Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: gjsEDVrzVr3rTa20zN8BSpX3VD4ZTo8udlkZf+Ey43Q=
Subject key identifier: 4E:6A:6D:8D:F1:01:ED:80:C6:C4:63:B1:CA:41:93:82:4F:60:A7:11
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019FAB63B0FBEA4B4412A7DE714BABADD7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 0174
Signing time: Wed 29 Jul 2026 01:01:04 +0000
Manifest this update: Wed 29 Jul 2026 01:01:04 +0000
Manifest next update: Thu 30 Jul 2026 01:01:04 +0000
Files and hashes: 1: 1h7bS52T8p0Qo0xIK6GUocpO5fY.roa (hash: 9RKPt8LzkVQ+IULuF/1Rfms3vMWB7oi0nwO0y4XGgFo=)
2: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: P/6nPhtq3U4Dw1NWnmt7Lbsgo41FNECKR8nUzsjc0dM=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:b0:fb:ea:4b:44:12:a7:de:71:4b:ab:ad:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Jul 29 01:01:04 2026 GMT
Not After : Jul 30 01:01:04 2026 GMT
Subject: CN=4e6a6d8df101ed80c6c463b1ca4193824f60a711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:5a:91:2d:85:30:d1:f6:b9:f9:dc:d0:a8:
ec:6c:30:d6:9f:7d:a2:ea:5d:e8:2f:1e:a5:89:ec:
e4:5f:1a:41:6b:18:b4:86:8f:09:2e:e8:70:91:4e:
a7:53:f3:3d:ee:d7:28:aa:f0:51:98:2e:89:bd:34:
6f:ab:0f:fd:50:fb:40:40:c4:47:fd:e9:7c:69:d7:
fc:4d:23:b1:e8:3a:17:71:5f:d4:b3:21:c0:e6:51:
65:6e:70:eb:61:34:a3:94:59:36:0b:3b:4f:e8:01:
32:e1:6c:c4:7b:63:7c:0d:bd:df:43:7e:07:ab:ec:
1b:07:ed:61:4b:2f:98:78:07:9b:2a:34:87:ed:8f:
e4:5b:fa:cb:fd:17:f0:8e:e6:79:41:ab:98:da:fd:
d1:99:be:3b:3f:49:3a:bd:87:64:4d:29:aa:3e:4d:
2a:d3:74:b9:f9:ac:11:96:a3:8a:2c:d2:66:fd:c2:
f9:fe:bd:0e:ff:56:cc:f3:82:7c:45:5b:b8:13:bf:
af:2e:ad:35:04:66:30:cb:50:01:71:2c:73:f8:f7:
56:4d:de:6a:61:5d:53:9f:fb:b6:2e:eb:e9:db:ac:
d3:41:d9:a8:3a:09:b5:17:ae:08:cc:cb:b5:b9:9a:
ed:00:99:4e:08:77:76:48:c7:f4:a5:93:bd:21:b0:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:6D:8D:F1:01:ED:80:C6:C4:63:B1:CA:41:93:82:4F:60:A7:11
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a8:70:a8:55:b8:b7:60:b1:77:76:7a:af:f3:98:6d:03:50:
81:c7:0e:40:52:01:9a:6d:21:f3:f5:61:c1:e1:36:c7:9e:12:
ab:fc:e0:aa:d3:ad:d2:26:47:9c:71:de:af:74:6a:cb:61:fb:
02:ce:24:e3:3f:b4:1e:d8:17:35:64:cc:ee:85:bb:89:15:4e:
a1:44:83:32:c6:75:d7:22:42:02:57:09:3b:ba:5c:70:43:c8:
a6:8b:dd:04:3f:69:2a:0d:aa:d4:95:b4:22:c9:59:a9:10:d2:
7e:26:6d:0b:5d:68:13:36:ad:fb:a4:64:82:82:62:e4:a0:fc:
35:2e:2d:cf:cf:b1:09:4d:4c:c6:97:fc:6d:d4:63:12:23:60:
01:1d:a1:e0:ee:af:1e:c6:5a:db:d8:f9:81:64:69:a7:12:1a:
5a:db:37:20:42:a3:37:35:19:78:07:9b:42:22:8c:0b:0c:f8:
bd:98:2b:a7:de:0f:00:8e:17:b2:a4:79:c8:b0:58:2a:f3:a6:
fa:62:81:c1:fe:55:b7:d8:5e:20:05:b0:7c:70:00:88:63:a8:
b1:49:af:fb:52:dc:11:13:c3:ab:ca:dc:d7:11:77:07:b8:1d:
9b:f4:3b:7a:4d:11:89:a0:d7:9a:15:dc:d3:0c:5a:20:f0:9e:
ba:d8:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:05 2026 by rpki-client