Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: DZovW3R3bBvGCWJpWAlDP82yNzDoYDZ7XPXSDoOAzSc=
Subject key identifier: A6:EE:C5:A2:C3:48:CD:11:55:FE:60:36:51:C0:CC:E4:40:37:A5:3B
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 019D9A06D40924D8AF6F819DABF1B3470649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: R1SSUdyYi8FPFo7Gl7IDnaH_We4.roa (hash: /TwMbXVoNhhIw3ynIKxMgNbq3+KCXSenwMtMk8zxol4=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: d9ai3E9/Y3EEQmwIxjR7vdhcTUglL+m+fnLS6T5zDmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d4:09:24:d8:af:6f:81:9d:ab:f1:b3:47:06:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=a6eec5a2c348cd1155fe603651c0cce44037a53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:5f:91:b4:4d:46:7c:13:1b:91:7f:58:cb:
17:a0:4a:8d:47:f5:7b:0d:af:79:fe:68:54:66:e6:
bf:16:ec:f3:f5:f0:05:60:51:47:d4:9c:ff:ec:33:
6a:25:ca:f4:0a:f3:01:01:03:4f:b7:87:02:0d:f9:
df:5e:98:92:99:ec:8a:71:ed:2e:1c:f4:d5:33:ff:
b6:e0:c8:6f:37:73:55:f2:7d:91:11:9d:dc:95:13:
8b:16:f8:85:9c:0c:61:ff:f7:95:16:ed:82:5b:f7:
a5:3b:5b:02:45:6b:f9:f2:20:69:72:49:37:4a:c5:
a2:5d:82:92:a3:e9:d8:b6:67:25:3b:94:94:0e:48:
6c:a2:a5:1d:ce:67:f5:3f:ce:8b:ca:4c:fa:a2:c2:
cd:aa:9b:09:96:25:c2:ee:9d:02:2b:34:8a:74:e5:
e1:40:78:48:ed:8e:57:a9:7a:47:9f:ad:f0:ff:de:
c6:32:86:2e:d5:e0:08:4a:5c:17:d0:9e:5c:05:92:
52:a3:24:58:a2:c5:ba:60:fb:8c:ac:4f:83:df:48:
0b:04:7e:2e:05:2c:d7:fa:9b:63:7b:96:eb:cd:da:
90:0a:12:96:a6:f0:41:48:47:32:ff:92:de:9e:72:
3f:60:00:26:9f:a7:24:6c:0c:78:24:09:71:ab:22:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:C5:A2:C3:48:CD:11:55:FE:60:36:51:C0:CC:E4:40:37:A5:3B
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:67:f8:ee:be:3b:e0:ee:4d:94:28:01:f2:7f:72:44:12:7c:
e1:df:0f:cf:9d:d4:32:93:fe:d0:b4:7f:a0:86:3b:41:05:e5:
3b:1a:2a:6b:6b:6c:97:cb:56:05:2b:ff:00:1c:18:f7:68:e5:
ef:f6:c1:bb:2c:d0:2a:7b:73:6f:92:39:fd:50:73:1c:1a:c6:
82:dc:cf:3d:27:97:fb:b0:20:d7:8b:32:13:c0:a5:d5:34:79:
7c:05:d8:c4:ac:e3:05:63:81:bc:b5:c1:1c:b7:b8:13:8c:0d:
5a:98:83:7c:2b:9f:ce:ed:9f:4c:77:2b:56:3e:14:09:c1:00:
47:9e:6f:7b:ef:3e:da:99:02:79:40:3a:17:cb:e1:82:5b:ac:
ae:3e:71:43:e7:de:8d:82:d6:1f:9d:9f:9d:8a:5e:dc:88:a7:
f9:b6:fd:cc:a9:96:0b:94:3b:8b:76:ae:e1:4a:5b:b2:4e:4c:
7e:58:7c:28:24:17:97:ea:39:e2:14:6d:21:9e:f3:06:49:67:
a8:4f:45:5d:c7:9a:0d:96:a5:d9:ab:53:9f:0c:ea:cb:a5:2c:
69:f8:30:51:3b:32:9d:19:98:49:aa:e8:51:e6:20:7d:ff:f3:
3a:b6:8d:76:4f:df:da:ee:83:6b:02:e2:e8:50:37:16:b3:32:
9c:3e:e9:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBtQJJNivb4Gdq/GzRwZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMjAyN2RiYjg5NDI3YThlMDMxYjkwOTYyZTI2ZTQ0YWZm
YTVhOTUwHhcNMjYwNDE3MDYwMDMxWhcNMjYwNDE4MDYwMDMxWjAzMTEwLwYDVQQD
EyhhNmVlYzVhMmMzNDhjZDExNTVmZTYwMzY1MWMwY2NlNDQwMzdhNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjNfkbRNRnwTG5F/WMsXoEqNR/V7
Da95/mhUZua/Fuzz9fAFYFFH1Jz/7DNqJcr0CvMBAQNPt4cCDfnfXpiSmeyKce0u
HPTVM/+24MhvN3NV8n2REZ3clROLFviFnAxh//eVFu2CW/elO1sCRWv58iBpckk3
SsWiXYKSo+nYtmclO5SUDkhsoqUdzmf1P86Lykz6osLNqpsJliXC7p0CKzSKdOXh
QHhI7Y5XqXpHn63w/97GMoYu1eAISlwX0J5cBZJSoyRYosW6YPuMrE+D30gLBH4u
BSzX+ptje5brzdqQChKWpvBBSEcy/5LennI/YAAmn6ckbAx4JAlxqyJJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbuxaLDSM0RVf5gNlHAzORAN6U7MB8GA1UdIwQY
MBaAFEogJ9u4lCeo4DG5CWLibkSv+lqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjct
YjA3MTJhYjBiMDc3LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjctYjA3MTJhYjBiMDc3
LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGf47r47
4O5NlCgB8n9yRBJ84d8Pz53UMpP+0LR/oIY7QQXlOxoqa2tsl8tWBSv/ABwY92jl
7/bBuyzQKntzb5I5/VBzHBrGgtzPPSeX+7Ag14syE8Cl1TR5fAXYxKzjBWOBvLXB
HLe4E4wNWpiDfCufzu2fTHcrVj4UCcEAR55ve+8+2pkCeUA6F8vhglusrj5xQ+fe
jYLWH52fnYpe3Iin+bb9zKmWC5Q7i3au4Upbsk5Mflh8KCQXl+o54hRtIZ7zBkln
qE9FXceaDZal2atTnwzqy6UsafgwUTsynRmYSaroUeYgff/zOraNdk/f2u6DawLi
6FA3FrMynD7pTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:41 2026 by rpki-client