Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
File: si5iV8EWb28s9CgOB6wMrLFfqd4.mft (raw, json)
Hash identifier: w9VynGrI+zAeeKy3xdib3/OT2XmWJioPD1QdJeDfyPg=
Subject key identifier: 4D:11:A8:97:93:90:CE:80:30:09:AA:8B:8D:61:6E:DF:6E:8E:31:88
Authority key identifier: B2:2E:62:57:C1:16:6F:6F:2C:F4:28:0E:07:AC:0C:AC:B1:5F:A9:DE
Certificate issuer: /CN=b22e6257c1166f6f2cf4280e07ac0cacb15fa9de
Certificate serial: 019D2C98012A96FA65988FA7552B8267F990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
Manifest number: 29
Signing time: Fri 27 Mar 2026 00:00:52 +0000
Manifest this update: Fri 27 Mar 2026 00:00:52 +0000
Manifest next update: Sat 28 Mar 2026 00:00:52 +0000
Files and hashes: 1: si5iV8EWb28s9CgOB6wMrLFfqd4.crl (hash: rJpZIWt0/RligR4Ijpqui3XVjBkvHG4CUN+LTYgezR4=)
2: to7i0Ci5lQH6CsTqpByICqd4qQE.roa (hash: eMPNYL14+MIRFte38ZNDEn2SBRIVaM+X88x35MWdRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:01:2a:96:fa:65:98:8f:a7:55:2b:82:67:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22e6257c1166f6f2cf4280e07ac0cacb15fa9de
Validity
Not Before: Mar 27 00:00:52 2026 GMT
Not After : Mar 28 00:00:52 2026 GMT
Subject: CN=4d11a8979390ce803009aa8b8d616edf6e8e3188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:64:37:71:df:5e:f9:e5:9a:36:74:0d:a1:
0a:7c:bc:64:e2:42:df:7a:3d:74:a7:56:da:a5:ed:
b4:f1:d1:7a:f9:23:ef:2f:cd:65:44:5c:38:73:bf:
75:67:b6:89:6f:c6:34:f6:dd:96:26:15:72:53:2b:
fa:dc:65:a0:f9:e9:d3:cf:39:2d:bd:f1:a9:39:95:
c2:0a:8b:2e:55:04:e0:44:92:57:3b:bf:37:e6:68:
36:4d:98:26:fa:0e:79:3d:64:7b:48:ad:23:aa:ec:
9e:50:db:ca:df:66:36:85:25:92:3b:d2:5e:71:91:
4c:1b:7d:fc:9d:bd:19:f9:39:05:a4:e2:5d:e5:8c:
e5:10:0a:d4:61:be:be:42:89:a6:88:97:9a:de:b1:
b4:35:ce:33:f6:41:61:79:e4:e0:74:fd:15:56:2c:
f1:a7:40:08:eb:ee:b5:35:7f:8f:ad:50:7e:84:b3:
c3:a6:10:a5:b1:80:93:27:59:4c:91:e6:b7:55:ed:
c9:b4:c6:c3:38:ed:f2:3f:82:e7:b0:48:23:b4:76:
f2:7b:9d:95:6d:16:82:ff:61:8c:b9:c6:8d:68:d3:
45:f8:67:b2:86:1f:77:ce:ec:11:63:91:b5:09:7d:
20:ab:62:22:3b:59:36:f4:73:72:27:e9:5e:92:12:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:A8:97:93:90:CE:80:30:09:AA:8B:8D:61:6E:DF:6E:8E:31:88
X509v3 Authority Key Identifier:
keyid:B2:2E:62:57:C1:16:6F:6F:2C:F4:28:0E:07:AC:0C:AC:B1:5F:A9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:18:f2:08:57:36:4d:e7:d8:97:56:34:d3:ff:b3:94:7c:
6b:ae:88:b9:83:e8:37:5e:29:20:29:a5:25:bb:a8:94:94:76:
d1:dd:97:0d:f2:47:8f:f6:ad:16:3c:13:97:74:a4:07:2f:58:
e2:43:d3:ea:72:43:b8:5d:aa:30:ac:7f:7b:b3:77:e6:fc:2d:
20:41:9a:ba:25:1c:22:06:34:69:d2:cd:10:f5:68:3e:97:5d:
77:9c:01:4a:cd:ef:91:4b:26:7b:da:fd:ef:4b:c9:a6:70:6c:
aa:62:74:be:c0:f2:2e:df:4a:f0:1f:16:e7:27:05:8e:50:90:
d1:af:79:09:01:d4:f6:90:78:73:03:2c:47:2f:6d:c1:97:bc:
a7:22:57:b0:51:3a:30:3d:61:65:ba:f2:21:b2:6e:da:2b:d3:
d3:5b:a4:9f:57:be:c2:46:21:31:c7:99:21:7d:73:60:5f:4c:
52:fe:c2:f0:c7:51:c3:c3:e1:4d:83:41:c3:e2:a4:a4:38:c0:
d5:e5:50:45:a9:fe:02:89:7d:25:fa:1f:b7:6e:c3:63:f4:53:
7c:e9:73:dc:37:24:81:4d:a2:a7:7c:f6:72:9c:b1:18:dd:da:
75:6b:7d:72:e0:2f:f6:a5:f8:02:b1:85:97:dc:63:28:d6:c1:
71:57:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:59:44 2026 by rpki-client