Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: snTuXiOXj1ytf7qYGMjvLv8ZG5r/mELgmA9u8dQJxVg=
Subject key identifier: 66:C2:49:BE:31:6A:92:EE:9B:AE:C6:B5:86:67:2B:7A:74:22:66:45
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019FA14E0273AB54D599F0FE130D62DD1CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 15FD
Signing time: Mon 27 Jul 2026 02:01:11 +0000
Manifest this update: Mon 27 Jul 2026 02:01:11 +0000
Manifest next update: Tue 28 Jul 2026 02:01:11 +0000
Files and hashes: 1: 4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa (hash: T60YUCp6XTKgr3SfsDRJKBujmomI7/iUNH3bODa8p0c=)
2: Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa (hash: zD+GBHRWoLsSq0/1ni1tpgoZb/jI0/bGpFBuF1k1Rz4=)
3: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: 0EdgW8C427HkErWWyYjtN6Ag5TJ09hXfqeMFdi1EnA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:02:73:ab:54:d5:99:f0:fe:13:0d:62:dd:1c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Jul 27 02:01:11 2026 GMT
Not After : Jul 28 02:01:11 2026 GMT
Subject: CN=66c249be316a92ee9baec6b586672b7a74226645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:29:8d:b8:0d:4b:d9:aa:06:de:eb:c1:04:
2b:ca:dd:87:9d:71:55:4a:1e:c1:da:d7:58:39:d5:
92:79:9b:4a:a0:ca:3c:e9:b2:58:90:74:b1:37:85:
b4:84:a6:45:2a:2c:f4:58:ea:d0:66:e2:29:2d:01:
69:98:7c:2d:1a:5f:8b:e7:a1:a4:96:7d:82:f0:64:
e5:28:20:3a:43:f7:57:c7:a6:4b:34:1e:2a:2e:2f:
40:23:9e:fb:b0:72:c5:da:ff:c4:3a:32:a1:7b:48:
e2:34:6e:2d:1f:b8:09:4b:7d:5c:aa:70:6d:90:03:
95:a7:02:76:21:90:69:1b:fc:d0:14:44:73:b8:1f:
d1:b3:e5:5d:6c:64:10:80:81:13:00:53:9e:aa:0e:
7d:6b:88:b2:f8:32:3b:00:a4:d3:e0:d1:a4:85:a7:
57:87:91:4b:66:de:62:9d:ab:f7:11:35:29:87:65:
88:52:71:1d:28:f2:81:73:da:c8:70:ba:c3:39:55:
ae:01:b7:c6:f9:cf:6c:da:54:e0:84:d8:5b:b9:c2:
2a:4f:5b:ad:9b:6f:b6:57:c2:22:22:5e:0a:46:90:
c6:70:e6:6a:f4:eb:c8:3b:7a:f5:6d:e9:13:5a:a5:
d7:df:c6:8c:9b:3d:e3:41:56:60:a8:3c:68:d0:15:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:49:BE:31:6A:92:EE:9B:AE:C6:B5:86:67:2B:7A:74:22:66:45
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4d:b2:ab:99:6a:b9:97:f0:38:53:4d:7d:bf:9b:3e:d5:47:
1b:ce:28:4c:b7:59:e0:ff:95:55:fe:54:2b:08:e8:64:0e:7b:
52:b6:dd:35:c6:fd:a4:f3:e6:6e:7e:5f:ef:ee:6b:e6:6d:6a:
26:62:86:30:0f:2b:69:06:34:16:80:22:b6:89:5c:0e:13:0e:
08:18:6d:9f:d7:2a:c7:c3:5d:d5:66:f5:a0:69:ec:09:8a:10:
f3:09:79:71:e4:e5:08:03:28:d7:68:20:e0:61:16:10:85:f0:
67:be:be:f0:6e:38:a9:bc:d1:6c:25:00:30:bf:d5:4c:9c:0c:
74:3b:21:1c:fe:6d:a1:19:61:81:08:2c:57:57:7b:04:01:84:
71:04:3e:db:38:0f:80:fa:2d:b5:ac:2a:3f:4e:f6:3f:a9:67:
52:ae:09:b5:df:bd:21:e1:98:08:07:15:29:94:5b:3e:57:59:
79:5c:4d:8f:d6:d9:b3:09:1e:59:ee:53:c9:8c:d4:b0:67:b1:
3b:c0:3d:6a:a0:82:98:51:ff:64:4e:ea:0f:e6:a8:3f:c3:9f:
28:38:ba:fb:b1:a5:14:68:33:6f:c6:82:62:67:37:d8:19:fa:
48:1d:4e:4a:c3:02:40:de:8e:08:12:f9:56:fc:75:d7:8a:d1:
be:82:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:59 2026 by rpki-client