Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: l43YqXyXz+ST378JiyQpjoOW/JnAKBiIUJs6Uc5IVFc=
Subject key identifier: B0:16:E3:4C:53:2A:06:A9:60:0F:DC:F7:3B:23:99:60:9B:50:C8:04
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019D3A1C301CF190437FAA500AC4A6512BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 1419
Signing time: Sun 29 Mar 2026 15:00:18 +0000
Manifest this update: Sun 29 Mar 2026 15:00:18 +0000
Manifest next update: Mon 30 Mar 2026 15:00:18 +0000
Files and hashes: 1: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (hash: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE=)
2: l_UYfd627TWdVQUBGDcYXolbG3M.roa (hash: jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: 7SBPCbknlze7DgLFKuRuksP5HFjsIxN12mLTIdmpvO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:30:1c:f1:90:43:7f:aa:50:0a:c4:a6:51:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Mar 29 15:00:18 2026 GMT
Not After : Mar 30 15:00:18 2026 GMT
Subject: CN=b016e34c532a06a9600fdcf73b2399609b50c804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:0b:33:4c:32:09:e2:3d:f9:11:fb:6c:d4:
41:37:78:1e:dc:bc:6d:72:e7:d4:fc:5d:99:c9:6c:
a1:eb:4b:33:6a:f0:98:be:49:45:fc:f0:1d:89:06:
26:f8:5d:6b:af:d4:0d:f6:df:5f:42:92:af:98:99:
e2:e0:61:4b:41:32:fe:df:0e:b3:97:ad:47:4d:b4:
65:ca:8c:b3:5c:5e:ee:8b:0f:1a:c7:a1:5c:05:70:
e1:32:43:0b:ff:b2:20:67:81:6e:17:a4:46:32:8c:
92:19:f5:86:fe:98:b1:03:41:6e:a9:e5:39:f3:d4:
33:42:db:f7:dd:cf:b9:37:8b:23:f8:e5:96:80:24:
96:05:d5:d0:4d:41:d5:52:01:e9:f7:59:37:e8:09:
27:2f:58:b5:59:f0:2d:14:5a:9d:df:92:64:1b:44:
83:cc:33:48:18:12:7f:80:37:21:64:cc:c8:03:4a:
1e:7a:5a:e3:70:b7:f6:f2:01:2c:32:53:c4:55:45:
37:83:31:5b:48:27:28:2f:27:86:38:47:8d:5c:b1:
c5:02:ad:df:91:0a:9b:7f:ca:54:94:96:5e:8d:42:
8c:0b:32:bf:57:f5:bd:d7:b6:20:c0:e6:e8:d0:43:
fd:78:d6:fd:0a:6f:43:37:fa:43:37:93:6f:fc:d6:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:E3:4C:53:2A:06:A9:60:0F:DC:F7:3B:23:99:60:9B:50:C8:04
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:2a:b2:70:7b:a7:37:f8:d2:1a:ff:52:4e:ad:d9:44:1a:
55:69:72:84:45:f4:07:1c:8f:bb:64:be:0a:06:de:45:8a:2f:
0c:eb:83:c2:5e:33:63:09:da:f1:5d:53:fe:dd:cc:d8:3f:19:
35:a2:0b:59:30:62:18:5f:8b:cd:94:cb:f5:0c:b9:bc:1b:27:
74:c0:57:80:47:8f:27:48:40:fd:ca:1d:d0:5d:9d:9d:d8:c7:
3b:55:20:7a:fa:bb:d3:5a:15:32:74:46:eb:2b:05:eb:1d:d9:
2f:c7:5c:fc:06:1c:db:d2:82:2d:47:2a:c7:58:32:a2:76:b5:
cf:fe:dc:e0:e8:eb:0c:46:20:29:19:7f:23:c1:3b:7d:6e:cd:
c8:f8:13:3b:0c:07:3e:c9:f4:ef:3b:41:f1:fb:f3:51:e7:7c:
63:c9:d7:8c:d0:e0:13:a0:99:d3:0d:10:36:ad:8d:08:08:70:
69:cd:dd:04:52:7c:ca:12:6f:6d:3d:3e:6b:0b:9b:00:da:a4:
a9:fe:00:b6:8b:83:f4:11:4f:ae:57:89:49:eb:4f:ed:fa:61:
6d:19:c2:c4:fc:34:25:2c:28:ba:d7:f4:03:87:09:a4:50:7e:
f0:49:f0:92:c2:d3:f0:1e:f0:a5:e7:24:b1:9e:ae:ce:d8:60:
93:fb:42:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HDAc8ZBDf6pQCsSmUSu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNjlhNDk3MDBlMGMzYjhlMzlhNzkxMzBjOTg3YTUwMDBj
Y2ZmZTIwHhcNMjYwMzI5MTUwMDE4WhcNMjYwMzMwMTUwMDE4WjAzMTEwLwYDVQQD
EyhiMDE2ZTM0YzUzMmEwNmE5NjAwZmRjZjczYjIzOTk2MDliNTBjODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQELM0wyCeI9+RH7bNRBN3ge3Lxt
cufU/F2ZyWyh60szavCYvklF/PAdiQYm+F1rr9QN9t9fQpKvmJni4GFLQTL+3w6z
l61HTbRlyoyzXF7uiw8ax6FcBXDhMkML/7IgZ4FuF6RGMoySGfWG/pixA0FuqeU5
89QzQtv33c+5N4sj+OWWgCSWBdXQTUHVUgHp91k36AknL1i1WfAtFFqd35JkG0SD
zDNIGBJ/gDchZMzIA0oeelrjcLf28gEsMlPEVUU3gzFbSCcoLyeGOEeNXLHFAq3f
kQqbf8pUlJZejUKMCzK/V/W917YgwObo0EP9eNb9Cm9DN/pDN5Nv/Nah/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAW40xTKgapYA/c9zsjmWCbUMgEMB8GA1UdIwQY
MBaAFLFppJcA4MO445p5EwyYelAAzP/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zOTA4MWYtNTAwMy00MWVkLWI4MGEt
M2ZhZTAzNGM0ODllLzEvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zOTA4MWYtNTAwMy00MWVkLWI4MGEtM2ZhZTAzNGM0ODll
LzEvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMwqsnB7
pzf40hr/Uk6t2UQaVWlyhEX0BxyPu2S+CgbeRYovDOuDwl4zYwna8V1T/t3M2D8Z
NaILWTBiGF+LzZTL9Qy5vBsndMBXgEePJ0hA/cod0F2dndjHO1Ugevq701oVMnRG
6ysF6x3ZL8dc/AYc29KCLUcqx1gyona1z/7c4OjrDEYgKRl/I8E7fW7NyPgTOwwH
Psn07ztB8fvzUed8Y8nXjNDgE6CZ0w0QNq2NCAhwac3dBFJ8yhJvbT0+awubANqk
qf4AtouD9BFPrleJSetP7fphbRnCxPw0JSwoutf0A4cJpFB+8EnwksLT8B7wpeck
sZ6uzthgk/tChw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:23:17 2026 by rpki-client