Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: /F3jUEvJEp7Cwv2Pi6/qUZkIg0Ak+kvLUjsSwZl8PJ8=
Subject key identifier: A5:2B:1E:0E:3E:F2:50:76:80:99:3A:84:04:76:D8:C7:E4:5E:78:8E
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 019D37893D89C3D34017459A7CBE6D10F719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: R1SSUdyYi8FPFo7Gl7IDnaH_We4.roa (hash: /TwMbXVoNhhIw3ynIKxMgNbq3+KCXSenwMtMk8zxol4=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: 6MmfyAZ7F0Z6sqJh0rpCSLqX3x+5cWiynLj/taNuNzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3d:89:c3:d3:40:17:45:9a:7c:be:6d:10:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=a52b1e0e3ef2507680993a840476d8c7e45e788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:03:c2:b5:5f:08:11:3c:a6:c1:7e:a1:e3:
09:00:3b:51:56:c3:1d:a9:ad:6b:50:f1:be:7c:fc:
79:92:66:d5:42:34:41:be:26:3e:ce:4e:c2:d5:e4:
90:ea:3a:d9:fb:0a:42:2d:b2:33:77:77:12:38:b4:
ff:1d:dd:eb:0b:cd:f1:a8:b8:db:9b:46:5f:f2:83:
91:85:3c:74:88:49:e6:86:24:b2:94:6d:06:14:8c:
76:e4:90:aa:1c:6b:44:ba:d0:83:f4:80:91:8f:2b:
48:bf:40:e8:ef:a7:f9:a6:62:18:52:df:96:0c:25:
2c:6a:52:d1:8d:3d:68:1d:c1:32:73:15:18:5a:17:
2a:be:c2:d6:cf:35:c5:95:4f:f0:91:c4:94:d7:3e:
10:74:3b:36:ec:7c:78:ac:81:de:41:57:31:d5:e7:
fc:92:98:5f:1b:65:58:29:7d:36:26:d0:fa:4e:18:
7f:83:e8:e1:98:2e:ca:b5:17:24:0e:24:1e:1f:91:
1e:d7:b7:ad:73:db:4e:db:57:4f:2b:2d:88:55:ff:
03:d6:18:cf:d8:f2:30:43:b8:5b:51:ed:c9:5b:9f:
b0:18:19:8e:82:34:9f:40:44:59:da:f0:81:36:6a:
cf:30:36:b4:fd:4d:60:1a:6e:77:0a:b3:bc:c3:25:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2B:1E:0E:3E:F2:50:76:80:99:3A:84:04:76:D8:C7:E4:5E:78:8E
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:ae:08:e7:13:ac:18:68:24:6f:3f:f4:20:e5:c8:c6:fe:
68:fe:73:6f:6e:39:d3:70:45:19:75:2e:49:ab:1e:f0:05:8f:
93:e1:12:be:90:42:0d:f5:9f:1b:bb:8b:1c:7a:9d:93:ba:f2:
6e:9a:e4:7c:86:e4:e5:b7:20:cc:42:9e:c7:77:2f:16:df:3e:
e9:c3:98:d9:02:6e:2f:1e:97:3a:1b:fa:2d:3e:ad:0d:cb:c6:
b6:63:ee:17:f8:f9:c1:d7:a9:5a:93:33:e3:96:cc:07:b2:7b:
c4:b1:48:54:c6:9e:bf:b7:0f:ac:f3:57:22:79:ab:de:41:b9:
31:a7:5c:7e:42:e7:97:0a:bd:84:ce:30:2b:48:81:e0:70:63:
f1:13:14:fe:68:0e:0b:11:bd:58:d9:7f:98:66:cd:64:a6:0f:
64:b9:28:31:5d:d4:77:15:b7:50:16:a4:6f:9a:36:6d:9e:fa:
7c:6b:f1:35:c4:d4:fa:ed:7f:b0:62:7f:5f:41:4e:f5:27:d0:
33:8f:88:85:73:ed:b1:46:fc:6e:d5:04:d5:8e:47:9b:23:13:
63:0c:92:f6:8c:5f:4e:bb:17:28:2b:e6:9f:0c:1a:e1:ea:40:
65:66:c5:2e:9d:42:8e:da:35:62:40:58:48:36:84:a9:9e:83:
26:e2:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:09 2026 by rpki-client