Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File: sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier: sqwn2K8iUqGQ7V+DNJwHJgAriWwW5OEhoHddujkiahA=
Subject key identifier: 97:69:06:DC:8E:27:C1:4B:88:A8:6C:6E:A0:68:42:FE:4B:1D:2D:0A
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer: /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial: 019E205AA00D98BD2A3C3DEA12AD543747CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number: 94
Signing time: Wed 13 May 2026 08:01:10 +0000
Manifest this update: Wed 13 May 2026 08:01:10 +0000
Manifest next update: Thu 14 May 2026 08:01:10 +0000
Files and hashes: 1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: gqZSgmzT2VsSBIn7A2FrFt/kEe6DdhgDxuDHaFHtbIQ=)
2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:a0:0d:98:bd:2a:3c:3d:ea:12:ad:54:37:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
Validity
Not Before: May 13 08:01:10 2026 GMT
Not After : May 14 08:01:10 2026 GMT
Subject: CN=976906dc8e27c14b88a86c6ea06842fe4b1d2d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:48:c5:17:c1:e5:94:07:a4:37:c7:07:71:
58:89:1b:e1:ae:e7:1a:fb:ac:98:92:87:b9:68:41:
82:30:bf:75:ec:6a:cf:86:4d:e7:12:9f:59:f4:94:
0f:c4:41:47:97:31:d6:2e:cb:0c:2a:87:84:a2:41:
0f:8a:7d:ef:f3:6b:c6:f6:28:e9:95:cd:81:75:28:
22:f8:89:bc:33:3a:63:5c:a2:04:ce:67:e2:4c:57:
0c:0b:63:57:3a:db:30:81:e7:a0:8b:33:2d:e2:5a:
eb:37:2d:cc:51:b8:bf:1e:ac:4c:f2:10:64:ab:7f:
b0:97:32:18:45:c6:8c:ac:81:14:89:b7:90:4a:4a:
75:e9:b3:77:0e:7c:3f:67:54:d9:ac:90:a4:47:93:
da:88:63:83:50:ee:e2:33:db:bd:7a:7d:7d:22:58:
be:fd:c1:f7:0e:5e:46:31:23:cb:1f:a0:1f:04:85:
16:63:a5:41:4f:4b:ea:a8:2c:17:3c:70:71:60:34:
02:7b:d7:aa:8e:4a:cc:4a:4e:1b:d9:c1:fc:04:fd:
d3:e1:35:0b:12:d3:a2:7e:58:0b:5a:88:1a:30:93:
9d:1d:3a:66:ad:6f:5e:0d:03:96:c4:c0:de:9f:79:
b8:45:62:8b:00:f2:ac:38:88:e7:30:43:14:ba:e1:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:06:DC:8E:27:C1:4B:88:A8:6C:6E:A0:68:42:FE:4B:1D:2D:0A
X509v3 Authority Key Identifier:
keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:f3:53:b3:ca:e4:94:dd:89:88:eb:cd:97:8c:86:90:b3:
83:72:c3:af:2c:dc:28:d7:c5:2d:d7:f2:82:c3:aa:c1:fe:37:
b2:9a:b0:49:36:e8:e4:40:71:ee:63:e6:ea:ae:e1:28:c0:18:
7a:59:3d:d6:bb:cf:b8:c5:8a:7f:dc:94:b9:f4:5a:29:9c:49:
16:2d:3c:28:0c:ee:68:5b:ae:b2:6d:d5:0f:3b:d6:ed:31:6a:
9b:1c:16:2b:6c:92:0d:c5:b2:ed:b5:90:bc:e9:21:fa:1c:9b:
43:4d:42:ef:f8:4f:6b:eb:88:14:42:df:6a:96:6c:c2:4c:6c:
cd:9c:48:6d:93:53:73:07:34:85:b5:25:61:e2:9d:61:89:4f:
6e:64:bf:72:2e:9b:1a:66:55:99:50:8d:06:02:1e:9e:c8:66:
a3:58:7e:b7:92:f9:cd:31:79:0f:fd:a5:49:29:5b:94:bf:2b:
05:d2:3c:78:9f:f7:69:6c:c6:53:dc:fe:ca:2d:c5:4b:35:9f:
31:85:14:7c:63:83:9b:92:ee:7a:3f:ec:fb:57:72:57:70:2a:
15:49:87:95:4e:8b:ab:2f:c4:05:e9:22:ce:c2:a1:53:b4:c4:
59:f4:2c:16:f3:95:5a:f8:fc:88:79:a0:91:dd:d5:37:16:2c:
2c:8f:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:16 2026 by rpki-client