Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
File: SWsAWJcdKZOlelscts3_XS60Tj8.mft (raw, json)
Hash identifier: wA0X/LRYnMA6QV/QB1XhYP3hc/yTLUq9MEZ5C/7dUWY=
Subject key identifier: 3F:59:53:28:E1:A5:F8:21:FB:9A:01:88:37:E7:AF:21:AD:B3:48:20
Authority key identifier: 49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
Certificate issuer: /CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Certificate serial: 019D39AEA056EE11498BBD2C60EC7BF61667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:38 +0000
Manifest this update: Sun 29 Mar 2026 13:00:38 +0000
Manifest next update: Mon 30 Mar 2026 13:00:38 +0000
Files and hashes: 1: SWsAWJcdKZOlelscts3_XS60Tj8.crl (hash: L8jDe/7gKu49N8+q9x4ye+NyoHvBflsdNCvsA9eEytc=)
2: tuHT2dEbGHjnKbIj5B7A7SzfIdQ.roa (hash: Q0+MdAPGMZoJ36JQC3VmRpgFrOBMqh93iBgxmBCVguQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a0:56:ee:11:49:8b:bd:2c:60:ec:7b:f6:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496b0058971d2993a57a5b1cb6cdff5d2eb44e3f
Validity
Not Before: Mar 29 13:00:38 2026 GMT
Not After : Mar 30 13:00:38 2026 GMT
Subject: CN=3f595328e1a5f821fb9a018837e7af21adb34820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:e4:17:b0:72:82:02:3d:db:23:19:ed:2d:
df:0d:07:26:18:cf:58:b7:dc:13:61:3d:0b:2b:ee:
9a:5b:d7:90:57:18:29:ad:bc:b0:4c:e3:f7:26:62:
9f:7f:66:41:09:ef:9b:04:f5:b9:31:f5:cc:bd:27:
56:6e:17:bc:15:81:34:81:71:c7:2d:ed:06:69:71:
22:fe:4e:d2:43:d8:b3:eb:70:46:74:c0:14:96:9c:
80:4a:e3:bf:a2:89:22:9a:09:1a:d9:e4:2c:b0:3b:
b9:24:06:e9:79:67:b1:63:41:01:2d:b7:92:98:b3:
1a:e1:c1:6e:f6:26:c4:4f:c5:74:4f:76:57:aa:dd:
b0:22:b7:b0:3f:3e:05:1f:c9:88:48:fc:f1:1a:83:
6b:db:eb:48:4e:6a:37:89:0b:00:d2:e9:18:8b:a1:
ab:63:03:55:83:48:b5:ae:4d:93:d3:ec:ae:57:6e:
c2:77:01:db:a0:bf:a7:a2:06:ec:29:37:28:25:f8:
d4:15:ea:b4:8d:5f:e5:78:3d:62:74:36:19:89:37:
f7:e2:86:c1:83:de:3e:56:29:f1:dd:19:04:ef:02:
69:7e:b0:58:06:3a:74:21:28:dd:53:6f:5b:f9:dd:
9e:d5:55:aa:29:5e:43:17:04:b0:57:18:a8:9e:f6:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:53:28:E1:A5:F8:21:FB:9A:01:88:37:E7:AF:21:AD:B3:48:20
X509v3 Authority Key Identifier:
keyid:49:6B:00:58:97:1D:29:93:A5:7A:5B:1C:B6:CD:FF:5D:2E:B4:4E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWsAWJcdKZOlelscts3_XS60Tj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d55dc1-7604-4c8d-a1b4-39f8e2b4675d/1/SWsAWJcdKZOlelscts3_XS60Tj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:c8:b4:47:fe:31:ee:11:f1:86:95:09:52:fb:d0:f9:6c:
92:44:a9:30:31:62:b1:06:5e:cf:75:e8:80:6c:b5:4a:da:fb:
34:a6:09:c3:14:d5:db:eb:89:70:35:52:4b:e6:4e:05:68:34:
95:b7:1b:59:0c:5c:e6:a7:88:ca:87:e6:64:db:d2:b2:9f:b3:
2e:cb:bb:55:32:a3:77:6b:0e:c7:01:d7:41:ce:d9:93:2e:cb:
55:a2:63:a7:eb:b3:27:05:9d:c5:4d:11:57:89:b2:dc:f9:fa:
c1:87:9f:d5:e6:92:dc:e8:0b:4d:56:a2:87:36:50:9b:7f:ac:
52:fd:df:01:cc:a0:19:99:b2:6d:81:e0:2e:21:06:ca:c1:f4:
62:81:9f:f5:67:6f:3f:65:fc:fa:60:15:51:c3:ee:81:91:01:
18:9b:a8:47:9c:de:11:f7:f2:f9:ba:1f:43:93:ef:cd:47:24:
48:d7:30:a9:8f:02:75:36:d3:01:1f:ab:c0:9e:18:99:a3:74:
50:2c:2d:f9:d0:ce:f9:b4:a7:8b:8f:bb:1c:c6:b1:7c:31:04:
0a:29:d9:45:81:5e:95:45:1e:47:a9:8d:02:02:ba:de:eb:3a:
ed:fd:27:b9:6c:3d:27:a4:41:72:5a:38:09:95:d1:46:2f:f9:
e7:f3:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:03 2026 by rpki-client