Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: nBbbQ/NJ3MizcEVyJB/lk/068lxsnhcFYew96I0yk0E=
Subject key identifier: A0:E3:53:F6:FB:DB:6C:4E:F8:36:9A:D6:51:88:5B:D7:AB:8B:AD:F0
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019EC036AD13020F66EEB9C9B7F2CEAC52A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: FA
Signing time: Sat 13 Jun 2026 09:01:09 +0000
Manifest this update: Sat 13 Jun 2026 09:01:09 +0000
Manifest next update: Sun 14 Jun 2026 09:01:09 +0000
Files and hashes: 1: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: PPSYQJgahVrxArTKNgrpwcKCLCiIoCcGmfkTuEJGQfA=)
2: l_OtXNVrTIJOg1BB7RzWG8ARoM4.roa (hash: Mw4PK7cmibSwEXPETc3oNPZi0T+bvVwJzq8QuAMIqGc=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:ad:13:02:0f:66:ee:b9:c9:b7:f2:ce:ac:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Jun 13 09:01:09 2026 GMT
Not After : Jun 14 09:01:09 2026 GMT
Subject: CN=a0e353f6fbdb6c4ef8369ad651885bd7ab8badf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:51:00:6f:db:a6:79:70:57:0a:e9:10:13:
5f:f2:a8:0d:dc:73:70:2a:d6:7e:89:68:08:7d:28:
d3:a4:86:13:f3:02:2d:cb:f3:33:b5:8c:77:db:75:
3d:6c:b1:3a:f4:01:09:2d:5e:7c:6b:15:39:9e:87:
d8:c6:60:db:f1:9e:02:b0:bd:5b:c5:d0:71:1d:02:
19:c3:e6:e5:5c:cf:da:cd:c9:6c:eb:c7:fe:f6:31:
69:85:f6:85:c5:ff:e5:b4:2a:02:45:63:40:fc:7b:
0a:c9:13:7c:7e:bb:84:ee:1b:00:fa:b0:c4:c6:1f:
4f:f5:09:7c:e3:9d:27:89:29:cd:7c:9f:98:61:e9:
33:ef:7d:dc:af:95:1d:67:57:ae:b9:78:79:d6:e6:
61:89:c6:cb:35:cd:cc:3e:53:63:b4:c1:33:e0:4a:
ad:8a:01:88:83:06:ec:97:d8:82:6a:57:ef:a9:1e:
c2:c1:0b:26:d9:0a:1b:dd:75:ab:84:74:68:37:69:
7b:37:5a:ad:0c:9b:b1:ce:57:3f:bc:33:85:70:4c:
23:3a:38:7b:57:ac:42:92:8f:5d:9d:45:1d:e2:a8:
df:49:58:dc:dd:fa:e3:30:3a:e7:7f:10:9f:aa:51:
3c:72:ca:34:7c:a6:4e:f9:4a:37:25:cf:2b:15:45:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E3:53:F6:FB:DB:6C:4E:F8:36:9A:D6:51:88:5B:D7:AB:8B:AD:F0
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a3:bf:37:68:bb:09:af:9e:29:b4:0e:04:b0:f9:1d:c1:4b:
d1:dc:f3:8f:2d:0d:27:09:a5:a4:d4:49:53:c6:e5:ca:f5:05:
06:e5:ea:24:f6:9f:f9:29:47:fc:00:1c:b3:1a:d6:10:30:7e:
8f:10:0f:0f:ee:df:67:61:3e:1f:8f:9b:0a:4d:20:5f:99:17:
45:62:7c:ba:6c:ce:31:5e:5a:ad:f4:4d:0c:98:56:b6:51:c9:
fa:a6:82:3a:7d:c2:71:f8:6e:79:24:b9:de:39:ac:1d:35:85:
47:9a:99:e1:b1:de:61:c2:30:d4:e6:37:59:57:65:fe:ac:43:
e5:dc:ff:12:fa:86:2d:69:ab:fc:61:c5:07:d8:ad:07:1a:de:
36:4a:00:8a:46:3e:a7:35:21:25:9b:77:4d:18:7e:b6:a4:c0:
97:31:97:c7:2d:d5:46:36:d5:c2:bf:43:1e:d4:8e:92:62:9f:
58:54:48:be:64:be:86:d4:2d:43:cb:ab:94:1d:52:27:8f:6a:
02:c1:6e:78:24:9d:83:7b:43:a9:67:78:81:4d:0e:a3:72:f6:
15:79:a7:24:28:46:81:65:d7:30:5c:98:16:62:ed:e9:be:31:
60:77:fb:09:51:70:76:2a:8b:f0:1f:cd:b9:d4:f4:9c:46:25:
6f:03:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:53 2026 by rpki-client