Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File: siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier: fM0X2Im8v8ZnFknYRHghrJNpVabUSQq53b9Z/w8biiA=
Subject key identifier: 2E:2E:2A:78:27:DD:22:7C:14:F8:1D:0D:08:BC:60:66:0C:55:32:06
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 019F95494C86D99C01E19F6D53B29430E0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 18:00:36 +0000
Manifest this update: Fri 24 Jul 2026 18:00:36 +0000
Manifest next update: Sat 25 Jul 2026 18:00:36 +0000
Files and hashes: 1: 9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa (hash: /C2CSaK00NB+/TpXiHAeWUhtWjQTZ45pzq0LkkZy9eA=)
2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: 84BmH7M1AhIxDxUN5PcgR4/4RNiuc/PYDW4ZF1wPjzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:4c:86:d9:9c:01:e1:9f:6d:53:b2:94:30:e0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Jul 24 18:00:36 2026 GMT
Not After : Jul 25 18:00:36 2026 GMT
Subject: CN=2e2e2a7827dd227c14f81d0d08bc60660c553206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:21:cf:89:45:6a:50:bd:ae:7b:8c:e0:0d:
92:3a:eb:c8:6b:75:a8:7c:7e:ba:27:c5:fd:44:cc:
4d:da:57:75:19:ce:f5:c6:00:9c:3f:e6:4e:d8:8e:
63:f3:cf:ec:ee:6d:5b:2a:af:05:d9:02:71:b4:31:
bf:95:89:10:36:80:df:2b:99:30:a7:a8:30:41:86:
7d:58:a8:fa:20:90:e9:75:b0:87:f1:35:13:e6:74:
31:92:7b:17:ed:43:1a:e4:92:f8:3f:0a:02:23:bd:
2e:7d:23:05:a5:d0:96:89:e1:45:8b:db:44:fc:43:
31:05:98:02:74:41:52:46:fc:b7:54:23:69:d0:60:
4f:69:44:1c:93:eb:25:a6:df:7b:49:4f:84:59:31:
34:ad:11:e1:0e:4f:b0:49:cb:82:42:c6:60:b4:ad:
40:dd:da:e7:bf:8b:bf:9f:b8:fe:28:2f:45:06:87:
a2:82:ae:7e:37:28:01:f9:8c:22:ec:11:df:ee:27:
ad:c6:d5:27:ed:b5:44:b5:ca:e7:d2:ae:1c:8a:18:
e6:f7:68:89:b9:ab:6a:ca:27:70:b3:17:7c:c9:b2:
f4:06:cd:df:cc:7b:c2:ec:a1:ab:18:c5:37:2e:4e:
0c:5f:a5:a3:45:1e:ac:ea:0d:fb:f8:b7:d7:49:6a:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:2A:78:27:DD:22:7C:14:F8:1D:0D:08:BC:60:66:0C:55:32:06
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b2:42:6c:e4:da:d6:d8:b8:29:39:48:da:5d:9a:30:61:08:
3c:67:2e:92:24:b2:3c:ac:f2:3d:4c:c0:b6:c9:76:50:45:08:
6c:5d:46:84:ff:95:05:89:25:29:b9:3a:ba:00:76:e3:79:c5:
ea:7e:dc:d1:db:1c:d3:6c:ad:b5:1e:a6:db:25:c4:41:ab:69:
90:fc:95:fe:dd:9d:9d:dd:44:d2:4a:f1:11:08:19:63:50:aa:
48:f0:81:ed:17:41:74:85:4d:b1:db:5a:64:da:fb:de:4c:98:
05:06:0a:f8:62:4b:be:d2:b2:23:97:2d:93:e2:23:09:89:d9:
81:61:79:2d:ca:8b:4f:47:30:59:20:c0:39:0c:da:0c:a2:b1:
a9:66:bf:83:e3:ba:0e:ca:b5:00:b9:36:f3:b7:f1:58:a3:11:
12:71:04:3e:66:52:39:5e:bc:6a:05:5c:0c:db:32:f1:3e:cf:
45:07:8a:30:84:36:39:c6:77:92:74:1b:4b:fb:73:0e:d5:18:
2d:88:21:1f:2e:57:e8:fe:6e:71:5e:8a:87:9b:9e:47:d4:21:
08:d0:aa:3c:cc:8e:0d:f7:14:cf:9f:11:09:da:94:3b:24:2f:
ab:6e:6e:ac:84:d9:bb:79:24:dd:2c:49:ec:fc:e8:00:89:23:
16:71:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:39:09 2026 by rpki-client