Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier: aAkD02XNXX78niz+lxV1OgallPjvM9geeL4+SKhQ4uw=
Subject key identifier: 3C:7A:76:58:54:B6:A8:77:1C:0E:C6:45:F7:F5:35:AB:0E:5E:B6:B9
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 019CE4B65DB56BE3828A5894AF4DB79E8D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 01:01:22 +0000
Manifest this update: Fri 13 Mar 2026 01:01:22 +0000
Manifest next update: Sat 14 Mar 2026 01:01:22 +0000
Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: F7ZVdsqBZU0o6fu4Op5bq3HPuRSnoPbyoBWKemnYiqs=)
2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:5d:b5:6b:e3:82:8a:58:94:af:4d:b7:9e:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Mar 13 01:01:22 2026 GMT
Not After : Mar 14 01:01:22 2026 GMT
Subject: CN=3c7a765854b6a8771c0ec645f7f535ab0e5eb6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:31:6f:98:8d:a8:69:cd:a1:87:3b:c7:d2:
63:4a:f3:3e:70:04:dd:cf:44:f2:8f:d2:e4:79:fd:
29:15:a6:c9:57:de:85:71:e4:2f:b8:84:12:94:1f:
d1:dd:b3:c8:ae:72:7d:5b:f7:45:b5:8f:9d:05:50:
d2:ff:18:75:fc:b7:42:58:59:46:e0:a7:fa:6f:d4:
a5:a1:b3:64:7f:3e:9f:8b:91:fe:36:39:57:70:3b:
ec:18:46:de:92:c7:95:5e:27:24:3c:50:df:88:83:
10:2a:8f:6d:a6:c7:31:f4:59:89:e7:b2:64:79:2a:
a9:f2:c8:ca:34:15:4e:79:00:4d:40:83:52:d5:27:
95:09:a7:14:56:19:7a:68:b0:b2:24:f8:e1:cd:bb:
88:37:2d:6f:f7:3d:b6:4e:d0:bd:a4:dd:93:e9:18:
bf:46:2a:1a:16:52:e7:36:d0:d3:e8:db:d1:7a:9b:
b8:10:fb:8f:e2:39:6e:c0:c3:6b:5c:0e:4d:5e:b4:
66:5e:4f:d6:95:c6:a4:02:9e:57:74:91:66:51:16:
23:a4:8c:7d:5c:e3:ad:1c:2a:43:b4:ef:27:a4:f0:
b8:a4:ad:d4:5a:c0:e1:d9:b3:6e:4e:76:5e:bc:70:
2d:60:58:61:0b:8c:d2:fe:96:7c:cd:d9:7a:3c:29:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:76:58:54:B6:A8:77:1C:0E:C6:45:F7:F5:35:AB:0E:5E:B6:B9
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:1b:2e:44:f2:18:80:5c:93:ea:fb:ad:04:b7:33:e5:9b:
3a:46:67:49:5a:06:bd:49:2c:fa:e2:4c:f5:e2:a0:83:d4:3d:
b8:e0:2b:a6:80:ff:7c:8c:71:a3:a7:67:74:02:86:88:53:13:
62:99:b2:f4:83:c4:b0:97:2c:62:d0:ba:40:52:f2:de:a6:bf:
cf:71:55:32:f1:0c:f0:ef:77:e0:05:44:04:6f:38:93:71:f8:
19:a3:60:7f:2f:fb:54:22:92:89:b3:f9:69:3b:54:a8:42:25:
ea:76:91:f6:6b:54:f3:ab:2c:1a:e0:05:cf:9f:04:31:0e:8b:
dd:fd:82:05:ce:78:2f:3e:9a:e8:3a:7a:95:64:2b:fd:59:fd:
0e:50:ef:50:a4:93:bc:66:e4:2a:0e:ca:4e:12:4e:7f:a6:eb:
d2:63:89:41:c9:d4:95:21:e9:4e:cd:74:0c:de:66:7b:45:b5:
8b:76:7d:1c:f4:0e:06:56:d0:71:fb:63:e3:fb:95:a7:33:33:
fd:7d:28:ca:81:34:7b:05:0c:b0:fa:41:f1:b2:25:90:fc:3c:
e6:8e:c3:34:b3:98:33:23:35:37:50:ff:a6:30:90:0e:a1:19:
c7:92:c6:88:ba:48:49:ee:a9:c7:db:d8:72:3b:80:03:1c:53:
f0:27:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:51:16 2026 by rpki-client