Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
File: swLy7pS0Qh7qX5jsD8SRdbubtDY.mft (raw, json)
Hash identifier: RlPlLKVuoCll2RPxPok8LVYycJZKNi+K4Bva1l5l3l0=
Subject key identifier: BC:55:4D:E5:26:79:36:49:85:F1:A9:89:08:21:0B:5F:DB:24:88:DA
Authority key identifier: B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
Certificate issuer: /CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Certificate serial: 019D3A1C431F963293A57248FDA7920DABAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
Manifest number: 0206
Signing time: Sun 29 Mar 2026 15:00:23 +0000
Manifest this update: Sun 29 Mar 2026 15:00:23 +0000
Manifest next update: Mon 30 Mar 2026 15:00:23 +0000
Files and hashes: 1: swLy7pS0Qh7qX5jsD8SRdbubtDY.crl (hash: Zh3zcjZ5rCqkMLgJKEG8KPkoBVpZ4IRmZT64EkpUGT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:43:1f:96:32:93:a5:72:48:fd:a7:92:0d:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b302f2ee94b4421eea5f98ec0fc49175bb9bb436
Validity
Not Before: Mar 29 15:00:23 2026 GMT
Not After : Mar 30 15:00:23 2026 GMT
Subject: CN=bc554de52679364985f1a98908210b5fdb2488da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:b5:24:2e:40:16:f4:fb:e6:1e:9b:83:b6:
8a:9e:08:3c:2d:fc:cb:86:f4:48:27:f7:e1:e3:06:
bb:44:8e:e3:c3:28:83:8b:5a:9f:51:73:14:0d:c4:
4f:34:f7:d7:f1:53:84:7c:10:55:b1:d6:79:73:87:
57:54:59:8d:02:a1:d3:e3:4f:89:ce:32:c0:56:99:
09:8d:97:f0:ba:14:77:07:98:ec:27:83:c6:db:c1:
a3:32:e9:95:3b:6b:cc:34:f8:43:29:46:ea:2f:4e:
fa:f7:68:5c:c5:b1:c1:ab:e9:ef:61:4b:bf:e0:8b:
1b:b2:43:e3:df:a5:ef:ba:48:93:dd:6a:c3:ed:c0:
8d:92:be:8e:4e:af:35:c4:ce:d0:1c:80:30:84:f1:
1f:df:ad:34:4f:c0:0d:8b:ae:64:20:d4:34:48:4c:
c4:42:41:81:86:db:78:68:88:30:bf:1d:f5:7d:21:
7b:0b:27:38:18:52:be:08:c4:f9:7c:92:bb:6b:c2:
69:1e:a7:73:61:e0:7f:33:a2:69:dd:8d:85:b6:5d:
c5:de:14:43:01:9f:22:27:28:2e:87:cc:84:d9:1e:
77:fc:bf:c3:28:1a:58:20:b3:14:4b:d9:91:ca:79:
89:25:3b:8a:d5:41:8f:aa:7b:86:17:52:24:b2:a3:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:4D:E5:26:79:36:49:85:F1:A9:89:08:21:0B:5F:DB:24:88:DA
X509v3 Authority Key Identifier:
keyid:B3:02:F2:EE:94:B4:42:1E:EA:5F:98:EC:0F:C4:91:75:BB:9B:B4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swLy7pS0Qh7qX5jsD8SRdbubtDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f6fff0-16b4-406f-9fd3-a189aa924938/1/swLy7pS0Qh7qX5jsD8SRdbubtDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:74:20:53:1b:80:b8:93:75:48:4e:c4:56:41:f9:07:02:
46:14:b4:45:33:1e:2c:04:6d:87:e0:5f:53:4c:b6:67:e9:70:
e8:0e:3a:be:d6:09:41:85:8b:69:be:25:b9:cd:f4:8d:26:83:
95:ef:60:f0:33:f4:7f:4e:e3:71:29:a8:76:16:79:ae:e5:f9:
6c:28:2d:22:c0:c3:71:57:af:2d:2d:69:0b:a3:95:ee:45:fb:
73:b5:b2:af:19:06:bb:fd:0e:ab:77:8b:6f:c9:bb:31:67:fc:
0a:54:98:27:f3:0a:27:8e:a4:09:65:5e:2e:d9:d5:0f:bd:7a:
b7:23:bc:31:27:66:70:df:3e:ee:ff:b7:18:a0:8a:74:32:ba:
1a:2f:e3:2d:20:3b:de:47:c6:d2:69:6c:78:a2:3d:79:ef:64:
2a:6c:92:c0:e1:2a:2d:1d:30:4f:59:03:9b:30:bc:79:54:eb:
45:32:1c:98:b9:8f:33:3e:26:38:c7:42:1a:db:a0:34:c3:93:
cc:12:83:46:91:64:56:c1:97:f6:9d:fb:e1:45:0c:af:7b:6e:
02:d3:93:39:db:e3:09:ff:fe:3f:6f:33:34:26:c4:5a:cf:d3:
39:f2:04:50:2d:0c:c0:69:7a:cb:d4:67:a8:ca:79:8d:e8:28:
69:2a:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:08 2026 by rpki-client