Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: 6gS02/8f231z6T9jsNxVxlLXuREuzA4xutcOteB1PtE=
Subject key identifier: 16:A1:0B:3A:CE:36:70:97:3B:E2:3F:AE:0E:FB:91:7C:AE:DC:68:38
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 01A18DC1A0DD4E22776D3210F4987F4E1D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 16FC
Signing time: Fri 30 Oct 2026 17:00:39 +0000
Manifest this update: Fri 30 Oct 2026 17:00:39 +0000
Manifest next update: Sat 31 Oct 2026 17:00:39 +0000
Files and hashes: 1: 4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa (hash: T60YUCp6XTKgr3SfsDRJKBujmomI7/iUNH3bODa8p0c=)
2: Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa (hash: zD+GBHRWoLsSq0/1ni1tpgoZb/jI0/bGpFBuF1k1Rz4=)
3: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: O0m1VAdtqPAU0nWnw/oXUw/FkDjhabLK9tOzisW7AyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:c1:a0:dd:4e:22:77:6d:32:10:f4:98:7f:4e:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Oct 30 17:00:39 2026 GMT
Not After : Oct 31 17:00:39 2026 GMT
Subject: CN=16a10b3ace3670973be23fae0efb917caedc6838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:b3:57:17:b9:b5:3e:e3:82:8b:2a:53:2f:
2c:5d:5d:9b:25:9f:79:4e:c1:d9:97:57:e0:2e:52:
35:71:62:9d:94:27:9f:05:55:65:a3:f3:07:b3:c5:
4c:2b:38:8f:a7:c7:02:9d:26:01:fe:da:3f:86:d7:
8d:a8:cd:01:e9:79:61:5a:4b:32:0d:d0:ec:b1:f5:
4d:b2:d7:37:46:78:b8:91:53:50:15:cf:8e:c0:38:
62:bf:00:81:8e:7c:f4:d8:d4:bd:7f:48:5c:21:0f:
c3:e0:b7:40:5f:04:a2:2c:5a:03:0b:f6:0b:69:19:
cf:af:bf:6a:dc:3e:a2:0e:1a:61:81:c1:ff:fc:fa:
9e:63:6e:69:59:4e:03:6c:a5:ce:61:19:48:65:8f:
b1:4b:31:2f:96:ec:b4:14:06:f9:51:81:2c:d1:38:
3e:5d:80:fb:2e:e4:40:ac:99:2d:e2:e7:93:31:a8:
94:67:e7:4d:16:f9:b0:c2:75:e2:ed:02:4d:4d:6a:
8e:dd:43:d1:5b:c2:92:9e:c4:23:78:d9:89:ca:07:
1a:2e:54:c3:0b:46:54:59:24:b2:61:01:76:76:f5:
45:c1:60:4e:60:5c:19:40:82:72:0d:99:54:94:96:
51:93:03:61:14:5e:4a:8c:af:69:25:bd:ea:d2:67:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:0B:3A:CE:36:70:97:3B:E2:3F:AE:0E:FB:91:7C:AE:DC:68:38
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6d:04:1d:d6:3a:de:49:f1:33:7d:00:e3:51:34:90:38:89:
88:a6:bd:de:86:60:49:ba:ad:f6:10:be:ad:a5:90:88:29:4d:
5d:5f:5c:cf:fc:9b:53:2c:36:08:7f:e4:24:5c:1b:c0:8c:01:
80:69:72:90:c3:a0:17:60:7a:75:5d:c7:a7:e3:5a:2c:19:31:
c2:d8:8f:a8:7d:92:4c:89:d3:d8:60:16:c0:15:33:3a:ba:d0:
79:96:33:03:26:4f:bd:c1:b3:e4:91:4a:6b:46:49:2b:96:16:
86:1b:21:70:4c:6b:4a:bb:20:c2:a3:24:14:be:a8:c8:5a:d4:
2f:14:d1:f9:7b:df:7b:89:e9:d4:fc:f8:05:10:1d:75:7a:88:
29:b6:05:10:92:42:33:d9:3f:47:9b:5d:b0:1a:63:17:e5:ed:
34:86:94:05:ab:94:61:4e:8b:35:35:a3:3d:5a:9d:3f:cd:c0:
88:df:b3:65:67:2d:73:42:16:8f:6b:d2:a8:3a:ad:55:4a:4a:
3d:ae:ba:7a:7a:09:16:f0:1a:22:01:ec:28:af:d4:84:44:9f:
f1:8f:f3:31:4c:bd:1d:9c:33:84:6c:d1:d0:02:91:3a:83:4c:
0a:ce:6a:08:a6:11:29:44:53:63:c4:e9:04:25:36:56:c0:0b:
7d:55:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:19:19 2026 by rpki-client