Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: G+irveAKEKr1yHAJbn/PB8YnLUR/6Y568MKfU8y753g=
Subject key identifier: 41:4E:A0:77:C1:C4:28:ED:3D:7C:1B:11:CB:84:16:51:78:6B:89:CC
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 019D284D6FCBB24B21E7B83035ACCA3A28AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 110D
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: 0WuWrczZKDyJ7R3F-ygi1tUDprU.roa (hash: I9T3o7zp+QPhUZLHuzT1L2fbLCkg093j0anbvRpSNXk=)
2: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: l4VbzJdFgmTI/vCfTT//wBK03BM5Gk9oKd60FrqPEUk=)
3: T9G0EsB9xNpRRqACBtjCNxlrY58.roa (hash: O8JhPnTVM6Wx6QaGCJoBS17fGqbeozAvQWWzsMQhij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6f:cb:b2:4b:21:e7:b8:30:35:ac:ca:3a:28:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=414ea077c1c428ed3d7c1b11cb841651786b89cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:16:fb:f7:43:30:ce:83:49:4a:1f:30:14:
44:7f:1c:20:c8:e8:78:50:1c:c5:28:4d:7f:f0:88:
1b:56:3c:73:4d:60:b3:11:bf:87:6d:ba:8c:ff:8a:
8c:32:32:33:70:1e:c6:c8:cd:2a:02:59:e2:a9:e6:
5f:1c:b1:e9:11:10:e0:3a:74:e6:56:1e:90:ad:22:
f8:0c:d6:9c:38:5d:4d:5a:53:4e:ac:a0:95:16:6e:
85:52:13:a9:84:0e:40:0c:70:96:62:f4:cb:7b:57:
bb:b6:de:72:ce:50:9d:ea:8f:8b:f4:d0:54:87:6f:
91:d3:c2:9d:49:71:fe:d7:a9:a7:ac:07:a8:2c:2c:
08:55:50:ab:af:05:49:fd:4d:d5:56:e2:91:b0:78:
d6:0f:c0:9e:b9:f4:40:34:a7:cf:46:d2:ef:a4:82:
bf:54:b0:ca:fd:81:98:69:d9:8c:67:18:06:72:f0:
e2:e7:55:4d:65:15:45:4d:d2:75:4d:e4:ea:22:05:
55:c2:b3:b9:d9:c1:6b:93:db:3e:4b:53:00:ad:ff:
e6:f8:13:52:90:e8:36:4d:2f:94:cf:80:bd:37:cb:
f7:92:21:cd:4d:b0:01:13:de:e1:f5:a6:5e:13:39:
9c:63:e5:8f:a4:d3:7a:e1:7d:95:6b:4c:70:16:87:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4E:A0:77:C1:C4:28:ED:3D:7C:1B:11:CB:84:16:51:78:6B:89:CC
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:b6:87:50:40:10:19:0b:a2:9c:14:69:56:5f:4d:9a:ea:
e2:ad:16:f5:1f:ad:0d:d9:5b:8a:30:b6:5c:ea:1b:5d:39:98:
e3:85:1d:d8:e9:94:51:5a:f6:ec:68:a7:40:cf:8c:37:81:42:
80:d5:12:b4:3f:1f:5b:b2:15:4a:54:be:d1:a7:bd:ee:d8:46:
aa:de:c9:43:b3:76:b7:17:84:f8:cf:75:72:55:2b:27:cf:60:
00:10:c2:b1:ca:49:b7:55:2e:96:d5:c0:2b:68:46:32:e2:94:
0c:ee:de:9e:68:c8:60:e5:9b:88:d4:b4:56:bf:69:a1:be:fe:
a3:2a:d7:53:ff:48:0d:42:4b:c1:1e:46:61:85:8a:5a:41:8e:
93:1a:dc:a9:98:78:9a:ce:4f:a3:31:5a:82:0c:9e:b1:9c:e7:
2b:19:4b:a7:8c:94:09:06:23:a2:1f:db:24:45:0a:31:d8:a7:
74:bb:dd:bc:99:54:39:c8:a5:28:5a:8a:c7:b1:83:f4:b8:fe:
cf:6a:0a:08:6c:80:16:ab:4b:f7:64:a1:40:fc:2a:d5:eb:8e:
48:fa:fd:fb:a7:59:6c:a6:bb:86:6a:4c:9d:af:ea:df:70:c8:
5d:53:45:6e:44:22:a4:1a:d9:ef:f2:6b:b7:1f:35:f2:80:53:
0c:1c:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:22 2026 by rpki-client