Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: 2c9h9a88S4aNEVGoXNyFVB90o2VeCBh82+P6nFlpZSw=
Subject key identifier: 95:05:9F:21:6B:A7:6C:70:3C:E6:AE:0D:9C:17:DA:29:FB:73:7E:6B
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 019D37F76B5C67DFC8C031E118501ECEFF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 15CC
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: Bu5UINnUlG/lug4USa9p0CTRRrR1YEyMGi0AzQTNWAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6b:5c:67:df:c8:c0:31:e1:18:50:1e:ce:ff:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=95059f216ba76c703ce6ae0d9c17da29fb737e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:af:1e:9f:46:3d:f8:e2:72:11:42:c0:45:
9e:0a:4d:cf:a3:12:a9:77:d0:0b:08:74:b2:4e:51:
71:87:28:ef:b7:88:d2:53:75:13:aa:af:49:2c:5a:
20:55:0e:0c:8b:19:83:e0:27:79:91:1f:5b:61:93:
bc:32:83:9d:3b:83:3c:f0:9a:50:88:01:96:fc:36:
58:99:64:ce:d0:6e:d3:74:5b:5c:89:90:03:ce:26:
e8:0a:cb:b1:f5:30:9d:c0:d6:dd:45:ae:5a:97:61:
4b:50:a9:50:17:10:67:fe:27:84:21:84:37:93:7c:
e4:a2:8f:34:56:1f:48:cd:6a:87:9e:5d:c1:75:f1:
20:f9:2b:03:15:2d:b2:f7:39:51:05:29:f0:dd:52:
a5:6d:68:0c:0a:d3:00:99:77:f9:d2:45:05:e8:eb:
0c:23:c8:33:b9:21:50:02:fe:db:73:fa:75:0c:2b:
a5:bc:7e:59:3c:79:ca:0c:56:be:8f:94:51:d8:11:
cf:d0:31:a0:f6:de:a7:49:91:29:b8:3d:bc:74:bb:
a8:9a:2e:8f:a9:6e:8b:ef:c7:57:e4:25:63:0c:89:
01:1f:94:db:14:3f:2f:23:9a:6c:08:2c:86:70:4d:
af:e2:30:31:49:a2:ba:b1:de:df:ca:a3:7c:94:20:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:9F:21:6B:A7:6C:70:3C:E6:AE:0D:9C:17:DA:29:FB:73:7E:6B
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:96:0c:1b:e8:2a:4a:b6:5c:32:eb:13:74:34:20:bd:4b:31:
2d:66:5a:ac:14:63:ac:03:4e:5f:49:03:07:e6:31:1a:71:84:
e0:e3:85:b2:4d:82:ef:0a:0e:ec:02:70:cc:8c:93:5f:59:d6:
3a:d6:3f:4d:cb:0a:6b:32:b3:1e:89:ea:a9:2e:f6:9e:07:b2:
00:79:43:fa:00:79:da:38:75:bb:f9:48:7e:c3:db:35:0d:e2:
66:0d:4e:bf:47:6d:0d:be:54:7f:0b:a1:cf:06:de:33:3f:07:
ed:c1:96:3a:68:6e:4f:ad:36:aa:6f:a7:7d:93:bb:c9:eb:46:
7d:70:3d:bc:c2:fb:b7:2c:35:e0:b6:c6:b5:70:4f:57:b3:43:
95:d8:1b:fa:f3:67:d5:87:de:0f:6d:e2:b5:b8:8a:77:4a:6a:
73:9c:a0:f3:b7:c2:5b:37:7a:eb:ef:af:03:db:d0:5e:2a:d5:
ce:15:13:4b:f7:14:66:cc:f1:7d:2a:f6:1c:1c:4c:df:89:47:
f3:54:5b:81:9a:f1:1a:d2:11:53:6f:4c:40:48:a9:9c:73:12:
bb:d7:d0:9c:53:45:6f:76:65:30:db:30:90:3e:01:cf:68:f2:
9d:67:7e:d1:5c:29:5c:78:c4:9f:64:5f:3f:79:1b:13:d0:2e:
39:9c:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:39 2026 by rpki-client