Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier: soA0ZS4bcaYS2XUeMLON1QwZ9czfg2Mda8XvK8id+Ok=
Subject key identifier: CB:E1:E0:54:8F:89:56:83:75:A7:D6:5F:A3:84:46:CE:49:B8:91:4E
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial: 019CF4970BA53045B4B0C16A2AF1EA476F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number: 0120
Signing time: Mon 16 Mar 2026 03:01:05 +0000
Manifest this update: Mon 16 Mar 2026 03:01:05 +0000
Manifest next update: Tue 17 Mar 2026 03:01:05 +0000
Files and hashes: 1: T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa (hash: 9UlqFrtBpJ1m/jb2if0Qk7CFK/PRtZG8ru3Zi5n9cBk=)
2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: qQfPK+l5GZxzOlw82XzIKA4RaGwGjl/d1E003M6V1T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:97:0b:a5:30:45:b4:b0:c1:6a:2a:f1:ea:47:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Validity
Not Before: Mar 16 03:01:05 2026 GMT
Not After : Mar 17 03:01:05 2026 GMT
Subject: CN=cbe1e0548f89568375a7d65fa38446ce49b8914e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:5f:bf:df:b0:64:5d:8d:22:89:d8:d3:f2:
fb:f6:8a:ef:80:90:4a:0a:96:30:f4:ab:28:30:31:
07:fa:6e:37:4d:9e:9e:fb:f3:20:8a:cf:6a:62:32:
e8:59:7e:36:12:55:6b:9b:d8:a3:35:d9:27:ae:1b:
37:34:90:37:9a:75:c5:b5:e5:95:32:1a:a1:d0:eb:
86:90:12:21:4d:02:3f:be:d1:22:37:e6:02:ee:8f:
bc:4d:19:11:e2:3e:dd:b7:91:af:f8:71:48:31:d9:
e1:e9:2f:36:6a:38:6f:48:1f:94:2b:46:78:89:f5:
f2:cc:d7:21:65:fd:4f:89:59:c3:5b:23:e6:23:4d:
02:cd:8d:d0:4a:e9:d5:57:6b:49:91:03:32:90:87:
e3:b6:f4:5f:20:96:1a:a4:b1:48:dd:09:1c:da:d8:
0b:ea:29:04:23:2e:5e:7d:d5:8b:f4:f0:f3:8a:8f:
a6:e8:2f:3c:c1:dd:83:7c:f6:53:8a:6f:b7:05:29:
d5:29:1a:f2:90:74:d4:e5:24:22:2b:8f:23:a0:a2:
09:fd:b8:b6:cc:0c:10:7a:cf:a2:6a:ce:73:a8:d2:
da:ec:d5:fb:ee:5b:fc:56:50:a5:60:9f:c3:d7:99:
82:64:12:77:b1:b3:1a:6d:f3:e4:83:2f:eb:62:35:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:E0:54:8F:89:56:83:75:A7:D6:5F:A3:84:46:CE:49:B8:91:4E
X509v3 Authority Key Identifier:
keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:cf:9d:16:e4:8e:29:d6:88:0a:3f:2d:36:4e:73:b9:5f:
00:5b:63:2f:c1:7b:a7:40:ba:05:61:b1:eb:17:e8:1a:1d:52:
04:f6:f9:f3:78:a0:cf:5b:56:74:75:bd:06:aa:30:ca:3e:17:
31:fe:71:94:15:50:34:44:22:34:63:c9:72:3a:53:1d:06:0a:
05:9a:e3:1b:d0:72:96:ec:65:d2:ae:be:34:3b:86:33:20:cb:
05:54:e8:31:bf:57:3c:93:69:71:32:d5:b1:a1:dc:c7:fc:aa:
57:90:b1:81:46:95:b9:f3:ab:32:fc:78:e4:6d:ee:d4:88:97:
36:3f:0a:cc:ac:08:48:0b:27:85:b1:2b:b3:22:0f:ef:27:be:
71:17:3d:02:7f:f1:3f:1b:f9:0e:da:c2:74:82:80:72:a1:47:
7d:3e:24:d9:c8:2f:f1:ac:25:0a:ce:44:e7:96:73:a5:c7:33:
10:74:2a:30:3a:36:8d:fd:8a:be:bf:b4:81:8a:f0:6f:32:0c:
49:ad:20:bb:46:d5:c2:a4:98:51:f9:32:dd:29:7b:80:64:96:
e1:97:3a:3a:30:f1:90:04:c4:2d:c3:3a:a5:e7:dc:a6:26:92:
31:df:a1:d1:59:f3:c8:12:d2:f9:25:9f:f4:b3:0f:31:b9:46:
d3:e4:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:03:46 2026 by rpki-client