Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File: sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier: Je8B7r/ptP5UDAiZEe7gBJYvgx+gtvMIn+EFZVhUEeQ=
Subject key identifier: F6:72:65:CF:61:A4:73:C4:84:72:77:2E:15:C5:18:A3:7B:EA:E5:9A
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer: /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial: 01A0E8F72420A99E89985913CEAC9DF1B7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number: 0205
Signing time: Mon 28 Sep 2026 17:01:45 +0000
Manifest this update: Mon 28 Sep 2026 17:01:45 +0000
Manifest next update: Tue 29 Sep 2026 17:01:45 +0000
Files and hashes: 1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: 8hkJzkpT6Ou/HYdxpiFpROMVuprjKoCJ+IXg/VICOH8=)
2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f7:24:20:a9:9e:89:98:59:13:ce:ac:9d:f1:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
Validity
Not Before: Sep 28 17:01:45 2026 GMT
Not After : Sep 29 17:01:45 2026 GMT
Subject: CN=f67265cf61a473c48472772e15c518a37beae59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:51:7b:36:2f:68:c3:d7:ca:b6:50:4f:0d:
4d:56:07:c6:69:49:f7:18:1c:5d:a8:e3:fd:cb:93:
9a:d6:c0:55:22:67:1b:64:5f:38:53:6f:ca:80:b4:
98:7b:37:1b:c8:38:93:1c:66:b7:14:37:da:2b:7a:
78:e2:db:89:ef:4d:a7:83:3d:f1:ea:13:84:3b:bb:
2d:eb:55:d0:43:13:5c:57:70:5b:e8:86:d6:4b:61:
74:f9:05:b3:37:0e:5b:e0:0c:e9:53:c6:c7:c8:1a:
63:36:81:10:ef:c8:05:ba:6c:65:a7:90:1d:63:f8:
ee:be:df:a7:09:4c:9c:11:9a:8b:88:aa:54:e4:01:
21:6d:23:c0:6e:a0:ce:db:4a:8f:c3:71:af:4f:84:
05:78:05:29:25:b9:d9:5c:e0:89:63:62:e8:f9:c8:
c5:19:c9:bb:86:35:76:44:cb:f1:03:b4:1f:9c:8b:
8e:19:52:f8:5b:23:60:26:3f:f5:78:f3:ee:6c:3a:
61:91:88:b7:11:dd:03:6a:46:a1:d6:ab:f8:00:8b:
a8:c4:2c:61:c5:33:48:2a:82:3d:d7:d0:92:cf:3e:
6c:2e:15:01:2d:23:c2:98:49:0c:34:b5:29:63:e0:
fb:f5:40:45:f2:90:00:4c:b3:b9:82:0a:32:5d:f8:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:65:CF:61:A4:73:C4:84:72:77:2E:15:C5:18:A3:7B:EA:E5:9A
X509v3 Authority Key Identifier:
keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:07:60:65:79:1f:7e:eb:35:d9:bb:2e:36:ac:ef:f5:47:1c:
2d:a8:64:1c:d4:a0:5e:2d:d5:79:68:61:a6:17:c6:01:2a:52:
d8:34:0d:4f:10:bc:a4:ee:d4:e4:86:db:01:13:9e:42:22:c9:
b6:a6:ba:a5:87:fd:78:a9:7d:55:6d:de:b5:76:11:c5:d3:8f:
c0:0b:46:fb:72:53:22:70:3a:70:07:cc:f6:b7:3b:84:5c:aa:
c8:13:3d:e1:5e:4e:10:5e:01:3c:a5:4a:48:5b:83:c3:f2:32:
64:50:99:7c:19:61:16:d4:60:5c:0e:9d:c2:73:67:8b:41:8d:
8d:e7:b3:34:a0:50:34:b7:04:7f:04:ec:46:bb:3a:f6:22:81:
cc:03:66:cd:79:fd:cb:33:6a:bc:ed:01:77:bd:e1:e3:c8:b6:
a1:0f:32:31:8a:04:2c:0a:ef:77:50:65:ee:37:e1:28:56:a1:
c3:a6:25:8e:c1:65:7e:22:fb:5e:d3:56:5d:12:ac:31:c0:a8:
14:7c:59:ee:4c:8d:4f:26:0a:06:fb:77:b0:25:92:89:6e:5f:
af:9a:45:52:9c:f2:f2:64:4b:e3:7b:6d:80:bc:66:6d:8a:00:
f2:b9:22:f3:6e:92:2b:07:2f:b4:d7:86:10:c1:1c:2c:81:1e:
57:fd:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:08:44 2026 by rpki-client