
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
File: SwGwhRt_iepLsTKn9TlbnSrKHAI.mft (raw, json)
Hash identifier: Mq0gIks5gi33ZWrGwzkdzkSM+feRjJGPKqMfwBPieXc=
Subject key identifier: C7:A9:49:4B:83:AA:0F:7C:95:7F:C6:24:C5:E6:61:AF:03:B2:BD:8D
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019DD01A154195EB6F4B48950E751A370DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
Manifest number: 150C
Signing time: Mon 27 Apr 2026 18:01:03 +0000
Manifest this update: Mon 27 Apr 2026 18:01:03 +0000
Manifest next update: Tue 28 Apr 2026 18:01:03 +0000
Files and hashes: 1: P41_d-OKREkue8A7QbG6bWS93yg.roa (hash: 4T63cKmKfkswxOAQk6ynb6AaDZKx66mFM+yXG2XkVCE=)
2: SwGwhRt_iepLsTKn9TlbnSrKHAI.crl (hash: +D7YPAYJ4P3wkEZwuRMi6m6WjLM7v3Vyg79Ml4EjA5M=)
3: Z4XnKcMRawaQSe5mqHxSQObPnf0.roa (hash: 4Mf7OgITGWZNLNJ26SsOplCcXWIE2LHFBqgYKYBiyDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:15:41:95:eb:6f:4b:48:95:0e:75:1a:37:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Apr 27 18:01:03 2026 GMT
Not After : Apr 28 18:01:03 2026 GMT
Subject: CN=c7a9494b83aa0f7c957fc624c5e661af03b2bd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:2a:c7:66:9c:50:54:ce:38:03:a5:c5:e5:
d9:16:f1:60:3f:17:8f:81:9e:57:86:ba:fb:09:60:
43:b0:c9:bf:e4:bf:f1:18:d8:0f:1b:55:0d:e0:0b:
6e:33:cd:50:a5:a6:2e:a6:7a:8d:36:dc:15:d9:90:
bd:97:f3:bf:ad:42:f7:33:79:68:49:4e:e8:53:9c:
60:9c:ee:bc:24:26:15:95:25:74:76:5a:43:49:5e:
f7:9b:91:c3:5c:61:7f:5d:d6:87:93:c6:f5:c1:25:
56:31:d5:5f:40:08:dc:f1:be:1b:73:87:a0:d4:09:
20:07:82:44:d8:64:26:6b:49:3c:89:d1:ef:46:4f:
78:73:ac:dd:b5:2e:3a:02:46:b1:92:cc:e9:c7:28:
db:d4:b2:d0:11:50:28:ac:ba:5f:0e:0b:78:cb:ab:
c6:3f:62:c5:5b:a5:3e:f6:17:8b:47:6b:16:73:41:
6b:a1:6a:66:e8:ee:5f:3e:aa:e4:7a:2b:77:59:62:
48:9f:4a:c0:d0:a2:46:d9:c0:8a:c9:32:73:ca:c8:
7d:65:87:6c:6e:7f:83:e4:f6:43:b2:4b:de:38:0b:
e9:45:83:5d:8f:f2:20:b5:3b:20:8d:9e:9c:01:60:
f1:36:eb:a9:96:b7:17:20:f7:ab:27:84:ca:1d:93:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A9:49:4B:83:AA:0F:7C:95:7F:C6:24:C5:E6:61:AF:03:B2:BD:8D
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:60:69:d5:9d:91:7a:fb:91:38:ed:31:3f:ea:71:88:9f:fc:
4f:7d:19:84:41:a3:7b:ec:5d:07:e5:b8:48:f5:14:0a:8f:b2:
dd:75:25:3a:7c:73:d9:4d:25:be:14:9d:14:15:e0:36:2f:f2:
2c:33:c0:04:c5:0c:f5:3f:df:73:f9:82:ac:64:36:66:2a:01:
89:8c:4f:80:3d:f2:05:08:3e:56:42:fa:c9:00:95:66:97:75:
79:37:77:63:ea:aa:21:99:a5:25:97:40:52:72:4c:32:8a:28:
cc:80:28:36:98:2d:0b:28:20:c7:3a:76:9c:62:90:bf:40:8f:
7c:d6:b8:c9:da:20:2c:6a:0c:d5:e6:00:62:b2:2f:29:69:c5:
60:49:ca:f7:6d:3a:5a:b1:6f:dd:01:fa:1d:cd:8b:58:b0:b0:
e7:67:f1:57:0f:45:1f:68:e2:7e:15:6b:42:2c:75:9b:27:ba:
45:3d:d3:a8:79:de:59:dd:8f:d8:72:fa:10:d4:0e:b8:de:e0:
cf:9e:6c:65:18:5d:55:8c:9c:ac:fe:33:5c:c3:eb:26:65:89:
4b:31:4b:b3:31:74:ce:0c:77:fc:ad:81:60:cd:c6:c1:15:e1:
1c:6b:84:8b:bc:8e:68:8f:08:76:23:34:26:de:22:23:3e:f7:
0a:f0:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:27 2026 by rpki-client