Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: CTruybuYxlqvenmQF05wF4DIYADTLDHhCO0SOpgFdjI=
Subject key identifier: 65:15:95:68:C0:83:52:02:2F:AC:2C:F4:28:1E:27:86:C9:89:78:45
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 019D2816E111152DABFF15FBFB14C9BA4521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: R1SSUdyYi8FPFo7Gl7IDnaH_We4.roa (hash: /TwMbXVoNhhIw3ynIKxMgNbq3+KCXSenwMtMk8zxol4=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: TJIqaN9dcrBlRd1TNly4aFChofQvoxisHGXQ9O0hTts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e1:11:15:2d:ab:ff:15:fb:fb:14:c9:ba:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=65159568c08352022fac2cf4281e2786c9897845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:a7:c4:76:9a:ae:5c:68:dc:12:df:3c:b8:
a3:55:a6:83:aa:61:e3:3e:d6:b7:15:53:1f:51:57:
65:fd:96:9f:b9:22:72:d4:69:23:11:89:68:21:59:
93:e3:34:6c:19:74:49:8e:2d:94:21:59:fe:4e:99:
3e:f6:11:a3:41:dc:04:9d:86:4c:1f:40:c7:24:86:
06:d2:6b:1a:95:5f:b9:a1:67:0a:2d:34:a8:27:3e:
1a:10:db:45:56:4d:e3:b9:86:4a:e6:1b:18:a1:ba:
7b:3e:1c:e6:78:b1:76:ce:21:49:0a:0e:e6:ae:af:
90:f4:ac:fb:c5:63:36:fc:2a:43:4d:2e:45:52:b7:
63:70:30:c9:a9:2d:77:52:ee:ca:b4:03:e9:bb:15:
d1:4b:c7:83:dc:d0:f4:88:9f:b2:06:ec:4c:98:dd:
67:9d:53:c9:3b:1f:3a:98:49:1a:9a:a3:02:89:cd:
4f:d8:c5:26:44:24:4f:4a:c9:8d:a8:3a:4e:f7:4d:
b2:b8:9e:fd:18:77:9c:a1:bc:ff:d1:a4:48:ff:32:
e5:ec:a0:4b:a2:8a:69:b3:bf:97:54:e4:89:ad:f0:
19:cf:0c:cd:1d:5a:96:49:83:cf:33:ad:16:84:88:
a0:1a:33:30:6a:cb:28:ae:53:0d:c1:80:2f:d5:cb:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:95:68:C0:83:52:02:2F:AC:2C:F4:28:1E:27:86:C9:89:78:45
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3e:fe:7a:e8:aa:3f:66:ad:4a:03:94:2a:bd:5c:74:fd:dd:
43:21:2d:15:9e:75:1e:6f:3c:b6:cc:fa:c7:4a:9e:26:ea:d6:
68:a1:ba:05:06:7c:5b:ab:48:ed:07:bd:38:a9:b0:c7:09:22:
c5:9f:d3:48:08:52:b2:60:53:7d:2f:80:77:41:87:7e:f8:31:
cd:81:63:39:04:a2:c1:49:7e:1b:ae:0c:75:18:54:81:9d:b1:
17:35:7b:8a:ba:8b:b8:9e:5d:4e:f5:19:47:4b:e3:96:56:18:
e8:71:50:27:5c:92:86:ee:4d:17:20:dd:8b:31:11:d0:c5:47:
09:e1:8d:5c:e7:14:0e:d5:86:4d:66:91:cc:87:ed:a6:8e:f4:
aa:8b:2b:25:26:cf:12:ce:cf:17:84:5e:73:0e:ef:c7:1b:c5:
54:78:14:68:a7:8e:3b:92:22:a2:f7:90:d9:b0:26:6f:9a:37:
4b:b1:da:1b:77:53:92:62:a6:3f:be:1b:b4:b8:97:a6:6d:48:
e1:22:8f:90:0e:24:4d:a7:2d:de:9f:85:2f:9b:00:8d:94:56:
34:d2:c1:d7:1a:22:46:dc:b0:0d:6c:49:84:49:b9:94:1b:9e:
57:ab:79:92:65:32:ba:2d:0e:2f:ae:54:72:ca:06:fd:d0:09:
41:c0:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:32 2026 by rpki-client