
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
File: si5iV8EWb28s9CgOB6wMrLFfqd4.mft (raw, json)
Hash identifier: yRbpAFFd/3wOhoT+EO44X7kr9oiJAMuwjjDnh4uUjEQ=
Subject key identifier: 28:2E:60:0E:C0:C4:CB:23:E5:6D:95:BF:94:D0:8B:49:C2:A1:B5:13
Authority key identifier: B2:2E:62:57:C1:16:6F:6F:2C:F4:28:0E:07:AC:0C:AC:B1:5F:A9:DE
Certificate issuer: /CN=b22e6257c1166f6f2cf4280e07ac0cacb15fa9de
Certificate serial: 01A0EC65EE37C5492F82ADCB4462BCD4F196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
Manifest number: 021A
Signing time: Tue 29 Sep 2026 09:01:38 +0000
Manifest this update: Tue 29 Sep 2026 09:01:38 +0000
Manifest next update: Wed 30 Sep 2026 09:01:38 +0000
Files and hashes: 1: si5iV8EWb28s9CgOB6wMrLFfqd4.crl (hash: EVqNNC6GLrfQzuHjSW9npp04S6PKtZaAzqe2FEmYjko=)
2: to7i0Ci5lQH6CsTqpByICqd4qQE.roa (hash: eMPNYL14+MIRFte38ZNDEn2SBRIVaM+X88x35MWdRoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:ee:37:c5:49:2f:82:ad:cb:44:62:bc:d4:f1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22e6257c1166f6f2cf4280e07ac0cacb15fa9de
Validity
Not Before: Sep 29 09:01:38 2026 GMT
Not After : Sep 30 09:01:38 2026 GMT
Subject: CN=282e600ec0c4cb23e56d95bf94d08b49c2a1b513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:24:8c:6e:af:da:22:4b:a5:e7:0d:c4:26:
fd:42:85:9a:f3:27:d9:9c:f4:24:03:8e:30:ae:28:
b9:9e:5c:97:5c:79:76:f8:ab:64:b0:59:b4:2a:5b:
ab:bf:bb:97:4e:ec:47:fb:4d:e6:2d:ae:db:74:ac:
21:c2:85:3d:6f:50:61:e2:e5:8e:66:32:85:12:37:
df:d0:d7:58:a8:a8:2f:9d:71:c0:87:7f:9d:dd:05:
c4:8f:a6:75:cc:d7:4b:d9:c2:b4:a7:ce:6c:ef:2c:
6a:82:55:e0:f8:ea:20:cc:96:84:24:b4:12:9d:c8:
3d:fa:d4:43:4d:c8:de:c2:0b:f9:71:47:66:be:01:
ae:ed:bf:da:66:b4:ac:28:e1:52:b0:6c:2c:bf:00:
05:02:98:f9:dd:9d:8f:36:9e:fa:b7:66:d7:80:a9:
aa:91:bb:13:13:66:36:7b:45:49:fa:48:2e:f0:21:
60:73:9f:e5:ba:28:7d:f5:db:94:8a:d4:99:0e:2d:
a9:71:31:03:1d:00:89:da:32:7e:22:96:52:4b:29:
fe:0e:6b:be:95:f7:c8:41:27:37:67:b6:11:39:fd:
b3:b8:24:f6:ff:c9:11:77:f3:f6:06:ff:e5:3d:99:
71:15:da:aa:2c:0d:4d:47:3a:e5:e5:19:e0:e6:a6:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:60:0E:C0:C4:CB:23:E5:6D:95:BF:94:D0:8B:49:C2:A1:B5:13
X509v3 Authority Key Identifier:
keyid:B2:2E:62:57:C1:16:6F:6F:2C:F4:28:0E:07:AC:0C:AC:B1:5F:A9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si5iV8EWb28s9CgOB6wMrLFfqd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8fe6af-07cf-46cc-ae90-3f6180a2819c/1/si5iV8EWb28s9CgOB6wMrLFfqd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:c2:fa:06:6b:49:8f:57:57:49:5d:b4:af:73:e8:47:82:
dc:08:a8:69:d9:24:37:80:b7:6d:e2:c0:12:f9:1f:26:3f:cc:
73:1f:24:a1:43:10:74:6d:8c:58:cb:86:15:c7:f6:7d:d5:96:
b7:fc:92:be:5e:69:b3:07:d1:73:61:8d:0f:80:51:80:0f:a6:
fc:df:f5:13:94:0c:1f:01:4e:c3:a5:1c:80:f3:88:2f:af:4a:
68:56:58:14:b9:d7:2a:41:f7:26:f6:56:be:12:ed:df:36:b2:
53:0a:10:b0:59:0e:03:a7:ca:92:3f:8a:a0:5b:f8:b3:c0:82:
6b:83:3d:ce:0a:30:ed:e5:c6:d4:30:53:0e:7c:c4:e3:bc:e8:
40:ac:d5:fe:84:d6:fa:72:40:65:7d:d0:dd:80:3e:a3:8a:54:
6c:17:63:cc:64:0a:22:99:c0:60:85:eb:f0:e9:3b:f3:45:a7:
92:97:0b:cd:72:02:8d:30:8b:09:0b:68:52:41:43:14:a9:b7:
a0:42:ad:44:ec:56:b6:e1:15:d5:8e:18:4b:f9:08:87:29:c7:
8f:96:bf:81:0d:78:e3:8b:90:01:88:d2:90:de:b1:21:70:0c:
5f:12:06:40:f4:90:49:4f:32:e7:e5:39:f8:2e:43:de:db:c1:
0a:24:4f:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsZe43xUkvgq3LRGK81PGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMmU2MjU3YzExNjZmNmYyY2Y0MjgwZTA3YWMwY2FjYjE1
ZmE5ZGUwHhcNMjYwOTI5MDkwMTM4WhcNMjYwOTMwMDkwMTM4WjAzMTEwLwYDVQQD
EygyODJlNjAwZWMwYzRjYjIzZTU2ZDk1YmY5NGQwOGI0OWMyYTFiNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhskjG6v2iJLpecNxCb9QoWa8yfZ
nPQkA44wrii5nlyXXHl2+KtksFm0Klurv7uXTuxH+03mLa7bdKwhwoU9b1Bh4uWO
ZjKFEjff0NdYqKgvnXHAh3+d3QXEj6Z1zNdL2cK0p85s7yxqglXg+OogzJaEJLQS
ncg9+tRDTcjewgv5cUdmvgGu7b/aZrSsKOFSsGwsvwAFApj53Z2PNp76t2bXgKmq
kbsTE2Y2e0VJ+kgu8CFgc5/luih99duUitSZDi2pcTEDHQCJ2jJ+IpZSSyn+Dmu+
lffIQSc3Z7YROf2zuCT2/8kRd/P2Bv/lPZlxFdqqLA1NRzrl5Rng5qb7+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCguYA7AxMsj5W2Vv5TQi0nCobUTMB8GA1UdIwQY
MBaAFLIuYlfBFm9vLPQoDgesDKyxX6neMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2k1aVY4RVdiMjhzOUNnT0I2d01yTEZmcWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ZmU2YWYtMDdjZi00NmNjLWFlOTAt
M2Y2MTgwYTI4MTljLzEvc2k1aVY4RVdiMjhzOUNnT0I2d01yTEZmcWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84ZmU2YWYtMDdjZi00NmNjLWFlOTAtM2Y2MTgwYTI4MTlj
LzEvc2k1aVY4RVdiMjhzOUNnT0I2d01yTEZmcWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLXC+gZr
SY9XV0ldtK9z6EeC3AioadkkN4C3beLAEvkfJj/Mcx8koUMQdG2MWMuGFcf2fdWW
t/ySvl5pswfRc2GND4BRgA+m/N/1E5QMHwFOw6UcgPOIL69KaFZYFLnXKkH3JvZW
vhLt3zayUwoQsFkOA6fKkj+KoFv4s8CCa4M9zgow7eXG1DBTDnzE47zoQKzV/oTW
+nJAZX3Q3YA+o4pUbBdjzGQKIpnAYIXr8Ok780WnkpcLzXICjTCLCQtoUkFDFKm3
oEKtROxWtuEV1Y4YS/kIhynHj5a/gQ1444uQAYjSkN6xIXAMXxIGQPSQSU8y5+U5
+C5D3tvBCiRPLA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 21:39:59 2026 by rpki-client