Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: IRgLmgo3CNzEA0zxBiwlKyY2ifNZ7X/DW/ymB44MGno=
Subject key identifier: 69:BC:85:01:2B:3A:A7:28:C4:9B:C0:B2:5F:8B:66:DD:25:56:E8:E6
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019E06D2237FFBC2161D10778EE2E8F64C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 9A
Signing time: Fri 08 May 2026 09:01:35 +0000
Manifest this update: Fri 08 May 2026 09:01:35 +0000
Manifest next update: Sat 09 May 2026 09:01:35 +0000
Files and hashes: 1: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: tqBPNfGtWSUGHwnMiHh2Q36BQC45QzQCwE2z2W/Vu2s=)
2: l_OtXNVrTIJOg1BB7RzWG8ARoM4.roa (hash: Mw4PK7cmibSwEXPETc3oNPZi0T+bvVwJzq8QuAMIqGc=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:d2:23:7f:fb:c2:16:1d:10:77:8e:e2:e8:f6:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: May 8 09:01:35 2026 GMT
Not After : May 9 09:01:35 2026 GMT
Subject: CN=69bc85012b3aa728c49bc0b25f8b66dd2556e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:4e:9a:7c:82:bf:52:8a:61:8a:84:34:a3:
6d:07:f5:c6:ec:9c:ed:9c:29:2b:e5:87:09:4d:86:
99:ef:66:30:1b:ed:fe:36:0b:b3:48:56:26:77:e1:
8f:87:c4:64:b3:26:8b:33:42:37:6c:4b:5c:8d:ee:
4c:4e:d5:16:0d:6f:a7:ed:83:d9:6b:0f:b1:74:46:
99:f1:5d:46:a7:25:f8:01:35:e2:9c:7f:90:6f:df:
71:78:02:84:5f:45:05:3e:11:33:1b:a5:eb:75:35:
f0:22:25:ac:d5:ee:cd:5f:b4:2d:61:23:0d:2b:ac:
b0:c5:93:34:5d:76:fd:40:29:78:79:42:2c:8d:dd:
df:ec:73:8a:ea:f8:8a:49:81:9c:4c:15:54:fe:a0:
62:9a:3c:30:7c:42:2b:35:9a:6a:d7:de:39:7a:77:
0c:95:87:60:b2:2a:ea:e0:63:be:33:e5:e7:f3:a9:
53:27:7f:b4:11:79:0f:21:b2:39:fa:a2:e2:e2:59:
bd:cf:75:1b:2c:cf:a1:99:df:2c:3e:19:f5:67:f1:
c1:38:81:18:33:83:48:cc:7c:fd:67:f5:2f:43:39:
10:47:32:20:fc:1b:2e:62:39:fc:82:2b:93:27:e2:
a3:89:2e:14:57:ec:b5:46:22:aa:72:59:da:03:51:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:85:01:2B:3A:A7:28:C4:9B:C0:B2:5F:8B:66:DD:25:56:E8:E6
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9d:10:68:27:f0:23:97:48:eb:ec:e0:2d:b5:7e:06:f5:bb:
18:a8:00:94:32:e5:22:cf:df:bb:3b:f0:86:41:7c:58:85:9a:
94:f4:d2:6c:a6:59:25:d0:2d:b7:ed:e5:0c:07:54:ad:69:34:
47:7b:73:fa:62:20:57:69:b2:94:32:96:f9:af:d3:cb:0e:41:
1a:fa:c3:f8:f2:f5:4c:a3:99:b5:54:a4:4b:a9:32:9d:c7:eb:
65:8a:f7:a5:7b:9b:8c:d5:af:5a:82:52:71:3f:d3:79:0f:6b:
ec:39:9a:99:5a:cc:e0:45:0e:13:9e:2b:5e:da:df:55:da:a6:
a3:df:a1:89:84:a2:17:ea:ae:3a:22:65:01:44:2a:b6:00:ca:
df:53:6c:30:9b:95:fb:e4:49:43:70:c2:64:17:76:1d:7c:4d:
61:a3:e8:40:0a:01:68:13:db:73:ad:47:2a:09:62:fb:a6:a3:
59:e3:93:f1:55:be:d8:09:24:6b:a5:90:0b:02:3d:03:e8:66:
25:ab:14:b7:cb:01:6c:b8:e2:ab:2b:a8:82:f3:37:5b:9f:2f:
3e:24:04:7d:fc:67:89:30:58:85:72:06:c4:d0:e8:be:be:dc:
d1:38:ea:71:f1:78:3a:ae:3f:86:b6:8b:6e:9d:55:4a:03:3f:
9b:06:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 20:11:01 2026 by rpki-client