Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
File: swUV9H2pJdn5ATgIqpETwr3pbZo.mft (raw, json)
Hash identifier: 2pSgAgFO2oYauKf27vgTJrGTUoKNE3pC2n1ran6mg7w=
Subject key identifier: 5B:76:06:51:E8:50:26:6B:96:2C:3B:F0:06:93:EE:2C:80:17:4E:82
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 019D39407653234FABA812AF3C5F95C02B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
Manifest number: 0500
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: GH-U3lzB4LZDFyVG2bUd3n4SBfE.roa (hash: sTn8rRWu0dVA+yyqQLOUoU8NLea1KDmgRn4CRX9pCbE=)
2: swUV9H2pJdn5ATgIqpETwr3pbZo.crl (hash: vuSbToxSJL3V0sc/B5Rxx9fcVhhbpdu3LUiBBhwoTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:76:53:23:4f:ab:a8:12:af:3c:5f:95:c0:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=5b760651e850266b962c3bf00693ee2c80174e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:b7:4e:2a:42:cc:6f:44:ae:85:d8:a1:50:
b6:4e:26:51:ce:e1:e0:cb:a3:6c:76:84:75:bf:ee:
d2:64:8f:5c:9c:e8:33:70:47:a0:e0:37:fa:9c:c5:
e4:d9:41:24:e2:1c:c4:a6:40:e4:e0:11:5d:f7:80:
d7:e9:23:3e:3c:fe:11:81:26:b6:51:63:57:c4:cf:
83:9d:39:19:35:f3:c4:bf:5a:b9:4a:46:2d:83:b9:
f6:fe:ce:51:ec:a7:46:30:34:52:a9:f0:84:05:c8:
66:bc:70:0f:53:da:be:bc:11:a6:0c:38:54:65:5a:
60:42:b0:3b:8b:47:9c:20:e9:78:e6:2b:95:e4:21:
1d:c6:c7:f2:2a:ce:9e:ad:25:f9:64:fb:67:6c:c3:
16:28:59:e9:5e:65:c1:4f:cc:9c:10:e2:1b:70:bc:
64:69:22:8d:d2:ee:b2:7e:b9:4f:4e:14:cf:98:0a:
09:ff:d6:24:f7:55:11:66:89:d0:ca:ab:bc:3b:26:
15:61:cc:98:51:f5:ae:7d:56:9b:20:29:b8:c3:7f:
24:49:47:04:28:d3:54:99:11:31:02:f9:32:5e:cd:
b2:2a:c6:78:f8:c8:c2:11:2e:eb:91:6c:38:e7:c2:
2c:ff:96:37:99:33:b6:7e:33:de:97:3f:39:87:54:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:06:51:E8:50:26:6B:96:2C:3B:F0:06:93:EE:2C:80:17:4E:82
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:ba:e8:a4:be:3f:9a:aa:b9:b8:af:82:f6:95:ee:41:e0:
70:69:2e:39:4f:88:44:9f:92:ab:45:fd:87:f5:ac:5c:59:b1:
08:be:ab:1f:5e:05:23:73:79:47:f9:ef:25:e4:64:43:ee:5d:
91:92:b5:94:e5:8b:f2:1c:0a:46:33:d7:75:56:8b:52:71:22:
5b:f7:d4:42:86:0b:37:96:a3:eb:02:b4:ae:33:71:f7:8b:80:
95:5b:15:7e:c1:70:9f:a7:07:c8:fe:30:5d:05:66:32:ef:5c:
22:03:8a:25:a1:49:5d:d9:99:a4:50:b8:9d:e3:9b:1d:a0:c9:
9a:07:57:c0:fd:b0:b8:db:b7:5e:8f:aa:1d:51:5d:0f:40:99:
f1:1d:5d:92:b5:70:55:f9:01:42:05:93:b1:bd:d4:90:94:48:
2b:30:98:37:04:77:82:5b:e7:99:29:90:15:e1:2f:35:3d:a4:
1c:0d:15:f8:ec:bf:4b:7e:71:e7:9a:35:24:1c:82:0a:97:43:
15:41:e3:42:e1:a5:d0:4d:fa:38:c6:09:11:c9:1d:03:46:5b:
93:bf:08:0d:d3:7d:47:82:d2:b8:3c:5e:32:61:d6:97:a3:c9:
48:7d:eb:17:2a:aa:b7:bf:c9:65:6d:df:23:fd:24:0c:0f:6a:
9c:73:45:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHZTI0+rqBKvPF+VwCsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDUxNWY0N2RhOTI1ZDlmOTAxMzgwOGFhOTExM2MyYmRl
OTZkOWEwHhcNMjYwMzI5MTEwMDE4WhcNMjYwMzMwMTEwMDE4WjAzMTEwLwYDVQQD
Eyg1Yjc2MDY1MWU4NTAyNjZiOTYyYzNiZjAwNjkzZWUyYzgwMTc0ZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4O3TipCzG9EroXYoVC2TiZRzuHg
y6NsdoR1v+7SZI9cnOgzcEeg4Df6nMXk2UEk4hzEpkDk4BFd94DX6SM+PP4RgSa2
UWNXxM+DnTkZNfPEv1q5SkYtg7n2/s5R7KdGMDRSqfCEBchmvHAPU9q+vBGmDDhU
ZVpgQrA7i0ecIOl45iuV5CEdxsfyKs6erSX5ZPtnbMMWKFnpXmXBT8ycEOIbcLxk
aSKN0u6yfrlPThTPmAoJ/9Yk91URZonQyqu8OyYVYcyYUfWufVabICm4w38kSUcE
KNNUmRExAvkyXs2yKsZ4+MjCES7rkWw458Is/5Y3mTO2fjPelz85h1TVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt2BlHoUCZrliw78AaT7iyAF06CMB8GA1UdIwQY
MBaAFLMFFfR9qSXZ+QE4CKqRE8K96W2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYt
MTczODI1MzliMDAwLzEvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYtMTczODI1MzliMDAw
LzEvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd266KS+
P5qqubivgvaV7kHgcGkuOU+IRJ+Sq0X9h/WsXFmxCL6rH14FI3N5R/nvJeRkQ+5d
kZK1lOWL8hwKRjPXdVaLUnEiW/fUQoYLN5aj6wK0rjNx94uAlVsVfsFwn6cHyP4w
XQVmMu9cIgOKJaFJXdmZpFC4neObHaDJmgdXwP2wuNu3Xo+qHVFdD0CZ8R1dkrVw
VfkBQgWTsb3UkJRIKzCYNwR3glvnmSmQFeEvNT2kHA0V+Oy/S35x55o1JByCCpdD
FUHjQuGl0E36OMYJEckdA0Zbk78IDdN9R4LSuDxeMmHWl6PJSH3rFyqqt7/JZW3f
I/0kDA9qnHNFow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:08 2026 by rpki-client