Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
File: sWk_G-ZX-4xxvLucd75UqTctsEU.mft (raw, json)
Hash identifier: pIDpDWRxN/9TIJb5OR+5K5LkWTD0aqz/KEuzj0V3lZo=
Subject key identifier: F2:D8:AA:05:A2:06:6E:F3:FA:22:60:4E:3C:AC:B8:0C:3C:3B:54:AB
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 019F84C45C0752A9405936E159DAA59BE951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
Manifest number: 1953
Signing time: Tue 21 Jul 2026 13:01:28 +0000
Manifest this update: Tue 21 Jul 2026 13:01:28 +0000
Manifest next update: Wed 22 Jul 2026 13:01:28 +0000
Files and hashes: 1: AlaUHxPXq3ieER5sys598dlOxkM.roa (hash: RZxV/h17P4vk9KS8WEdEwr+BTicC2yMkPA4IqVUF7TI=)
2: N4PEhgWjKJqRP2AQ7QdUFknY3jc.roa (hash: pIzqatQWuAi6HRtGir05ok6akFOjuueWgSLx9RmL4l0=)
3: sWk_G-ZX-4xxvLucd75UqTctsEU.crl (hash: tp7W+54/vhqiKD8US920DCLhwzA9ApzJ0eNlto4GTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:5c:07:52:a9:40:59:36:e1:59:da:a5:9b:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Jul 21 13:01:28 2026 GMT
Not After : Jul 22 13:01:28 2026 GMT
Subject: CN=f2d8aa05a2066ef3fa22604e3cacb80c3c3b54ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:bd:69:bd:73:82:ff:bd:c6:07:3a:c1:00:
da:9c:5e:c2:04:9f:ab:d8:df:9d:12:3e:b9:c7:62:
52:87:2c:94:94:9c:76:7a:a4:ae:c2:c6:93:01:cd:
b3:ee:7a:8a:a7:23:6b:78:58:44:69:0a:b9:5f:43:
c5:33:fb:d6:6b:78:90:24:8c:85:ec:ce:e2:e6:f0:
de:d4:5f:9a:5f:b3:f3:6d:ab:b5:47:e7:28:a6:7c:
f5:43:0e:8c:40:14:da:bb:dd:fa:23:40:b9:93:e7:
4a:04:e0:f8:d8:a0:76:1e:6a:b9:0c:ab:7d:b2:d1:
3e:3a:68:16:50:1a:07:c7:30:ad:79:86:54:a2:d5:
e8:ae:ad:44:15:36:51:47:ef:a1:e3:3a:64:b6:f6:
51:e0:45:12:62:b0:fe:21:64:45:e1:3a:19:36:a8:
da:04:a7:97:69:df:d7:18:53:08:56:3a:83:7b:33:
af:b9:a7:2f:42:b8:75:09:08:22:ff:4c:6a:74:d2:
94:f5:4b:13:ad:1d:89:f7:b5:23:cb:7d:a3:bb:2f:
c7:36:8f:2d:9e:07:1a:40:36:81:03:b3:22:e7:5d:
bc:10:bb:54:ab:b8:30:4e:f8:51:f4:ec:06:90:95:
b4:0d:99:53:a2:ad:5d:5e:e6:82:8d:da:10:58:b3:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:AA:05:A2:06:6E:F3:FA:22:60:4E:3C:AC:B8:0C:3C:3B:54:AB
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4b:85:13:eb:49:bb:b4:98:c0:d6:7f:32:01:ae:37:15:c6:
e3:94:07:91:0a:5a:f7:bc:6d:b3:b7:f1:0a:f0:b2:c3:6d:f1:
8e:27:36:44:ea:41:3b:5d:74:91:b6:30:19:49:f0:88:e7:2c:
84:2d:cf:e7:19:54:c0:06:6e:7c:19:32:ae:31:d4:f5:de:cb:
3e:a2:e2:e9:71:11:45:06:08:31:61:ce:cd:d7:10:5e:04:44:
b5:78:52:00:ef:3b:e3:05:b8:f0:33:d7:06:87:d3:60:fc:bb:
78:75:52:98:04:85:35:18:5e:b7:0b:01:b3:15:64:e1:91:0b:
b6:e9:12:2f:a5:dd:5a:f1:be:68:80:1e:8c:38:15:5c:bf:60:
5b:81:13:6b:f8:ca:d4:99:bf:7f:86:ac:43:c4:f9:83:ea:3d:
db:4b:14:d0:a0:31:50:d5:b7:3f:16:32:19:55:07:5d:af:2f:
f7:c9:ff:46:ef:71:08:05:aa:61:e6:d3:0a:93:0d:34:5a:ce:
58:94:42:75:ef:33:13:e1:64:10:66:56:d5:d9:99:62:f8:4d:
29:42:62:e8:d5:ef:9e:07:12:3d:ee:45:fb:cb:c3:25:1d:6a:
b1:8c:07:91:8d:63:d6:56:ce:a6:0d:89:39:b6:2e:4f:ad:56:
63:3d:28:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:37 2026 by rpki-client