Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: MU/UDh+sHWDIZH1Q8QbeWEdlVCXs7VK7WR5iSHPg+Nc=
Subject key identifier: 1D:4F:46:43:7F:52:81:7B:41:50:6B:D6:02:01:89:26:7B:C4:81:BB
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 019D3789C677C3697F0C29488C13621364C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 0C0E
Signing time: Sun 29 Mar 2026 03:01:08 +0000
Manifest this update: Sun 29 Mar 2026 03:01:08 +0000
Manifest next update: Mon 30 Mar 2026 03:01:08 +0000
Files and hashes: 1: IJKIXwWuN6-eGYq5G-LYUVnvIT8.roa (hash: 6DhTi3XwDZIX8aIPWMhc+0Awf+2qKC+vCqi+I2myhow=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: iBIF9g6v/m3SsFE/msk8+iCFSAUbm+SxR3TIwH/Nrd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c6:77:c3:69:7f:0c:29:48:8c:13:62:13:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Mar 29 03:01:08 2026 GMT
Not After : Mar 30 03:01:08 2026 GMT
Subject: CN=1d4f46437f52817b41506bd6020189267bc481bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:56:1e:23:b6:b8:a8:e1:47:cf:c4:5b:2e:
4e:a7:05:3e:6b:33:8c:34:31:85:91:70:8a:a6:74:
c0:4a:05:9e:46:9d:12:4a:4e:29:a7:30:12:a8:a6:
8b:8e:ed:56:86:53:3e:74:b6:5e:c4:3a:2e:61:3b:
75:f6:88:a8:a7:5b:9d:62:a7:9d:50:8a:3e:dc:8e:
87:fd:34:6f:60:83:72:f5:99:7b:2a:0e:95:27:09:
a6:1f:42:4f:56:17:e9:52:e1:69:dd:31:04:f7:50:
b1:2b:69:c3:1c:a1:9e:2e:11:66:b6:39:68:7b:a0:
ed:a3:36:ea:f6:80:5d:dd:cb:14:69:bd:50:35:ea:
0d:07:89:ae:a4:4d:93:a4:40:8b:06:bd:6f:fe:ac:
12:99:75:89:79:db:ad:2e:38:74:3f:4c:be:59:1a:
10:c2:26:51:60:e6:20:67:d1:b1:ac:56:e4:f4:33:
e9:61:2b:b3:7d:78:0b:d6:2e:92:19:02:c0:32:f0:
d5:01:71:79:fd:20:c4:16:41:a1:6f:54:fb:d5:08:
1a:51:ec:cc:a8:98:df:1a:59:9d:01:30:dc:f1:7d:
a9:8e:8f:3c:16:65:72:9a:f8:92:fd:2e:d2:96:c3:
fa:a3:64:28:21:ee:e0:ba:9a:9c:6d:ba:92:0a:99:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:46:43:7F:52:81:7B:41:50:6B:D6:02:01:89:26:7B:C4:81:BB
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:f7:29:c3:59:db:25:f5:9f:46:d0:75:f7:ee:4f:cb:ca:
c5:45:24:eb:46:2e:80:18:c5:34:f1:0d:00:35:16:23:8b:9e:
06:d0:e5:e6:79:f3:f6:55:c1:e2:98:48:e4:a7:b7:38:96:19:
41:c0:c5:8f:15:6c:e9:c5:f3:1c:56:b6:cb:36:ea:2a:94:d7:
84:a5:6a:8d:8b:14:9e:8e:8a:f3:64:0c:23:c6:cd:35:88:21:
ce:d8:1a:03:4e:9b:57:dc:ae:67:3a:ef:dd:82:49:ba:d7:f4:
fd:99:8b:8f:96:22:1d:25:fa:a9:bd:5f:f4:24:ea:20:2e:f9:
81:40:03:48:78:0e:ee:5d:8e:77:67:7d:26:55:3b:38:32:7f:
d4:a4:4a:45:c1:6c:d6:b4:c6:5e:a4:4b:76:72:a7:5c:5a:53:
22:95:a9:40:cb:4c:b1:bb:86:b2:33:62:0d:87:a6:ab:b0:4e:
e7:c2:a4:ca:11:bc:3f:0d:13:93:30:2f:a6:09:ff:92:1d:9f:
fb:00:0c:a4:1d:05:e4:fe:3a:91:4f:f9:76:1f:39:c5:44:c9:
07:44:ff:2c:c1:77:4e:cd:51:36:0a:c9:9d:8c:05:b7:4b:7d:
c0:be:87:c1:a4:69:23:55:36:29:a5:5d:91:9c:f5:90:b6:4f:
6a:70:22:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03icZ3w2l/DClIjBNiE2TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFkNDQ5YzdhZTRiZDIyYzZhZWU1ZmJkYzA4MjMwNDJm
ZmY4ZmMwHhcNMjYwMzI5MDMwMTA4WhcNMjYwMzMwMDMwMTA4WjAzMTEwLwYDVQQD
EygxZDRmNDY0MzdmNTI4MTdiNDE1MDZiZDYwMjAxODkyNjdiYzQ4MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctWHiO2uKjhR8/EWy5OpwU+azOM
NDGFkXCKpnTASgWeRp0SSk4ppzASqKaLju1WhlM+dLZexDouYTt19oiop1udYqed
UIo+3I6H/TRvYINy9Zl7Kg6VJwmmH0JPVhfpUuFp3TEE91CxK2nDHKGeLhFmtjlo
e6Dtozbq9oBd3csUab1QNeoNB4mupE2TpECLBr1v/qwSmXWJedutLjh0P0y+WRoQ
wiZRYOYgZ9GxrFbk9DPpYSuzfXgL1i6SGQLAMvDVAXF5/SDEFkGhb1T71QgaUezM
qJjfGlmdATDc8X2pjo88FmVymviS/S7SlsP6o2QoIe7gupqcbbqSCpmZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1PRkN/UoF7QVBr1gIBiSZ7xIG7MB8GA1UdIwQY
MBaAFLFq1EnHrkvSLGruX73AgjBC//j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTIt
MmI3ODgzMTIxNTFkLzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wNTEyNmQtNGFiNy00Zjk5LWEwMTItMmI3ODgzMTIxNTFk
LzEvc1dyVVNjZXVTOUlzYXU1ZnZjQ0NNRUxfLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3j3KcNZ
2yX1n0bQdffuT8vKxUUk60YugBjFNPENADUWI4ueBtDl5nnz9lXB4phI5Ke3OJYZ
QcDFjxVs6cXzHFa2yzbqKpTXhKVqjYsUno6K82QMI8bNNYghztgaA06bV9yuZzrv
3YJJutf0/ZmLj5YiHSX6qb1f9CTqIC75gUADSHgO7l2Od2d9JlU7ODJ/1KRKRcFs
1rTGXqRLdnKnXFpTIpWpQMtMsbuGsjNiDYemq7BO58KkyhG8Pw0TkzAvpgn/kh2f
+wAMpB0F5P46kU/5dh85xUTJB0T/LMF3Ts1RNgrJnYwFt0t9wL6HwaRpI1U2KaVd
kZz1kLZPanAigQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client