Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: QQN0/9bZRMsLXlWrUgb6z7Iru47oNJNtey/BIoezpSE=
Subject key identifier: 3B:DD:72:AB:C4:8F:85:D8:43:E9:42:E1:8E:1F:5B:27:D4:BD:F2:2B
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 019D1E6F0AC654188827CA44ED5CD713F3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 1F
Signing time: Tue 24 Mar 2026 06:01:26 +0000
Manifest this update: Tue 24 Mar 2026 06:01:26 +0000
Manifest next update: Wed 25 Mar 2026 06:01:26 +0000
Files and hashes: 1: aNY_udjUjweJXPOJqKkLsSUQQEk.roa (hash: zB53YZr6NXhIUp/aEuccelkUG4JTzu5aMzPXoShO6FY=)
2: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: JosHk4EsxxfUa4ESqSa+O8YXkElLNvXk3WzRujML/aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:6f:0a:c6:54:18:88:27:ca:44:ed:5c:d7:13:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Mar 24 06:01:26 2026 GMT
Not After : Mar 25 06:01:26 2026 GMT
Subject: CN=3bdd72abc48f85d843e942e18e1f5b27d4bdf22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:6a:d5:b2:d1:0b:9c:26:17:f7:3a:67:da:
c0:e8:1d:fc:30:67:43:da:36:41:b2:09:3a:39:4c:
45:09:ca:76:9a:69:8c:c6:f5:01:72:36:6a:47:36:
a6:1e:66:23:35:37:c3:3b:80:19:d4:f6:22:80:47:
0d:25:fb:d2:8a:3a:f9:28:76:15:77:5b:c1:da:60:
39:bd:4f:c8:df:14:41:d3:46:41:95:d9:ab:8c:24:
c9:68:67:90:6f:27:7c:70:d2:64:48:6f:91:fd:3f:
7c:9f:3d:11:79:9a:b6:3f:ea:d1:1f:33:6d:91:84:
30:4b:b7:a2:08:ee:3e:77:48:35:a8:dc:ff:f9:ec:
d9:86:93:37:b1:b1:75:20:1c:5d:42:67:6e:e5:c5:
32:ac:1f:53:1f:65:2c:3c:9a:46:0a:1e:72:f8:b0:
81:d3:68:e9:ec:a2:58:a4:14:b8:7f:30:bf:fd:64:
2e:4c:45:45:08:5a:00:3e:a4:c0:49:35:da:89:cb:
3d:1c:4c:95:5c:a9:d8:a0:51:3b:53:8f:aa:d9:eb:
60:a4:c7:a0:c0:5e:be:71:a3:4d:3b:e1:7b:19:e5:
df:c9:e5:fd:c1:38:9b:0c:f1:93:24:25:cb:06:63:
53:a7:6e:39:55:61:4b:7f:be:39:ae:ec:9b:43:f8:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:72:AB:C4:8F:85:D8:43:E9:42:E1:8E:1F:5B:27:D4:BD:F2:2B
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:6a:f7:8b:b2:0e:2c:4d:d2:74:82:56:59:15:85:15:ce:
be:4f:77:3d:dc:1d:3f:1c:31:48:32:f9:cb:e0:9e:c0:d7:c5:
1d:48:d8:b7:63:dc:bb:21:8e:20:79:09:84:04:de:d8:28:0d:
14:a3:07:ec:7a:98:e5:1d:d7:df:61:1e:5f:b3:da:b0:5f:32:
78:9a:8e:c7:8d:87:2b:fc:82:0e:38:c8:05:df:f5:cd:01:00:
d0:cf:29:e4:1e:26:03:d2:99:2b:29:85:65:b4:ee:09:dd:39:
9b:05:ef:93:0a:50:84:f6:d9:d1:a8:03:1f:0a:8e:29:06:18:
a5:7d:6f:42:83:e7:64:0c:c9:67:87:a2:c9:c7:f4:b0:48:29:
af:c1:5f:3b:32:3b:47:ff:5f:78:64:8a:61:ef:ff:04:6e:14:
75:31:a3:c3:77:07:b4:a6:40:89:70:32:c3:8b:34:7a:c3:c3:
77:78:cc:0f:2b:53:6c:8c:91:c7:10:b2:c2:44:0f:68:be:ac:
1c:a2:9b:c4:74:56:a4:26:7b:c1:1f:cf:33:49:81:e6:1a:ea:
00:77:88:01:f7:b5:f1:e2:bf:6d:ad:5e:6a:8d:4c:c9:9d:e2:
39:5d:ed:b4:5c:9b:67:a8:3d:bc:4a:9a:a9:c0:cd:fb:00:76:
6f:21:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:54:04 2026 by rpki-client