Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: vw4ROhaasSS/AZIZZyZtA+G3y4MBSuuecb0OPYbDKBM=
Subject key identifier: 9C:3F:58:96:F8:FF:BD:57:66:39:3D:2B:AD:D1:1A:4A:F2:5D:09:CA
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 01A090C596FEDCE5ABAE48635C45BD4F3B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 1679
Signing time: Fri 11 Sep 2026 14:01:03 +0000
Manifest this update: Fri 11 Sep 2026 14:01:03 +0000
Manifest next update: Sat 12 Sep 2026 14:01:03 +0000
Files and hashes: 1: 4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa (hash: T60YUCp6XTKgr3SfsDRJKBujmomI7/iUNH3bODa8p0c=)
2: Kp_7Ss82wN7SHwf_H1AfLXOJ5BQ.roa (hash: zD+GBHRWoLsSq0/1ni1tpgoZb/jI0/bGpFBuF1k1Rz4=)
3: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: SjgbabfKnFWlPMjQh3jm5t0Ch2hpqVWqmT3Ts8pGQE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:c5:96:fe:dc:e5:ab:ae:48:63:5c:45:bd:4f:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Sep 11 14:01:03 2026 GMT
Not After : Sep 12 14:01:03 2026 GMT
Subject: CN=9c3f5896f8ffbd5766393d2badd11a4af25d09ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:c1:bf:14:04:ce:38:cf:36:fd:ce:fa:69:
52:c6:93:d4:6d:22:e2:96:bc:f2:dd:83:7b:7e:04:
d9:e7:7b:70:40:62:08:2d:b6:1d:11:a2:b9:a5:e4:
bc:1b:7f:07:2d:b0:cc:f0:5e:0f:58:c8:20:2c:7b:
22:99:38:1c:a8:0c:82:03:55:df:da:c5:23:94:69:
ef:4b:a7:4e:0f:f6:7b:52:b7:bb:7a:ae:fa:01:a6:
f9:27:63:aa:44:9f:e8:5a:a7:9a:65:62:cb:b2:1d:
22:af:99:39:64:7e:77:4b:8d:c7:a4:01:e9:1e:89:
2e:2a:f8:91:42:ae:36:2f:8e:6c:86:a6:97:44:f8:
88:d9:05:60:fd:72:cf:df:d2:aa:3f:89:be:84:52:
13:30:1d:eb:55:93:c6:41:21:42:d1:c3:26:11:05:
35:ce:e3:ab:03:49:b9:cd:96:18:22:9e:1b:25:55:
49:8a:10:3e:1c:40:83:b7:cd:35:12:6f:e6:82:ae:
8e:c8:fa:19:95:7c:d6:8f:ee:97:8d:6d:9d:d8:23:
20:2b:06:95:7c:19:35:c5:85:84:1f:dd:98:bf:bf:
71:bc:80:00:44:e0:43:1d:99:af:ed:d3:d2:f5:d1:
18:de:c0:85:50:5c:b3:07:54:52:ed:b8:9e:8d:10:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:58:96:F8:FF:BD:57:66:39:3D:2B:AD:D1:1A:4A:F2:5D:09:CA
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:40:1b:5d:43:3d:38:0d:da:46:12:0f:5c:00:40:0e:6f:
c3:ca:9e:97:87:d7:43:ac:eb:1a:62:c1:7b:35:0d:05:a9:e2:
f9:75:9a:95:c6:a1:11:6f:36:7e:db:c6:d9:9e:45:0d:7d:19:
28:8e:49:c2:6c:02:70:f8:83:2b:2e:58:b9:9d:d9:e9:a9:72:
45:b0:bd:c4:98:a6:70:31:8a:dc:b9:2e:fc:38:07:90:e4:73:
6b:43:4e:29:74:5c:aa:af:12:4a:8f:6d:2e:d1:c4:7f:6c:4e:
a9:a2:37:0a:16:54:c2:5c:fc:ec:01:d8:f3:2c:75:fa:5a:0b:
8b:98:c5:a5:5d:df:a4:a6:61:80:25:3e:cb:0d:bb:39:48:0e:
0c:52:2e:ac:cf:22:66:1b:a2:70:b2:2f:c5:68:16:99:33:35:
19:1d:23:75:3a:02:44:34:f4:7f:ff:c2:5a:26:69:00:30:0d:
fe:fe:4e:dd:84:1d:4d:3b:64:c8:85:5b:f2:9a:79:82:0c:04:
51:51:e8:f0:49:4e:44:fb:13:10:b8:4e:4e:4d:e3:e1:c6:3d:
f4:d8:82:cd:ba:e0:0d:c4:a2:d1:2d:92:c4:88:da:fa:97:13:
29:83:38:9f:19:90:fd:22:57:ae:f2:d2:e0:bf:5b:85:b1:76:
8e:e9:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 21:01:45 2026 by rpki-client