Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File: _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier: pNQppDvwWj52PDsc4pJ0WKXXozaMy3ap+6f6vnEDtj4=
Subject key identifier: 01:B4:0C:8D:5C:A4:41:29:72:D4:64:1F:A7:65:A0:C8:60:4D:46:E9
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer: /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial: 019DDC550DECB8778D663375345A1770F699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number: 0198
Signing time: Thu 30 Apr 2026 03:00:54 +0000
Manifest this update: Thu 30 Apr 2026 03:00:54 +0000
Manifest next update: Fri 01 May 2026 03:00:54 +0000
Files and hashes: 1: T9vtZFfbt4BmGbxWzgJx5BP-kHo.asa (hash: 9UlqFrtBpJ1m/jb2if0Qk7CFK/PRtZG8ru3Zi5n9cBk=)
2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: 4+rdYVx+4rok2GWdKcpuLDZTNbFyZLWMWRVtqsAIqWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:0d:ec:b8:77:8d:66:33:75:34:5a:17:70:f6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Validity
Not Before: Apr 30 03:00:54 2026 GMT
Not After : May 1 03:00:54 2026 GMT
Subject: CN=01b40c8d5ca4412972d4641fa765a0c8604d46e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:69:df:02:f1:0c:51:fd:d9:f7:a6:b9:e6:
c5:1d:0e:d4:c6:74:2f:84:fe:2b:5c:20:be:07:e1:
22:45:9f:6d:e7:37:69:49:7c:25:b3:23:70:5e:83:
9d:03:2f:a1:f1:00:4c:76:0a:cc:db:7e:d0:59:a0:
46:88:05:d1:9b:85:02:27:27:9c:a1:a4:5a:42:ea:
a3:c4:77:90:66:be:2e:35:78:b6:66:e0:03:cc:47:
91:97:07:43:69:64:51:5d:4d:ad:36:5e:bb:ea:b5:
4a:5e:b2:db:55:43:75:cb:25:1c:b2:72:ce:e3:9b:
5c:68:47:be:40:51:83:58:ac:e5:55:2a:92:b3:40:
79:e4:90:00:57:0a:1e:ed:96:cb:d8:3f:92:6a:41:
94:28:e5:54:da:5e:9d:6d:10:59:20:3c:66:3d:3e:
eb:2d:ce:68:47:d2:c1:71:79:fa:b6:99:f8:70:a7:
3c:2e:00:b1:06:42:e4:b3:8c:fe:b1:21:e9:1f:a9:
de:e2:c3:75:81:68:f9:a7:8d:2a:56:7c:f9:46:04:
fa:66:13:c0:3c:a8:c2:61:7a:32:4d:14:20:2b:00:
04:1a:48:57:34:3b:12:07:07:b7:bc:93:6e:c0:40:
90:43:48:b6:d3:48:c4:57:d5:cb:35:e0:54:d6:b2:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:0C:8D:5C:A4:41:29:72:D4:64:1F:A7:65:A0:C8:60:4D:46:E9
X509v3 Authority Key Identifier:
keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:ed:c2:80:45:50:15:5e:d5:84:78:b9:2e:9b:2d:4c:34:
bf:dd:f4:59:94:5a:3d:05:d0:58:d2:6d:ab:a6:a5:d6:e5:46:
c9:5b:99:bd:01:e3:41:3f:55:50:0d:96:73:a6:e3:c6:3e:1b:
3e:bd:53:81:db:2d:72:03:50:1e:73:81:12:22:52:7f:80:13:
c2:4d:33:97:2c:2b:04:fa:11:46:06:75:81:18:84:f6:1e:59:
fb:ae:06:73:e7:b5:80:ae:f4:97:0a:c2:b5:99:54:9f:24:18:
96:63:45:18:fe:8f:d9:8b:92:a0:73:d8:d4:f1:37:39:e2:37:
a4:c8:03:1e:d3:61:f9:79:43:8e:a8:08:c9:6e:14:4a:2a:02:
7a:3e:e8:37:19:f9:0b:66:3d:04:0e:90:e8:fb:92:22:22:e1:
58:37:ef:b0:5c:40:e9:a2:0d:db:8b:8b:28:ba:97:1c:3c:ca:
2b:58:8e:84:05:24:3d:d3:aa:1e:97:c9:41:1c:a3:67:8c:70:
f4:f1:5e:55:f0:29:d1:34:60:fa:45:c1:f9:f0:f6:4e:eb:3c:
d0:8b:f8:3e:b1:a2:11:27:c2:aa:fd:5b:91:88:fb:d9:37:d3:
c9:05:88:d1:56:63:09:c9:bc:d6:3d:8d:1c:50:bb:23:ff:a2:
68:0b:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:58:34 2026 by rpki-client