Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: TNkjy7H4PXFeE2E86z9PeaAVGJ4JNbve9KfFrv7IUVQ=
Subject key identifier: 92:3E:11:C4:C2:47:50:61:FD:5C:A7:9C:F7:37:22:BD:BF:32:23:37
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 019CAA9003BC46279B8EEC39859305D73A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 18:01:30 +0000
Manifest this update: Sun 01 Mar 2026 18:01:30 +0000
Manifest next update: Mon 02 Mar 2026 18:01:30 +0000
Files and hashes: 1: R1SSUdyYi8FPFo7Gl7IDnaH_We4.roa (hash: /TwMbXVoNhhIw3ynIKxMgNbq3+KCXSenwMtMk8zxol4=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: AIIZ5a+h88vzRzp5a3WtzHtZw13arp6THaZh84hucbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:03:bc:46:27:9b:8e:ec:39:85:93:05:d7:3a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Mar 1 18:01:30 2026 GMT
Not After : Mar 2 18:01:30 2026 GMT
Subject: CN=923e11c4c2475061fd5ca79cf73722bdbf322337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:5b:b9:cc:24:d3:fb:ee:85:ff:c3:99:e4:
6b:e0:4f:da:12:a9:9e:9b:59:e7:29:9b:6b:8f:a6:
8c:f9:7b:62:a5:22:0c:c0:86:43:6c:31:96:ce:d7:
e4:49:9d:67:3f:58:eb:19:6b:8f:24:c6:6b:ca:40:
54:3d:7f:ce:51:28:92:f1:2a:ee:e1:42:9e:05:88:
c1:9e:2f:40:85:a9:48:a7:64:fa:cd:14:dd:e8:73:
ef:de:4f:c5:9e:cd:5d:76:54:89:9d:76:6d:05:70:
8a:b7:0b:b4:99:2b:72:94:1a:48:f6:f7:1f:02:bf:
4d:e8:42:df:c4:2b:80:37:3f:19:9a:82:80:04:20:
0a:e9:b2:b0:f7:92:4b:07:ad:3b:d4:0e:e8:ff:00:
94:de:a7:11:ca:00:83:11:3b:8d:d1:33:ed:b9:33:
c4:5e:88:cd:26:57:73:b3:c6:43:e9:ba:21:07:d1:
c2:cb:2c:77:ac:5a:1b:8c:7c:3a:24:07:d7:1a:52:
b9:7e:af:0e:00:21:0b:50:b2:ae:be:a0:4a:4e:64:
31:4a:42:62:10:1e:8f:73:c7:3a:db:75:80:8a:f6:
4b:4c:54:f6:f5:bc:f5:fb:25:da:b0:5e:ae:28:70:
bb:cb:31:2c:21:4e:38:d4:da:f0:39:7c:50:2d:77:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:11:C4:C2:47:50:61:FD:5C:A7:9C:F7:37:22:BD:BF:32:23:37
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b2:15:06:9b:08:1e:ff:09:6a:65:dc:f2:7a:21:be:d5:d6:
b3:57:6a:84:1c:70:f5:20:90:3d:21:08:39:91:f4:a1:35:58:
20:86:78:62:52:1b:ec:17:fa:4a:6d:79:83:64:25:3a:24:c8:
c6:25:88:c4:b0:31:41:ca:8b:7a:b8:23:d4:36:72:a7:f9:1c:
15:a2:4b:ec:08:77:79:a6:36:70:77:c0:54:9a:09:af:5e:d7:
13:fc:a0:ae:5c:d9:b5:fd:48:da:c4:68:3c:9e:24:2b:7b:d3:
c7:61:7d:fd:da:ce:8b:22:c6:95:64:9b:e4:ab:6c:ba:7e:3f:
e6:41:b3:76:39:13:68:40:e2:ae:00:51:79:43:09:54:d7:29:
c9:b9:de:f0:8e:9b:16:3c:dc:94:83:83:08:72:2f:d3:f0:62:
18:fb:0c:e4:91:f6:75:08:f6:c7:4d:3b:1e:f4:f3:5a:d0:14:
cd:65:ed:04:d1:5f:2f:a3:c6:88:94:14:ab:f4:c8:17:06:97:
72:45:6f:58:dd:71:6a:7f:77:f1:f0:77:72:91:9d:32:92:36:
43:5b:ef:76:9a:6e:60:4e:d2:9b:b7:35:41:1d:9d:d9:66:f6:
e8:15:cc:5d:a1:78:85:e0:cc:cd:a2:b9:53:fc:5c:88:6b:96:
0a:8d:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:57 2026 by rpki-client