Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
File: sWpN-xkGscZ6u1SnCnbMkutIYn0.mft (raw, json)
Hash identifier: MsRCpeyJhm8WCK6aLllsAedFH2YYldJ2gBSDAmb16kQ=
Subject key identifier: 3A:31:EF:75:CE:58:D5:D1:66:AF:47:F1:2A:5E:E9:65:0E:93:70:D0
Authority key identifier: B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
Certificate issuer: /CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Certificate serial: 019FA44E408E2C2A575E53CAE2665A0E1F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
Manifest number: 0173
Signing time: Mon 27 Jul 2026 16:00:19 +0000
Manifest this update: Mon 27 Jul 2026 16:00:19 +0000
Manifest next update: Tue 28 Jul 2026 16:00:19 +0000
Files and hashes: 1: IZwnZzRSW9CWWDf4DhjKDHRJ7wg.roa (hash: 7+eI0t0v9gnlOSaSNccy+qkb/ocukTrfW/YihjIV1EY=)
2: sWpN-xkGscZ6u1SnCnbMkutIYn0.crl (hash: 59pTKsctpMsPA17ydyTdpqqBtFCiYOltrDoItS6JdzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:40:8e:2c:2a:57:5e:53:ca:e2:66:5a:0e:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16a4dfb1906b1c67abb54a70a76cc92eb48627d
Validity
Not Before: Jul 27 16:00:19 2026 GMT
Not After : Jul 28 16:00:19 2026 GMT
Subject: CN=3a31ef75ce58d5d166af47f12a5ee9650e9370d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:a5:5b:71:d7:f5:9c:2a:79:81:54:3f:62:
a0:67:a4:03:be:aa:22:1c:7e:87:41:63:9a:88:62:
a4:79:15:fa:b6:be:4d:e5:b5:8c:27:49:fa:b6:58:
d5:59:fc:a0:50:5f:80:ee:23:a7:c6:88:a0:23:1d:
ff:74:af:b8:d5:9f:9f:78:f6:04:62:0d:db:b8:8b:
af:00:ef:a8:33:c1:4f:75:4b:6c:58:bd:bc:46:e7:
a4:a1:74:f5:53:ba:b6:84:46:6d:76:dc:5f:6f:6f:
f5:6d:f3:fb:7e:76:20:6f:7c:45:af:ef:79:80:64:
54:08:fb:6b:34:0a:a9:8a:54:2c:db:02:21:a7:bb:
d2:d0:c0:42:94:9d:bf:b0:77:6b:82:2b:26:02:72:
f5:c8:00:3c:55:51:4d:95:7b:b1:37:b5:24:2e:38:
cc:54:3a:b0:24:1f:7e:df:6d:fb:6b:93:dc:79:f4:
bc:2b:9d:15:f3:07:7b:a7:5b:75:c6:bd:ba:7a:60:
92:b5:8f:6a:de:d1:8c:18:e6:09:9f:4f:cb:c6:97:
35:7a:ee:f4:d4:40:3c:27:68:3b:b1:13:0b:65:5e:
ec:90:d7:2d:b5:19:ef:c2:43:07:b9:2c:89:90:42:
d3:ce:20:13:ca:37:63:7e:29:52:27:ad:b6:96:ba:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:EF:75:CE:58:D5:D1:66:AF:47:F1:2A:5E:E9:65:0E:93:70:D0
X509v3 Authority Key Identifier:
keyid:B1:6A:4D:FB:19:06:B1:C6:7A:BB:54:A7:0A:76:CC:92:EB:48:62:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWpN-xkGscZ6u1SnCnbMkutIYn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/506ca9-f6c7-456e-857e-bc3c5a3ce13d/1/sWpN-xkGscZ6u1SnCnbMkutIYn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fe:9e:f6:1c:79:32:19:0e:0d:5e:c4:08:85:06:ab:dd:cf:
cc:7d:6b:8c:25:51:00:95:14:a4:7e:d1:e1:e6:42:82:ba:3f:
27:4e:9b:1f:f4:b4:ed:65:68:26:da:41:86:1a:e7:0b:5b:fe:
d0:19:7e:10:f6:21:7f:be:1a:4d:6c:4e:ab:61:ca:fd:75:e8:
ba:f7:38:9d:0c:bd:6b:ab:db:a5:0d:59:42:7f:b7:f0:63:15:
a1:39:ba:82:f6:fd:68:41:93:f9:38:2f:12:fd:ca:49:11:12:
e0:b9:bb:0f:a6:ed:11:fd:c8:61:f6:c6:23:6a:90:88:ac:21:
f8:46:3c:ed:89:cb:e8:7d:82:d5:11:de:d5:1c:86:37:f1:87:
81:73:97:07:b8:a4:ba:5a:1b:24:5b:57:90:e5:e8:59:82:e0:
b9:fa:b3:c0:d7:65:69:56:35:e7:c5:a8:55:23:6f:10:c2:6f:
23:55:46:42:bb:f4:d3:70:20:ca:fb:9c:54:4c:94:ef:da:6e:
9a:b2:52:f2:da:b2:53:82:37:d0:c6:05:4e:e4:1c:eb:f5:84:
f7:2b:5f:43:26:dd:53:32:d7:4a:d9:79:61:3e:0d:5d:da:35:
16:8b:ba:43:b9:ef:e6:c5:2d:eb:b7:ab:c7:57:93:9e:5b:46:
55:73:da:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kTkCOLCpXXlPK4mZaDh9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmE0ZGZiMTkwNmIxYzY3YWJiNTRhNzBhNzZjYzkyZWI0
ODYyN2QwHhcNMjYwNzI3MTYwMDE5WhcNMjYwNzI4MTYwMDE5WjAzMTEwLwYDVQQD
EygzYTMxZWY3NWNlNThkNWQxNjZhZjQ3ZjEyYTVlZTk2NTBlOTM3MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE6lW3HX9ZwqeYFUP2KgZ6QDvqoi
HH6HQWOaiGKkeRX6tr5N5bWMJ0n6tljVWfygUF+A7iOnxoigIx3/dK+41Z+fePYE
Yg3buIuvAO+oM8FPdUtsWL28RuekoXT1U7q2hEZtdtxfb2/1bfP7fnYgb3xFr+95
gGRUCPtrNAqpilQs2wIhp7vS0MBClJ2/sHdrgismAnL1yAA8VVFNlXuxN7UkLjjM
VDqwJB9+3237a5PcefS8K50V8wd7p1t1xr26emCStY9q3tGMGOYJn0/Lxpc1eu70
1EA8J2g7sRMLZV7skNcttRnvwkMHuSyJkELTziATyjdjfilSJ622lrogUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDox73XOWNXRZq9H8Spe6WUOk3DQMB8GA1UdIwQY
MBaAFLFqTfsZBrHGertUpwp2zJLrSGJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dwTi14a0dzY1o2dTFTbkNuYk1rdXRJWW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81MDZjYTktZjZjNy00NTZlLTg1N2Ut
YmMzYzVhM2NlMTNkLzEvc1dwTi14a0dzY1o2dTFTbkNuYk1rdXRJWW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81MDZjYTktZjZjNy00NTZlLTg1N2UtYmMzYzVhM2NlMTNk
LzEvc1dwTi14a0dzY1o2dTFTbkNuYk1rdXRJWW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApP6e9hx5
MhkODV7ECIUGq93PzH1rjCVRAJUUpH7R4eZCgro/J06bH/S07WVoJtpBhhrnC1v+
0Bl+EPYhf74aTWxOq2HK/XXouvc4nQy9a6vbpQ1ZQn+38GMVoTm6gvb9aEGT+Tgv
Ev3KSRES4Lm7D6btEf3IYfbGI2qQiKwh+EY87YnL6H2C1RHe1RyGN/GHgXOXB7ik
ulobJFtXkOXoWYLgufqzwNdlaVY158WoVSNvEMJvI1VGQrv003AgyvucVEyU79pu
mrJS8tqyU4I30MYFTuQc6/WE9ytfQybdUzLXStl5YT4NXdo1Fou6Q7nv5sUt67er
x1eTnltGVXPafg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:20:19 2026 by rpki-client