8A7QbG6bWS93yg.roa (hash: 4T63cKmKfkswxOAQk6ynb6AaDZKx66mFM+yXG2XkVCE=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: PofO9+skKVx/1aAaiBihD6+U6pIBUQ0h1VemBkf9Quk=)
3: Z4XnKcMRawaQSe5mqHxSQObPnf0.roa (hash: 4Mf7OgITGWZNLNJ26SsOplCcXWIE2LHFBqgYKYBiyDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:eb:cb:63:17:31:fa:f4:26:be:e0:18:5e:8e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=f1a8bc8490a82c93e0642a02d3ab0138e9bd45aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:2a:8d:8c:5f:09:08:10:74:4d:1f:36:e1:
f3:98:46:3f:27:7e:89:70:ae:ed:3b:8b:dd:f1:74:
a5:9d:9b:51:1b:6e:a5:da:06:01:55:e2:c9:43:1e:
a2:44:04:af:c9:3b:b8:08:40:c3:e6:4c:67:cb:27:
b6:79:cb:fb:2a:e0:80:2d:6f:e7:63:84:22:76:09:
33:d7:26:44:28:89:91:dd:b6:74:c0:65:12:63:b8:
89:b3:bb:bc:3c:ee:11:90:0a:cf:22:4c:76:9e:5a:
03:a4:e9:62:9e:97:7e:d1:1a:f8:57:8b:b5:1a:af:
65:1b:0a:aa:1a:d9:0f:d6:9e:6f:75:3d:c4:9c:84:
8b:e4:a9:bd:da:03:77:30:ce:bd:0f:d2:08:92:2a:
17:ba:2d:35:a0:87:96:eb:5b:98:8d:69:bb:73:44:
46:e4:41:60:9d:39:35:19:7b:a5:76:08:bf:b0:b6:
6f:07:82:86:10:c9:a9:a8:88:37:2b:7d:bd:cd:1b:
f4:70:3f:97:ca:43:31:78:67:ef:99:ab:53:39:c1:
c3:3c:9d:52:42:51:34:05:11:b1:7c:c7:50:a6:58:
32:a1:2a:16:84:a9:a8:cb:e8:91:7b:2a:ea:d9:a6:
58:42:96:da:9a:24:de:19:85:df:40:8c:5a:03:6a:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:BC:84:90:A8:2C:93:E0:64:2A:02:D3:AB:01:38:E9:BD:45:AA
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:2b:be:3d:68:67:4a:07:67:80:24:43:8f:54:8d:1f:3c:
06:d3:17:cd:3a:e7:4f:df:07:13:80:4b:8d:9e:49:a8:9d:83:
4c:1d:d1:b9:9b:50:e9:7e:ff:be:45:52:1b:86:6e:fa:16:61:
e4:b6:be:1e:e7:0a:5c:0e:e6:f4:33:f8:38:80:a1:be:21:44:
81:98:3a:1e:61:ef:bd:e4:c7:15:90:d7:6c:06:25:73:0a:a5:
3d:19:3b:cf:b0:56:68:49:05:ce:cf:8d:d6:cd:f6:3a:51:af:
9b:fb:58:58:e4:74:40:18:b7:1c:0a:3d:5c:7c:ff:75:d1:dc:
42:3e:a7:a4:ce:ce:8c:75:22:d8:32:1b:1d:01:db:45:6b:97:
00:28:ac:cb:8f:e4:f1:23:aa:cc:ab:d1:e4:ad:1d:ff:a2:77:
ed:e6:ff:68:ca:bd:63:48:45:72:bb:de:28:67:03:4e:6e:99:
ff:65:15:bc:fd:1a:07:fd:dc:5f:c0:fa:c1:81:5c:99:e6:24:
21:57:d9:89:17:ef:e3:79:3e:82:9a:67:97:1f:f4:14:71:03:
89:d8:57:e0:80:06:02:1c:f9:4f:84:18:99:26:87:02:f6:09:
78:0f:a2:c4:dc:e8:1c:f8:ea:4a:fa:f9:7a:f5:3d:b3:8e:0c:
e9:fe:b4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:56 2026 by rpki-client