Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: /DyXewX595ovaRux/HsCJosx3R0lY+jrOBMT2WjYJkQ=
Subject key identifier: 6A:74:58:7F:0C:A1:BC:E8:BF:34:6C:D6:2D:BA:86:0D:E3:6E:47:64
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 019CA9B3D1E2B32F57B80DC911ADB2FE4D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 14:00:59 +0000
Manifest this update: Sun 01 Mar 2026 14:00:59 +0000
Manifest next update: Mon 02 Mar 2026 14:00:59 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: KmmTWhikOBJLgO8et6qLEv7CYo/SdNaQuItqb5v1kEQ=)
2: hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa (hash: McwvJ1iO5xbO5tc5urCHd+wPP0AiWFFllzKeNdIvGeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:d1:e2:b3:2f:57:b8:0d:c9:11:ad:b2:fe:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Mar 1 14:00:59 2026 GMT
Not After : Mar 2 14:00:59 2026 GMT
Subject: CN=6a74587f0ca1bce8bf346cd62dba860de36e4764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:d7:b0:9e:6e:e2:90:d4:f9:83:c5:e5:b7:
ba:57:b2:34:f3:cc:33:48:bd:fd:ee:3a:89:c2:00:
9d:38:0b:7c:5c:e9:eb:09:6c:75:76:41:1d:20:32:
05:2f:6b:06:47:d1:e0:7d:69:88:20:6c:09:bf:29:
64:f1:e4:2a:a2:b9:d9:75:52:ca:8d:ec:09:de:96:
4c:ea:c4:21:44:43:6b:da:73:1b:68:f2:18:5d:58:
b0:12:fe:f8:44:d3:6e:e2:ea:96:a5:cc:ed:82:38:
9b:d9:0e:6a:ba:5f:23:53:53:be:4c:33:dc:36:5e:
a3:8f:e5:ae:c3:f3:08:d7:e4:9b:4d:f5:e2:c8:76:
35:ac:17:a7:4a:75:6d:35:10:50:f0:94:29:cf:53:
d5:73:e0:7a:5c:3a:fd:7d:6d:ed:df:91:a5:2c:96:
d7:e8:ef:ba:61:ef:29:a6:44:fc:50:b2:48:d5:31:
6e:1c:eb:e5:d7:ea:62:e6:de:96:c9:cc:4d:ec:89:
d5:c5:82:b6:de:a4:53:50:4b:2d:8c:7d:26:b4:79:
66:df:c9:bd:67:9a:3e:fa:1a:76:ee:8f:e9:b3:ce:
c0:bc:8e:97:8b:5d:a4:c6:4e:bd:6f:26:bf:98:2d:
02:be:f0:ad:34:2e:82:d3:83:30:4a:12:5a:e5:48:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:58:7F:0C:A1:BC:E8:BF:34:6C:D6:2D:BA:86:0D:E3:6E:47:64
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:04:84:e7:e7:74:5b:dd:d6:3c:22:8b:6b:44:ec:9e:85:
56:59:a4:82:53:2c:af:38:d8:18:4a:31:0f:c7:f6:51:15:1c:
02:fb:e2:92:07:58:95:88:78:12:4c:b3:d3:c4:67:d1:2d:cd:
4a:33:0d:1f:38:06:08:33:dd:99:0b:6f:58:59:1a:40:00:94:
1a:8c:60:0d:cf:ed:a1:a7:1e:c8:1b:13:84:70:d9:a9:3c:cd:
40:05:d2:44:44:40:87:bc:1c:c4:80:8b:d4:b2:a4:4e:c0:69:
d2:9e:b7:a6:f9:9a:1f:42:f8:d7:8b:a6:07:83:c9:a7:f5:80:
e3:f5:f8:cb:c8:ea:80:73:10:03:49:13:2e:12:48:1e:5a:77:
51:1c:19:c2:61:9b:58:85:7a:b1:d0:da:8a:15:da:39:40:96:
41:f5:98:ff:6d:91:b3:7f:8b:5a:2c:9b:65:77:9c:ef:1a:0a:
95:b5:60:e5:bd:e8:d9:a7:6c:50:b0:b3:f2:0f:6e:8c:27:e4:
1b:2c:eb:99:29:2f:3c:ae:b9:d0:ce:f4:40:5b:08:32:70:1b:
4d:25:6a:56:9a:65:25:4c:5b:ed:8f:54:98:7d:52:90:cb:f8:
d5:48:d0:5b:e4:fe:fe:0d:ed:3e:54:86:fe:da:66:bc:93:4b:
c1:87:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:09 2026 by rpki-client