Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier: dRm4U7gGEc206b0gJu8p/fVEj4lnjHufnoCHcPqZ7IM=
Subject key identifier: 4F:E5:9E:40:95:D6:80:48:63:AC:F4:BE:8E:BC:45:A8:D4:3D:70:0C
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 019D38658451D81031E8CF08ADC8DE063B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number: 0B61
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: 66N3EQND1sjUmozxAsHIiHnUtjs.roa (hash: Di4TJGLfsG6JOPILuSIhdo5LxtGZyeTeA1p/OJCQbVw=)
2: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (hash: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0=)
3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: PnDzIEQTZE8SWyqBoH2rZDJ+kHnp6oKfgdT/6x3AiA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:84:51:d8:10:31:e8:cf:08:ad:c8:de:06:3b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=4fe59e4095d6804863acf4be8ebc45a8d43d700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:be:ee:0d:c7:59:c7:5c:6d:f5:11:be:ee:
3a:26:67:cc:ba:2e:b6:4c:48:f7:d2:ca:6f:6a:4b:
8a:dd:e0:05:41:91:0a:ae:75:ca:51:bd:ef:f1:9d:
69:8c:bb:e5:97:f8:87:ed:37:ed:be:29:8d:b4:6f:
32:d9:e0:5d:b7:c4:45:d8:13:46:bd:42:f2:d7:89:
87:ff:5a:15:f1:8c:0b:8b:a8:04:2c:b4:24:b4:56:
5b:82:fc:8e:ad:d7:b5:89:d9:64:c5:f5:1f:a9:b9:
87:36:62:d4:46:92:a7:ed:a5:b6:c7:6f:b5:b7:22:
ed:44:7e:56:d6:2f:58:50:bb:f7:60:ed:fb:ef:1d:
9f:2f:27:2b:5b:54:34:88:5d:31:ca:a8:97:81:d9:
e5:b0:82:aa:93:47:96:d5:5a:fe:bf:f6:2a:c3:2d:
25:28:46:90:cf:c0:fc:a3:fb:1b:29:cf:03:e3:1d:
ae:3f:5b:12:cf:23:7a:63:1c:09:7b:5a:43:a4:b4:
2c:21:84:f7:dc:ab:06:10:8a:3c:da:49:47:fa:0d:
9e:1b:5d:78:ca:7d:38:a5:88:54:89:42:c3:23:b3:
fa:d8:15:34:fd:9f:68:e7:bc:60:77:da:d1:0b:ec:
ee:ec:62:71:75:98:1f:a0:24:10:e1:c9:12:b8:3f:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:9E:40:95:D6:80:48:63:AC:F4:BE:8E:BC:45:A8:D4:3D:70:0C
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e3:cc:85:8b:74:d9:3d:ac:66:2d:24:d2:08:0f:49:73:9c:
76:ce:b5:1b:e6:90:1a:32:4d:dc:a5:71:df:36:97:d9:78:51:
33:ca:94:4c:28:d9:32:ec:83:60:0c:7d:49:f9:cf:00:2b:d3:
92:6e:63:e3:61:02:19:c2:0c:22:2c:11:05:2d:5f:36:0b:82:
5d:d2:9e:d5:3c:74:50:fd:29:1e:4b:49:02:99:88:65:87:7f:
7a:5d:b2:26:f0:11:a5:88:14:80:d4:db:58:58:03:c9:0d:cc:
33:30:c4:8a:c3:01:20:f6:49:9a:9a:05:63:3e:21:71:60:67:
92:9b:62:86:26:c2:96:26:dd:b8:e9:a4:2e:74:8e:1c:9e:a4:
93:a9:79:57:9d:84:62:6c:a8:10:d7:5e:71:32:a9:58:e8:cb:
21:70:45:57:6d:4f:03:53:fc:32:52:69:d4:99:1c:06:5a:9b:
fb:5a:c1:50:78:db:11:fb:4d:4a:14:ee:af:2b:18:6b:9d:32:
8b:d8:a3:f5:d9:5a:6b:a9:6d:af:7e:f0:89:9e:0a:9c:90:31:
bd:08:3d:23:8e:ab:b4:95:0d:49:bd:92:de:d1:e5:8d:87:39:
c1:7b:db:64:7a:94:2d:1e:ed:99:d3:93:5b:9c:23:e2:e0:98:
23:85:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:46 2026 by rpki-client