Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: Oo2vEzKq3xFlvqZkyCskl2eI7lInRhrpc4a/yso56Ss=
Subject key identifier: 1C:60:5B:39:A3:0A:B7:90:0A:AA:7E:9E:A6:ED:30:42:57:D3:6F:1A
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019EF07E4AC0D4F783FB72304EDC1865E0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 0113
Signing time: Mon 22 Jun 2026 18:01:08 +0000
Manifest this update: Mon 22 Jun 2026 18:01:08 +0000
Manifest next update: Tue 23 Jun 2026 18:01:08 +0000
Files and hashes: 1: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: y9uij9130XG8iO49K2fELgrN/D6R8sLKCj8KBN340eo=)
2: l_OtXNVrTIJOg1BB7RzWG8ARoM4.roa (hash: Mw4PK7cmibSwEXPETc3oNPZi0T+bvVwJzq8QuAMIqGc=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:7e:4a:c0:d4:f7:83:fb:72:30:4e:dc:18:65:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Jun 22 18:01:08 2026 GMT
Not After : Jun 23 18:01:08 2026 GMT
Subject: CN=1c605b39a30ab7900aaa7e9ea6ed304257d36f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:39:a7:ea:13:7d:9a:63:7d:09:a6:be:ab:
e9:dd:4e:99:3b:1f:b2:86:8d:bf:7e:89:b3:0c:95:
40:bb:cb:5d:66:89:43:21:e6:ba:14:ca:dd:f4:e6:
a6:b9:fb:02:7b:b5:93:29:d9:ac:15:00:54:4e:5f:
1d:e7:5d:0e:98:2d:9e:4f:ce:c9:44:d5:66:04:62:
ad:e0:f6:e7:df:5b:94:1a:ed:79:11:b1:9f:33:66:
17:1c:87:9e:a6:1d:d3:a7:fe:2f:9f:33:ac:fc:e8:
d9:ae:8a:4a:79:a6:98:c1:7d:f2:8f:58:99:b5:d9:
bd:78:f7:90:a6:c2:11:0f:bf:53:3f:8b:a1:08:26:
ab:32:62:1d:fa:0d:61:41:f2:0b:15:d4:af:80:28:
21:df:c2:ff:5a:60:11:5c:f4:ee:0c:fb:cc:01:84:
0c:f1:0a:b7:e7:56:3c:1d:80:36:70:85:39:88:4c:
d6:86:91:38:ce:92:12:60:3c:5b:50:7d:2f:ce:0e:
bd:24:4b:c4:05:98:e3:05:90:fe:dd:ab:af:07:65:
ca:6b:29:ce:f2:c1:f9:25:78:00:55:6f:6f:04:bb:
c9:e8:a3:05:4b:2f:8a:c0:8d:4c:d8:66:09:59:ea:
ab:c6:18:da:4c:05:7a:51:8a:2b:3c:8f:82:73:9d:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:60:5B:39:A3:0A:B7:90:0A:AA:7E:9E:A6:ED:30:42:57:D3:6F:1A
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c4:6f:e0:02:60:4b:e6:70:9c:e5:d1:85:19:85:e4:5f:13:
1b:b4:b7:ab:8c:63:57:ba:8c:f6:4a:61:c2:b2:56:c2:8a:42:
0c:11:1f:ba:bb:69:ac:d6:19:17:8f:0d:eb:fe:58:35:36:57:
5c:8b:c4:60:e5:88:a3:fc:0c:bd:8f:fc:a3:52:f9:d8:98:c8:
49:10:83:17:2d:76:0b:58:bb:18:13:ea:cf:41:47:10:b2:0c:
ef:99:0f:17:92:dc:52:76:eb:e5:ed:e0:85:1c:73:12:04:1a:
29:b9:58:cc:f6:40:d1:52:36:4c:41:fd:d7:26:af:a9:46:4e:
10:8a:56:5a:13:4b:ff:10:76:22:ac:58:48:b7:6e:97:61:a6:
c9:c3:83:6f:5e:8d:7a:79:20:d6:64:13:ec:ec:3a:52:68:d3:
60:bc:24:ba:90:c1:be:24:6a:bc:0c:a7:75:2d:af:b9:25:22:
ed:7f:be:93:a0:f1:fd:25:fe:33:ad:16:e5:ec:f1:15:99:9b:
06:1b:b7:13:d1:e9:b2:94:50:a4:9f:c4:5e:83:f8:ce:be:44:
c8:0e:55:4e:c1:23:cd:0a:4e:86:67:2c:a2:0f:1f:60:54:6c:
30:8f:fe:f0:f5:21:c0:8e:cd:2e:ad:97:d5:fa:4b:22:b6:02:
33:53:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 23:30:33 2026 by rpki-client