Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft (raw, json)
Hash identifier: 1DKMEL5YuB6AwZmbAeTPaPY0M0QKasF6rUxX7u+kK/g=
Subject key identifier: 8C:DA:84:EF:DA:68:70:FD:51:BF:34:CC:FD:13:7B:9D:9B:35:40:46
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 019D27049FDA17908F6F021AA9C32034D092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
Manifest number: 0656
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: _oQxFMzNlOznniUHUPZHi268kuQ.roa (hash: fDFJnV4r1JvMpZQX0gHhVdBTmacaoLVDqifzr7CLi/I=)
2: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl (hash: r1z83naF1KzUSE9izNBreZ7eQPEwsqh3U98aLHJCKGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9f:da:17:90:8f:6f:02:1a:a9:c3:20:34:d0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=8cda84efda6870fd51bf34ccfd137b9d9b354046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:db:14:31:9b:a7:b1:d9:9b:75:11:56:13:
6b:03:cc:07:3e:6f:f1:ff:01:4a:f1:ea:4f:88:df:
6c:65:7e:1c:d5:9a:85:f5:81:51:47:41:88:97:23:
18:df:81:4e:00:cc:69:f9:85:e7:4e:95:a5:5d:06:
22:7d:5d:1d:5c:43:f7:d0:2d:61:54:b2:61:ab:c7:
62:ec:82:70:5b:2e:59:56:99:05:3a:f8:27:0a:ef:
63:e6:a7:e9:92:ff:cb:31:84:f5:fa:dd:2e:b8:d1:
00:8d:ca:33:d7:8c:e6:a5:0f:13:40:d9:4d:0e:e9:
e9:fb:6f:08:8e:30:d3:c3:6b:a3:32:5d:c3:e2:13:
bb:ce:7d:94:e6:4d:d2:43:35:a9:a5:ec:2c:b2:ba:
f4:66:45:c6:13:b3:32:78:c7:81:c8:f6:5c:19:f9:
90:43:51:6e:6d:61:2a:75:86:4a:6b:9d:7a:89:ea:
59:ea:4d:f6:71:19:df:ec:99:43:f0:7e:11:2e:09:
98:9c:0c:00:33:82:de:0e:a6:90:43:36:aa:fe:bc:
c6:62:41:74:93:e9:00:d1:ea:08:07:c2:02:29:02:
bb:29:22:70:37:31:0b:78:7d:97:b2:c1:13:16:a4:
c6:ec:ca:31:f0:01:b4:af:51:35:e4:78:d6:ed:8c:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:84:EF:DA:68:70:FD:51:BF:34:CC:FD:13:7B:9D:9B:35:40:46
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7a:8c:f0:a1:5e:f1:c3:d2:35:c9:98:38:67:2a:41:4f:f7:
48:f4:0e:59:1c:58:33:4e:2a:a6:7a:4c:a2:35:af:5e:78:8e:
81:58:16:7a:1d:d5:28:fb:e0:01:c3:6c:c3:c8:a2:66:bf:2e:
09:a3:42:87:75:79:ce:48:2d:69:29:4e:2b:f4:ce:b9:d9:1d:
07:4f:ce:d5:8c:2e:b2:fe:d3:24:24:a2:44:01:6b:5d:4e:43:
5e:89:d5:04:d5:77:57:fc:c5:58:ce:f1:91:26:f7:da:8f:30:
c8:f6:55:d7:2a:a8:68:96:75:11:51:d6:a6:40:fb:27:c1:21:
37:1c:e8:fa:2e:a6:d6:9a:f7:97:10:f5:db:3b:8e:ec:8e:76:
4d:a6:3c:2d:86:4a:a6:e2:b3:9a:8b:a5:82:a0:37:59:25:d0:
0e:0d:ef:96:26:2f:4b:26:1d:82:5f:26:b1:d8:cc:ca:92:5c:
4f:60:40:44:b3:31:84:6c:fa:db:d6:a9:4c:8a:91:c0:37:78:
8f:81:9a:6a:1e:83:71:10:03:0e:ab:c6:a0:fd:69:2a:9d:50:
e9:8a:f6:a7:66:85:13:db:c2:30:77:55:ee:ed:f1:c1:d1:86:
77:1b:dc:b1:96:e2:0d:9d:d2:8a:6b:65:9d:07:ef:8e:a7:db:
3d:b1:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:50 2026 by rpki-client