
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: yf6nJc5ZDpO7ZMKAS6Q3AYYxY9JJkot8VxmMTu+do24=
Subject key identifier: 35:4D:4F:9F:41:53:5F:F6:0B:00:78:99:21:C6:F2:C1:8B:BF:0A:A4
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 01A08FB2EEAB78AEA884AC85393E4B4E89D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 1508
Signing time: Fri 11 Sep 2026 09:01:03 +0000
Manifest this update: Fri 11 Sep 2026 09:01:03 +0000
Manifest next update: Sat 12 Sep 2026 09:01:03 +0000
Files and hashes: 1: Rc3STN1au0eE3KIt2vDHqH2ZA2E.roa (hash: 4CQWjqMCa9ZSxhQWZORkOAVze6+tQcY1MdPTo5paRKo=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: Sqx8rpry7JtI+gTAavV8idhLJe95uWZrvCVFS9E1y8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b2:ee:ab:78:ae:a8:84:ac:85:39:3e:4b:4e:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Sep 11 09:01:03 2026 GMT
Not After : Sep 12 09:01:03 2026 GMT
Subject: CN=354d4f9f41535ff60b00789921c6f2c18bbf0aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:45:ae:d9:c1:1e:6b:e5:2d:70:1c:dd:6d:
0d:ef:a8:c9:7b:75:de:0a:db:79:95:10:ab:9c:b0:
13:09:cf:c7:3f:4e:89:42:e8:e8:0d:55:fa:7d:14:
79:8f:a8:dd:a8:08:72:4e:1c:41:b4:42:47:96:23:
9d:73:c8:cf:d0:22:5c:e9:96:62:ea:05:5f:fa:bc:
4c:d5:62:27:bc:65:61:83:a6:cb:15:57:f0:83:b7:
fc:92:17:df:ad:a7:07:69:f3:39:1d:d5:75:c5:85:
79:db:3a:2b:6b:e9:ec:6b:53:2c:cb:b0:bd:30:7e:
f9:dd:69:be:d4:eb:15:b2:1a:d8:6a:39:33:5e:e3:
53:8a:8a:0f:80:cb:85:cf:ac:cd:52:97:af:9c:e1:
0d:3d:a5:f0:19:d2:f3:8a:3c:d3:2b:ab:95:26:d6:
fe:77:ff:00:39:2b:26:55:4d:7b:f6:3e:25:84:a0:
42:56:2b:63:c1:84:57:d7:9a:2e:23:24:f4:94:4c:
b6:0a:bc:82:a2:ee:e5:55:5c:84:f5:20:7c:5f:f9:
38:73:89:56:57:bf:33:af:3f:17:a1:ee:a0:81:f8:
5e:f9:c6:fa:25:dc:b0:d7:3a:ba:2c:b2:a3:6e:06:
dd:08:66:26:a0:bc:8b:b6:fa:9b:b7:61:a6:e7:e1:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:4F:9F:41:53:5F:F6:0B:00:78:99:21:C6:F2:C1:8B:BF:0A:A4
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:10:57:a5:d0:61:b1:73:42:37:6b:c1:4f:a4:3d:41:8f:05:
39:d1:df:6a:2e:aa:4a:bf:2f:06:72:cb:d5:35:d6:44:6d:a6:
ae:8a:f0:b4:6d:be:67:74:be:a4:48:10:d0:65:a0:8c:32:88:
2d:a4:25:11:2a:1a:73:dc:07:e2:a8:3d:72:91:28:f8:1a:0c:
a1:80:67:03:af:37:48:39:c5:20:94:4a:ee:45:4c:ff:f6:82:
e4:61:5d:99:09:09:e1:ae:b1:f8:82:35:91:6a:f9:fa:df:ef:
7b:ee:0d:ba:00:e1:61:c4:8f:cd:f8:99:6a:9b:12:06:05:25:
df:40:5a:a7:1a:33:20:a1:43:64:aa:57:6e:20:7e:f3:13:45:
2a:35:2c:76:2f:83:5e:45:b4:76:01:a1:fb:63:7c:01:61:8e:
66:d8:97:19:c8:d5:40:e6:99:b6:a4:3b:dc:31:d2:04:0e:d2:
89:e5:e5:d5:48:da:8e:78:e9:96:a1:7b:4a:98:91:62:a0:20:
44:a0:4c:63:91:eb:e3:b1:13:94:69:c0:08:f4:d9:11:2c:10:
b3:b0:b5:29:dc:05:52:5d:3a:aa:98:63:8a:ab:c6:59:fe:0d:
28:33:a8:2d:a2:6a:51:73:ba:ee:1c:02:df:e6:b3:33:49:97:
91:84:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:51:53 2026 by rpki-client