Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File: sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier: zLkT8CtVul2kPF/E3J5Edrr7co9kh4MgtVR//umyLPs=
Subject key identifier: 47:06:28:28:7B:A9:3B:88:6E:72:89:F1:CE:0B:D9:54:5F:95:1C:3D
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer: /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial: 019D32D0836545926EEA5D02B75D533A8C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number: 19
Signing time: Sat 28 Mar 2026 05:00:19 +0000
Manifest this update: Sat 28 Mar 2026 05:00:19 +0000
Manifest next update: Sun 29 Mar 2026 05:00:19 +0000
Files and hashes: 1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: BD77sEN137p//yDn58tJ2xW+TUexRTTHXrHW3gEbUfs=)
2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:83:65:45:92:6e:ea:5d:02:b7:5d:53:3a:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
Validity
Not Before: Mar 28 05:00:19 2026 GMT
Not After : Mar 29 05:00:19 2026 GMT
Subject: CN=470628287ba93b886e7289f1ce0bd9545f951c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:9d:3b:d0:b3:cc:89:5a:b5:4e:2e:eb:78:
42:53:09:e9:30:31:68:91:51:a3:b7:7a:0f:fb:e9:
9c:1d:7b:bb:ec:12:6c:95:03:b7:d7:75:a3:12:d2:
1f:4e:dc:69:d7:2e:10:d5:fc:1d:da:16:97:12:1d:
31:26:ed:4d:55:50:4b:99:20:2d:c0:c1:7f:cd:9f:
19:f7:ce:73:2d:d9:6b:a7:ea:6b:d7:a4:9c:23:aa:
b7:ab:40:39:f4:7a:43:11:c9:68:75:23:30:0a:8a:
d7:9e:9a:3c:d0:72:df:e7:30:cc:b4:ee:4e:3e:ea:
3b:a0:26:78:fb:eb:2d:1c:cf:bd:89:62:46:bf:e0:
06:77:3f:a3:51:0b:f7:98:5b:3e:04:17:04:45:b4:
b9:b7:7c:f0:ef:26:ca:f7:89:09:e4:f4:15:84:2c:
d5:b6:5d:96:44:c9:5f:87:2e:c2:7e:aa:52:7a:ae:
f5:90:1e:6f:36:95:02:04:e7:ed:ad:4f:c1:65:59:
15:9b:51:de:1f:de:c1:d2:4b:0b:fe:25:bb:ba:58:
67:40:38:82:bc:b4:e2:5d:02:0d:68:cc:1a:cf:54:
35:c7:73:33:84:22:5e:1b:86:61:4b:3a:69:e6:9f:
6f:8a:8f:cf:db:54:d2:1b:2c:f2:f4:b9:0b:c5:0d:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:28:28:7B:A9:3B:88:6E:72:89:F1:CE:0B:D9:54:5F:95:1C:3D
X509v3 Authority Key Identifier:
keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4e:9e:61:e8:86:08:25:71:7f:60:cd:e6:2f:d7:8d:01:95:
9c:1f:ad:ce:1d:b5:c8:cb:a8:4d:65:ab:44:13:92:6a:98:70:
6b:c1:fc:42:7f:23:bd:3c:bc:bb:8f:28:42:9e:1a:b6:d1:a6:
64:ee:f7:4b:21:da:65:4a:21:16:91:31:72:74:ac:56:da:70:
7b:3f:4b:88:55:df:66:54:df:2d:aa:9f:83:ac:62:ed:28:54:
1d:e0:e3:a9:71:10:c1:70:7c:8f:85:43:2d:c4:14:4a:9a:9b:
89:36:7b:99:19:1f:f5:e6:22:a4:13:0c:3c:ae:b1:e4:e6:96:
59:2f:d4:ef:76:6b:22:62:fc:13:37:a8:a8:1a:b9:66:57:99:
5c:e7:86:25:b8:59:27:aa:b3:d4:bb:e2:c7:12:71:7a:72:b5:
08:89:3c:57:de:14:42:7e:fd:a5:03:df:8b:df:92:95:76:80:
4d:2d:f3:64:b6:00:39:a7:26:9d:d1:15:77:61:ef:a2:59:68:
60:a2:e6:e7:69:c5:30:23:db:1b:f8:13:9b:d8:f8:44:b3:4a:
41:e5:65:f0:c8:2d:83:3c:e1:57:29:58:04:4a:4e:40:f5:68:
64:61:87:83:85:5f:47:ea:65:47:b0:51:b2:00:d1:cb:a9:2c:
ed:fb:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:06:02 2026 by rpki-client