Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: 2CB6T4jL+SM2DUGAPWFnLINDTo2ayoo9Fk7ZaTpeer4=
Subject key identifier: F0:0C:2D:70:C4:06:F8:8C:55:E5:1D:05:A1:78:6A:E9:23:8D:6D:47
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019FD9BDD6EBE92365DC5952CCC64058A618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 018C
Signing time: Fri 07 Aug 2026 01:02:04 +0000
Manifest this update: Fri 07 Aug 2026 01:02:04 +0000
Manifest next update: Sat 08 Aug 2026 01:02:04 +0000
Files and hashes: 1: 1h7bS52T8p0Qo0xIK6GUocpO5fY.roa (hash: 9RKPt8LzkVQ+IULuF/1Rfms3vMWB7oi0nwO0y4XGgFo=)
2: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: mxMAlcQfrn/Vd6WKk9pGGfekezFsxjARgGETdXiXIHE=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:bd:d6:eb:e9:23:65:dc:59:52:cc:c6:40:58:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Aug 7 01:02:04 2026 GMT
Not After : Aug 8 01:02:04 2026 GMT
Subject: CN=f00c2d70c406f88c55e51d05a1786ae9238d6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:e4:49:bd:a0:b5:32:16:24:5c:e4:e3:a9:
9d:6b:d0:6a:47:bd:b5:0a:49:41:21:a0:b6:26:a2:
c3:ce:9c:c7:d3:4e:ef:c0:f9:d1:7a:4e:70:56:a2:
a6:76:ac:9d:be:9f:a9:e3:fc:9c:76:96:67:5f:f0:
4d:ec:0d:0b:b7:8c:96:41:8e:f2:1f:c1:e2:ee:f3:
a9:07:30:a0:8c:dc:ef:b3:a1:6e:68:df:e7:36:5e:
05:7a:a0:04:e3:22:eb:41:0d:e3:3c:1c:f5:8c:34:
82:92:71:43:ee:4a:c0:78:9e:d0:84:34:d2:7b:d7:
8b:78:0c:55:fc:a4:8e:3f:8b:b3:1f:36:80:20:1b:
09:3a:08:59:28:6a:59:30:bb:88:80:eb:3a:db:69:
1a:0a:7f:f8:43:40:ae:13:ed:7c:e2:ae:d4:53:6f:
e7:1d:bf:20:26:17:5e:16:2e:96:f3:75:6c:1d:e8:
c3:14:67:3c:e4:62:a6:50:d9:fd:bb:b5:a4:ee:56:
67:f2:2c:b0:22:d2:38:18:ca:23:a6:fb:99:0a:44:
74:46:07:78:d4:67:25:bf:7b:34:73:a8:a8:f2:e9:
14:2a:ee:82:09:75:13:ea:f0:3d:e1:33:60:11:d7:
02:14:25:fe:ea:43:34:2d:17:cf:a6:10:a3:04:9f:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:2D:70:C4:06:F8:8C:55:E5:1D:05:A1:78:6A:E9:23:8D:6D:47
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f9:6c:6c:f2:f9:8e:d8:23:cb:d0:c2:cd:7b:2b:f9:09:18:
e2:1a:b2:85:a0:c2:9b:e4:ae:a3:25:7c:2b:32:3e:d5:7f:80:
35:70:64:85:f4:89:88:c7:54:a3:5b:53:4d:41:13:93:1f:0a:
0c:16:36:a9:fc:7b:df:bc:37:6b:6b:32:bd:20:72:87:ea:5c:
8b:83:45:e0:91:aa:dd:f3:c5:49:ad:a1:e8:c8:20:ad:13:68:
23:b9:49:b9:c5:c0:f7:9a:c8:c5:2e:13:bc:0a:65:3a:c8:4b:
63:2f:01:ad:7c:5d:03:2d:79:7f:08:a4:43:9e:e9:10:e8:38:
56:ac:15:f1:9f:3d:e0:2b:f2:56:86:4d:39:f8:0f:ad:3f:e4:
41:0f:97:c7:b7:e3:ac:db:5a:82:a3:6f:0f:92:1c:c2:8e:56:
11:9d:45:86:f4:fc:f6:96:96:b2:d5:a0:12:57:f6:26:0c:26:
27:4e:27:b2:28:28:bf:60:7e:9f:b3:83:2b:7f:26:ee:4c:55:
bd:60:85:08:d3:f3:74:73:c3:e4:5f:f2:16:35:8a:4f:db:03:
d9:e3:87:da:09:50:28:b1:af:6c:80:2c:70:4b:f5:b0:4a:d8:
80:88:83:61:cb:a6:fb:7e:81:8f:8d:28:a6:8c:1b:7a:89:58:
9f:fe:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:54:52 2026 by rpki-client