Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
File: swQMf0UcYU1-66gsMqOY6H3juMk.mft (raw, json)
Hash identifier: +FwN7bhnn72EGrhzrA94YiC571j3Pv/AxbblXQiN8Fw=
Subject key identifier: B3:3E:E1:15:55:8A:68:A0:DA:6A:65:36:DD:34:60:4F:98:15:DA:4E
Authority key identifier: B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
Certificate issuer: /CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Certificate serial: 019D39417E2C690E84893FBEA9F466EA7F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
Manifest number: 0F60
Signing time: Sun 29 Mar 2026 11:01:26 +0000
Manifest this update: Sun 29 Mar 2026 11:01:26 +0000
Manifest next update: Mon 30 Mar 2026 11:01:26 +0000
Files and hashes: 1: HfrLlB4hKtVM_U8ec59MAiKWNM0.roa (hash: vvyUfIqwDg/vVPERqoykgaE3kPhLAXeAghrpbLhVekI=)
2: swQMf0UcYU1-66gsMqOY6H3juMk.crl (hash: 7OrwiEIRq3RaVY1HFv+ne0peQX2UYeb0BrKuAAE2AtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7e:2c:69:0e:84:89:3f:be:a9:f4:66:ea:7f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3040c7f451c614d7eeba82c32a398e87de3b8c9
Validity
Not Before: Mar 29 11:01:26 2026 GMT
Not After : Mar 30 11:01:26 2026 GMT
Subject: CN=b33ee115558a68a0da6a6536dd34604f9815da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:95:39:bb:7b:34:e3:34:37:a6:7f:a2:52:
98:80:f5:c4:2f:f0:90:ff:ab:2a:69:d9:ed:20:c4:
3e:3b:b5:cb:9e:f3:df:05:2d:a1:ac:af:35:0b:4e:
d8:06:cd:a8:38:b0:91:8c:f4:9d:16:31:97:9e:a1:
e4:f4:f0:fa:d0:00:8e:8a:b8:40:be:97:f9:06:e8:
0e:cf:26:82:b2:a2:9d:c4:e9:bd:f4:04:4a:dd:5f:
a4:7b:bf:ea:3a:66:f2:94:a7:a3:ce:7d:72:f5:fd:
92:72:0f:0a:61:70:aa:83:41:68:ba:e4:bd:cc:c7:
8e:10:6c:33:14:32:62:15:2a:fd:f1:74:1a:ff:ca:
1a:ec:00:99:69:4f:87:8c:1b:86:5e:9c:97:61:ea:
49:a8:b3:c0:45:76:b1:af:93:50:d3:07:86:e2:5f:
19:3b:dc:8a:da:4f:c0:1b:ef:12:33:53:b1:7d:d9:
f7:ca:60:84:66:9f:9c:37:57:57:95:f2:ec:a3:fc:
5c:f7:96:f1:c1:8d:db:8c:5e:1f:96:4b:5d:67:25:
59:7c:4f:5d:57:97:f0:c5:ae:5a:59:b2:29:d9:61:
8d:9e:b2:fd:a5:d2:db:2f:7a:2e:ca:0e:66:a0:74:
d2:53:15:51:61:41:41:b9:c0:68:98:40:3d:b2:02:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:E1:15:55:8A:68:A0:DA:6A:65:36:DD:34:60:4F:98:15:DA:4E
X509v3 Authority Key Identifier:
keyid:B3:04:0C:7F:45:1C:61:4D:7E:EB:A8:2C:32:A3:98:E8:7D:E3:B8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swQMf0UcYU1-66gsMqOY6H3juMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/666e67-1546-413c-b6a1-5a78ba6091c1/1/swQMf0UcYU1-66gsMqOY6H3juMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:f6:63:21:25:f2:1c:8d:50:12:6b:2b:bf:78:b2:12:ea:
55:bc:42:d7:4b:b4:58:48:0e:b3:16:41:25:ef:43:d7:36:b4:
3a:cf:36:47:86:75:47:94:07:de:82:f2:7c:2e:fc:38:6f:d4:
ed:54:ec:ee:42:0d:be:35:67:a7:88:43:4e:ef:15:77:7c:31:
d7:23:87:66:de:20:b7:e8:78:73:5d:2e:18:0e:2a:84:fb:2f:
66:ce:f4:75:da:27:4d:7e:d9:9f:bc:ab:f1:8c:8c:c8:07:70:
78:02:75:89:f9:52:f8:c1:3c:51:05:1d:80:0d:b8:72:0d:40:
56:74:da:f2:88:ea:b8:46:5a:f8:23:c2:80:5a:50:19:ac:7d:
00:cf:cb:0c:06:76:dc:61:0d:e5:f3:41:dc:62:44:33:fd:1d:
be:e4:c8:d2:9e:38:dd:cb:ef:cc:04:01:c3:3f:10:b1:b5:e1:
25:24:0e:f1:65:06:85:7a:6e:82:37:28:65:69:58:a5:02:da:
e2:fa:2f:be:58:e5:c6:d6:58:18:5d:91:3c:35:e6:ae:a8:ee:
9c:28:ca:de:07:5f:02:e8:b0:ce:27:9a:88:26:86:be:87:44:
2f:74:5a:35:62:78:12:30:9d:11:b2:ae:fc:a2:8a:38:a6:d7:
0a:d7:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:29 2026 by rpki-client