Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File: sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier: 73XzYRqC5IY+1R0QiMTg/U8trRjqUTGYhoY6v/h6urE=
Subject key identifier: D8:BC:A0:71:F9:23:76:9C:AF:58:50:C5:E1:BA:14:67:52:91:29:F5
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer: /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial: 019FFB6C9FC95A56C205F1761D6E8550DBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number: 018A
Signing time: Thu 13 Aug 2026 14:00:27 +0000
Manifest this update: Thu 13 Aug 2026 14:00:27 +0000
Manifest next update: Fri 14 Aug 2026 14:00:27 +0000
Files and hashes: 1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: 3Mt8craGrOF9+c1GXQUpS8lo509PPg88OX9Rvgyt8OM=)
2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:6c:9f:c9:5a:56:c2:05:f1:76:1d:6e:85:50:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
Validity
Not Before: Aug 13 14:00:27 2026 GMT
Not After : Aug 14 14:00:27 2026 GMT
Subject: CN=d8bca071f923769caf5850c5e1ba1467529129f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:eb:3f:88:d5:14:45:0f:c1:b3:36:49:2d:
0a:17:98:a5:40:61:c5:e7:96:6d:e7:ba:52:aa:8d:
1a:df:c6:ce:d1:73:cc:1f:62:f1:24:5b:d1:1b:a4:
8a:1b:5f:08:e4:f2:7a:9e:da:8a:8b:8f:85:56:58:
65:95:26:81:6f:c1:b4:21:59:ea:48:a5:43:ed:68:
6c:89:7b:6b:6d:92:ae:a9:63:ce:82:75:dd:ea:a8:
61:bb:8d:b5:ca:61:d3:9d:84:a6:6b:2c:b5:d6:7b:
d1:87:f6:b1:5b:20:cc:13:e9:9d:b6:f2:58:52:22:
26:19:2c:44:f6:ea:b5:46:c1:37:e7:a0:6f:c0:5f:
5b:d0:ee:73:71:d2:d7:6e:3f:be:0e:6f:c1:da:eb:
2f:d6:d6:05:31:5a:62:66:5a:e7:dd:de:85:e4:8a:
68:f7:77:f3:1a:df:30:95:cb:8d:ba:88:51:ba:17:
ed:28:77:ed:e4:c5:59:c8:5b:62:98:38:60:80:83:
38:b0:e7:33:60:6b:ae:fb:09:3b:ce:46:ac:74:7d:
02:9a:9f:df:be:b8:0f:60:10:90:47:53:6c:14:3a:
73:89:bb:49:30:42:3e:cf:a0:a0:15:02:c7:99:e3:
44:df:39:b4:27:2a:d0:38:95:17:de:4e:3d:5e:c7:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:A0:71:F9:23:76:9C:AF:58:50:C5:E1:BA:14:67:52:91:29:F5
X509v3 Authority Key Identifier:
keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:70:f4:27:3c:36:a6:d3:d2:ca:25:90:f2:fb:70:94:d5:af:
ba:a0:88:c7:74:dc:d7:7f:c6:b7:2f:d3:b1:c4:97:30:d3:9c:
d6:6d:fc:20:e6:91:98:24:a8:ce:fb:69:87:b9:60:e9:5e:c7:
04:c1:16:97:36:c6:6a:5b:bc:54:f3:72:24:fa:36:a9:a8:69:
92:ae:e8:f4:07:b3:d7:12:05:24:a4:68:20:4c:83:f0:35:f2:
d7:71:21:9d:e5:66:bd:7b:22:47:a7:f2:60:4b:16:5b:22:e4:
af:8c:2a:79:40:1f:8f:55:39:32:39:11:2d:a1:bd:10:65:c3:
dc:29:13:54:25:f4:d9:a8:ac:ba:98:e0:d2:fb:50:ae:56:fc:
55:a3:d3:87:1c:7e:62:6b:9d:84:b6:65:b4:d8:9e:cd:e7:8d:
e7:8a:9c:84:ad:0e:8e:cc:80:c2:ed:28:ee:2f:22:cb:44:5a:
87:3a:4c:ee:e6:2e:f8:82:5b:8f:e6:2e:28:b1:48:b0:f2:30:
0a:87:e6:56:1c:b0:18:cf:be:d1:c5:fa:b3:c2:fa:cc:13:94:
3f:e1:25:6d:f7:f7:42:0c:ab:4c:80:86:b6:b7:fd:3e:3b:ab:
ad:16:d7:a3:d1:bd:a7:1b:3e:17:9a:52:01:7f:fc:a6:58:57:
fc:b0:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:52:58 2026 by rpki-client