Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: 9PYwBbTwmYjWl0CoOmieljSMM18UhEAoOShVPaLEL4k=
Subject key identifier: 56:61:DC:B3:3E:FE:F1:7A:B0:98:E4:B5:50:99:C2:BD:CC:9D:67:FF
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019D382E9C1155248514E3BF84E8E109E683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 134D
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: Y5ZzyRrlb0WByiDX4ylzb1MBCQGRuyL9lM2ZT10WVxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9c:11:55:24:85:14:e3:bf:84:e8:e1:09:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=5661dcb33efef17ab098e4b55099c2bdcc9d67ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:d5:8c:82:04:cb:b2:76:f2:89:fe:7f:63:
4d:b5:ad:65:00:08:8d:44:c4:94:58:28:e2:a4:37:
18:ce:4b:56:1a:6d:12:74:1c:59:c6:04:03:48:99:
ee:73:fd:cb:4a:66:0e:1e:bd:b5:6c:99:f9:b7:64:
2a:2f:74:6c:da:03:1e:5c:9c:78:2c:81:d3:49:d3:
b0:5b:5f:5a:2c:ab:07:50:3a:85:ac:97:dd:33:27:
74:be:84:46:40:40:6e:69:3c:c4:44:3d:af:46:59:
06:2a:31:c4:d1:6e:90:c2:be:8e:b3:ab:24:2f:6e:
9d:d0:ef:d3:0a:cc:5f:12:4c:66:8c:ed:e6:2c:d5:
e6:84:5f:8d:3e:03:08:c8:01:f6:9d:b3:68:b9:c8:
ab:08:26:a6:c8:8f:4d:a0:b2:8f:c6:0f:ab:89:c0:
2a:cb:2a:30:56:c2:01:ee:fe:8b:79:ab:dd:ed:7e:
87:42:51:b5:c0:4a:41:f5:40:43:e7:32:70:ab:e7:
4c:ef:c7:30:0b:61:77:e4:ad:2c:69:1c:7b:95:73:
53:5c:9c:f5:1b:d0:16:ac:a9:d7:ca:67:d8:9d:a5:
0c:ea:0b:6c:7a:65:9d:4e:21:d7:2d:41:00:ba:3d:
0b:95:f6:23:fa:8a:0c:e2:fd:12:b9:e8:e6:7c:24:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:DC:B3:3E:FE:F1:7A:B0:98:E4:B5:50:99:C2:BD:CC:9D:67:FF
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:9e:68:7b:c7:82:b0:bd:dd:6d:79:40:72:99:fd:6e:17:
12:95:10:d0:7d:cc:33:de:12:3c:06:d7:c3:b5:f5:00:03:21:
d0:e1:a4:83:b2:70:fb:1f:93:50:ee:18:96:2f:88:5c:63:37:
c2:dc:83:ae:f0:82:35:9b:69:c6:63:d0:ae:83:b6:e7:bd:13:
0f:ed:f3:91:ac:d6:73:87:4c:d5:cb:f9:e2:f9:92:fe:3a:75:
4d:07:ee:ff:63:e4:5f:ea:06:9e:45:c6:22:4c:41:e7:2c:d1:
81:2b:0e:2d:c0:bb:a1:80:11:fd:4b:2a:74:bc:e7:df:f6:4e:
38:6c:bc:b3:63:7c:e2:e7:23:a2:86:46:67:cc:83:34:40:0c:
fa:06:0b:a6:8e:13:90:c6:25:43:72:42:da:e9:c9:46:86:24:
29:04:bf:6f:40:f0:1a:de:49:50:d9:15:4b:d3:b6:e0:cd:93:
4a:04:00:13:e2:3b:7e:f4:5b:ab:f7:3b:f2:71:96:c5:fd:3a:
9e:73:d9:e0:6a:4e:9f:40:17:61:9b:e3:32:8f:53:ad:a4:30:
2f:e6:21:1b:e5:14:35:bc:94:37:9d:ee:ad:39:a9:00:c8:6a:
ab:72:c7:11:78:4b:94:12:4d:59:09:e6:7a:59:34:47:37:9b:
16:ef:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:08 2026 by rpki-client