Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: qhLx+QyBmdrNmWKT6de7JVjo7kg0hyEuLZ8RJeWEZ4A=
Subject key identifier: 2C:1D:0C:CA:1C:32:DE:00:D1:CB:01:70:C5:7B:E1:B1:2C:63:3B:64
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 019CC7BDE7EC49C341897BBFB9C65F2EF34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 10DB
Signing time: Sat 07 Mar 2026 10:00:37 +0000
Manifest this update: Sat 07 Mar 2026 10:00:37 +0000
Manifest next update: Sun 08 Mar 2026 10:00:37 +0000
Files and hashes: 1: 0WuWrczZKDyJ7R3F-ygi1tUDprU.roa (hash: I9T3o7zp+QPhUZLHuzT1L2fbLCkg093j0anbvRpSNXk=)
2: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: lpuWdvp3WXj+ys8JEYhAaygaVXMSX64fcnk0QB0pRf4=)
3: T9G0EsB9xNpRRqACBtjCNxlrY58.roa (hash: O8JhPnTVM6Wx6QaGCJoBS17fGqbeozAvQWWzsMQhij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:bd:e7:ec:49:c3:41:89:7b:bf:b9:c6:5f:2e:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Mar 7 10:00:37 2026 GMT
Not After : Mar 8 10:00:37 2026 GMT
Subject: CN=2c1d0cca1c32de00d1cb0170c57be1b12c633b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:02:d1:17:49:0c:a5:d8:ac:26:d1:6b:a5:
0c:39:30:cb:e3:80:80:d2:79:ab:d3:f5:73:65:f0:
dd:60:35:0c:d9:6c:d2:49:43:fe:3b:93:41:ea:fd:
d6:00:be:72:07:bb:12:39:ad:3f:64:3a:e6:1f:88:
37:4a:a8:6a:ed:aa:e0:6e:2f:af:32:04:86:f1:54:
5a:a1:e9:17:e2:48:28:4b:5f:0c:9c:f2:ea:da:27:
7d:a9:dd:bc:c2:3d:cb:8e:59:e8:e3:ef:8a:f7:17:
37:d2:e2:7c:61:a7:a1:84:7a:0f:8a:ee:8f:d1:a5:
99:a2:88:fa:b5:a3:39:3f:41:5f:5a:f6:aa:7a:e2:
a5:73:3b:db:a7:d5:36:74:05:ef:30:8f:0f:d1:75:
1c:37:e4:0e:99:86:89:42:0e:66:10:60:c9:2f:31:
ca:87:c2:fd:ac:a8:d0:43:28:90:01:1c:46:e6:bf:
a1:7a:25:3f:1e:98:a7:3d:e7:c2:e1:70:c6:d3:28:
f7:f2:d9:66:48:85:0e:49:95:5e:fd:ca:16:f8:bd:
19:fc:d9:32:29:b6:b8:21:b2:90:9b:e3:c9:f6:b1:
64:c0:69:8d:bf:bd:dd:44:f0:e2:c5:c0:c3:4d:b0:
29:81:97:f0:d3:fc:e6:35:63:4c:79:ba:21:57:d8:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1D:0C:CA:1C:32:DE:00:D1:CB:01:70:C5:7B:E1:B1:2C:63:3B:64
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:ef:2c:91:2b:7e:f1:ce:8a:04:9a:58:5d:e5:e3:f1:57:
67:9e:cc:57:2b:49:14:82:f8:43:2e:c7:a9:08:28:30:4c:b3:
bd:94:88:51:6d:81:61:51:3c:44:36:f6:f8:5b:cb:0c:e7:7b:
50:82:c2:c9:cb:49:f7:36:36:d3:1e:a1:f5:8b:8b:0e:83:36:
a0:45:51:c7:d4:9e:40:d7:4e:82:c1:af:a4:eb:9f:cc:e2:19:
12:bb:4d:f9:2c:d3:9a:85:8a:29:98:e5:99:25:66:de:d1:42:
e7:af:ad:65:fe:75:d7:3b:72:e8:6a:c9:a3:14:69:e7:e5:1e:
33:55:f5:a3:e1:43:87:c6:78:4f:11:8b:ea:da:32:4f:c0:43:
0d:76:1d:d2:56:4f:a0:77:a8:96:df:66:28:4d:b1:f4:1a:82:
8c:d9:3f:c2:c2:a9:1c:d7:43:04:5b:8f:99:3b:1d:3c:c1:19:
49:4c:39:0e:35:63:02:a2:5d:ff:6f:95:93:9c:c4:e0:ff:43:
02:e9:46:fb:c8:22:3c:ff:c6:10:13:2d:ad:3a:5b:23:8a:ca:
7a:b6:8a:59:70:40:ae:ad:87:7b:8b:98:4d:f1:e5:e6:f6:2c:
9b:27:58:05:0e:1e:f7:ec:96:20:65:3c:1b:da:4b:a7:56:90:
58:fa:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:06 2026 by rpki-client