Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: DTjLUqdavf1P/kqpnKK3aDyllGkKTJ5RkSiDHb2jW9A=
Subject key identifier: FA:C9:83:4C:61:D7:B8:17:10:EE:C7:EE:2D:DB:28:4E:11:70:59:C8
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 01A0DE05A2EC6FD7C1B71DB8C2A9014D6B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 16A1
Signing time: Sat 26 Sep 2026 14:01:46 +0000
Manifest this update: Sat 26 Sep 2026 14:01:46 +0000
Manifest next update: Sun 27 Sep 2026 14:01:46 +0000
Files and hashes: 1: 4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa (hash: T60YUCp6XTKgr3SfsDRJKBujmomI7/iUNH3bODa8p0c=)
2: Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa (hash: zD+GBHRWoLsSq0/1ni1tpgoZb/jI0/bGpFBuF1k1Rz4=)
3: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: hBXM9O9EoYWa0qvFXsSPH+IHsMWsoGfH6RDkAP/P0/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:a2:ec:6f:d7:c1:b7:1d:b8:c2:a9:01:4d:6b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Sep 26 14:01:46 2026 GMT
Not After : Sep 27 14:01:46 2026 GMT
Subject: CN=fac9834c61d7b81710eec7ee2ddb284e117059c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:19:c6:f6:35:45:51:37:47:8e:bf:33:d0:
f1:8b:3d:ec:c1:f6:e1:1c:a9:05:2b:0a:bd:0e:15:
ee:db:66:59:2a:d1:49:88:0f:4b:b6:29:aa:8c:a8:
a0:50:66:6c:9c:89:40:4e:64:0c:16:b6:f4:f1:71:
51:48:69:4a:b0:77:22:f6:7d:36:9c:be:e1:f4:8b:
91:ef:8c:06:59:f0:8b:ba:01:4f:31:1d:75:aa:a4:
de:cc:8a:ff:70:37:fc:bc:f8:3c:9e:63:b1:3c:e0:
ca:a1:5d:2d:41:4d:37:31:83:07:3e:24:48:f6:e9:
72:5b:97:62:ca:53:9a:b9:e1:aa:a4:20:91:f0:0c:
48:46:74:ae:54:95:13:95:fc:b1:51:0f:76:a1:65:
14:e3:aa:8b:05:72:a3:8b:b5:40:96:e1:73:bb:d8:
2a:03:c8:6c:ee:c5:dc:18:f3:f2:8f:4c:ca:f5:27:
ea:58:39:d1:4c:bd:a0:4e:18:9b:ec:b6:b9:c4:a7:
67:36:6b:72:33:61:51:bc:62:cb:91:e4:b4:c0:e0:
7c:ca:57:8a:39:33:ad:1d:28:ee:1b:98:09:9f:58:
f4:9c:49:10:5b:88:2c:b0:44:d3:23:7d:45:59:15:
3a:34:34:fc:55:a8:00:03:dc:42:13:38:35:72:4c:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:83:4C:61:D7:B8:17:10:EE:C7:EE:2D:DB:28:4E:11:70:59:C8
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:41:f0:56:34:cf:4c:99:2d:9c:44:21:1f:98:4c:29:7b:c5:
de:85:e1:74:97:db:39:5a:c8:27:48:c9:28:58:65:e2:cc:9c:
13:c6:14:f2:2f:30:4d:33:10:e1:20:f3:3c:10:cb:0d:da:b3:
97:d8:a2:68:18:e1:a2:87:af:f9:b7:c5:a8:9b:5b:8e:68:24:
0c:f9:c3:2a:18:68:46:e0:3b:05:84:8e:83:15:66:52:50:cd:
fa:a4:25:04:91:78:b9:10:05:7e:48:a8:21:6a:3a:c8:db:7d:
86:8e:ba:21:d0:7f:2a:c4:8f:04:e5:ab:67:b3:c3:4c:05:71:
16:87:00:90:cc:75:fc:e7:e4:c4:bb:67:97:49:ce:15:6a:c7:
63:22:02:8b:db:ef:1a:43:fe:6b:1d:0a:80:f5:aa:b5:3e:9b:
2f:35:ed:56:ad:15:d0:1c:3a:a7:8d:8b:50:be:99:38:75:80:
1d:45:88:f8:8f:59:0b:a7:af:26:58:30:fd:41:49:7c:df:cb:
18:91:0c:90:be:e7:4e:a7:d2:db:21:a4:fb:e6:a1:c2:c2:05:
d4:69:f8:a4:9a:80:41:16:8a:4f:c3:e7:52:c7:a5:fa:14:4a:
37:81:e7:98:ff:07:10:43:78:d4:29:b1:47:c5:f3:e7:77:f9:
88:75:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:12:09 2026 by rpki-client