Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
File: cswkIhQgt1-V7bnOuh93OPoXN54.mft (raw, json)
Hash identifier: MAJUjxIq1qKaB5LvXWioLz3jfUCUWD5KppmDfk53GCs=
Subject key identifier: 0D:FD:88:26:06:4F:D4:B8:CF:4C:6D:1E:1A:0A:ED:33:09:61:F8:49
Authority key identifier: 72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
Certificate issuer: /CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Certificate serial: 01A0C859263DA267B1C8CCE02EF8E821B383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
Manifest number: 0209
Signing time: Tue 22 Sep 2026 09:01:20 +0000
Manifest this update: Tue 22 Sep 2026 09:01:20 +0000
Manifest next update: Wed 23 Sep 2026 09:01:20 +0000
Files and hashes: 1: NIIcsX27k87ZvHHrcQDVVWFUF7I.roa (hash: XAZFhlhX49012CDEB0tGnNBN2ZuACEMyJePTLHi2yA0=)
2: cswkIhQgt1-V7bnOuh93OPoXN54.crl (hash: Gp1nv/60eIlPXMkFWNbyt2vW8+10E008gbbMUEX6wgU=)
3: zZuqtQC2zJWrlRTYcv01DuQ539I.roa (hash: e8aj2NBAUu8cQDdfA+hZFwxLSq3XvalKKas01wW1IyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:26:3d:a2:67:b1:c8:cc:e0:2e:f8:e8:21:b3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc24221420b75f95edb9ceba1f7738fa17379e
Validity
Not Before: Sep 22 09:01:20 2026 GMT
Not After : Sep 23 09:01:20 2026 GMT
Subject: CN=0dfd8826064fd4b8cf4c6d1e1a0aed330961f849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:99:70:e2:68:c4:a2:e7:91:1d:e7:56:52:
0e:0b:36:b3:19:df:e5:28:6d:3e:04:03:9e:fa:d9:
18:52:ec:37:1f:64:35:2c:da:6b:83:5a:09:96:9a:
60:41:1a:f6:13:62:be:ab:59:b3:0c:a0:95:39:b7:
63:46:c7:02:14:b8:96:6e:2d:17:b6:87:78:a6:d2:
f7:64:e9:b0:65:d0:18:21:36:34:93:50:22:5a:e7:
b1:93:4e:6b:fc:b7:64:c9:3f:e5:1c:ab:06:3b:2f:
b6:73:19:b9:9f:1c:62:d5:27:cf:94:2d:f7:c7:5d:
b3:e6:0a:76:47:c2:ef:90:4d:79:1b:b5:cb:76:63:
3d:e4:96:7b:46:e7:fd:f1:52:30:ea:8f:4a:cb:92:
7e:e8:ba:ba:f3:23:c4:fb:72:6e:9f:d0:1d:d6:c2:
7e:0d:0f:22:e7:10:20:3a:46:ab:9c:58:8c:6a:4a:
c5:92:2f:4e:cb:b8:9d:b4:39:e1:65:c4:f7:23:92:
18:59:7f:04:4a:8a:ef:9c:84:bd:a9:e0:8d:ed:48:
d9:f8:d0:a7:17:7a:d1:68:7c:a3:81:59:76:44:8e:
1f:25:13:2a:e9:4a:8c:42:3e:b7:26:df:84:b5:c9:
49:1e:34:45:fb:02:e9:d7:45:39:9c:64:9e:c6:9c:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:88:26:06:4F:D4:B8:CF:4C:6D:1E:1A:0A:ED:33:09:61:F8:49
X509v3 Authority Key Identifier:
keyid:72:CC:24:22:14:20:B7:5F:95:ED:B9:CE:BA:1F:77:38:FA:17:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cswkIhQgt1-V7bnOuh93OPoXN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd4df2-b781-4348-bc54-db387c7801e8/1/cswkIhQgt1-V7bnOuh93OPoXN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:51:77:d2:eb:ba:a3:3c:37:df:9a:f5:3c:7d:29:5d:dc:
86:39:3d:41:b5:fc:d4:b6:6d:ee:ba:e7:54:ff:ec:3b:fb:ae:
1b:7d:48:54:a7:2a:6e:09:37:f3:97:37:22:ac:33:32:0e:0e:
e3:7c:dd:0b:7c:6c:53:be:b2:9d:ca:60:46:16:b7:4c:ca:6a:
0c:10:1f:85:2c:3d:eb:e2:2e:60:0a:ce:36:fb:da:d9:3b:d5:
27:91:cf:63:83:9d:8c:f3:56:41:cc:bb:0e:bc:a4:32:7a:ac:
13:2f:31:6b:64:8d:5f:e8:b7:68:bf:14:1e:2c:69:80:6e:0c:
48:7e:6f:92:f0:84:85:e2:a2:14:25:e9:7b:df:e8:81:32:5f:
91:a2:43:db:82:95:86:cb:a9:98:b1:29:3f:4f:f0:57:dd:29:
73:19:19:2d:a4:25:c4:80:58:9c:22:1b:37:49:0b:91:cf:74:
b9:a7:21:bd:81:cd:e1:a9:4d:13:d2:21:6a:13:c9:36:44:4f:
33:4e:40:b3:0f:f3:8d:dd:76:6c:a7:2f:59:5d:49:47:03:4f:
35:a2:b8:51:73:e9:b1:40:5f:11:c5:5b:c7:d7:cc:3b:6a:4b:
94:9e:dd:d1:62:9b:44:d4:85:b1:1f:f8:63:7a:9e:ef:54:81:
7e:be:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:24:02 2026 by rpki-client