Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: +QMtnN4tViigCDRgueivRCKy2wDUaoTbOZD/aOEsxO0=
Subject key identifier: 38:DB:B8:41:BF:8C:C9:B9:D8:AE:87:C9:73:A8:B7:52:32:CA:24:24
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 01A1841A05CDEC484406891DDBEB0552654F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 134F
Signing time: Wed 28 Oct 2026 20:01:00 +0000
Manifest this update: Wed 28 Oct 2026 20:01:00 +0000
Manifest next update: Thu 29 Oct 2026 20:01:00 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: vax1BJ/bL/hn+0mYcpeiOoXoJQB0U4h6OblxEolI7NE=)
2: T9G0EsB9xNpRRqACBtjCNxlrY58.roa (hash: O8JhPnTVM6Wx6QaGCJoBS17fGqbeozAvQWWzsMQhij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:05:cd:ec:48:44:06:89:1d:db:eb:05:52:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Oct 28 20:01:00 2026 GMT
Not After : Oct 29 20:01:00 2026 GMT
Subject: CN=38dbb841bf8cc9b9d8ae87c973a8b75232ca2424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:08:79:87:01:0b:b7:30:38:58:b3:ed:bf:
93:69:80:37:46:b9:2b:79:be:51:32:57:03:5e:25:
12:39:31:92:94:bf:72:16:cc:8a:2e:b0:51:f3:76:
85:19:f5:42:9a:36:b6:9c:c8:e4:0a:a0:32:8c:df:
95:0a:9c:0d:d1:14:27:27:fd:97:6b:66:7b:39:06:
70:41:2a:34:28:bb:2a:5d:69:15:86:bc:01:95:37:
6b:c6:1b:a9:56:d5:24:2d:9d:a0:3c:7c:95:8d:20:
8c:1e:d3:d5:94:f7:90:ef:ae:66:3d:c1:79:7a:96:
a8:e0:9f:13:0a:9e:ca:3c:33:37:20:a3:98:b9:f4:
3e:56:36:1a:aa:60:aa:e4:b0:ab:9f:97:c8:62:45:
26:d0:97:55:e4:f9:10:99:39:72:79:ce:93:12:93:
07:bf:34:1e:b2:42:92:0a:35:c7:3b:4e:db:55:b3:
8b:ec:bd:ca:8b:a9:00:9c:be:7f:d2:c7:7c:17:c3:
f2:81:d9:8c:08:a5:db:43:88:ca:2d:1f:b7:4f:28:
e8:87:09:f2:93:97:8f:ed:75:80:f9:8b:a2:ee:be:
f5:f4:9d:6d:34:17:28:e2:04:78:93:ea:4c:87:f5:
81:1c:c6:06:14:bd:cc:ac:c6:5a:19:34:30:e3:1a:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DB:B8:41:BF:8C:C9:B9:D8:AE:87:C9:73:A8:B7:52:32:CA:24:24
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5b:2d:e9:d0:03:1a:04:ea:b9:22:24:a1:de:8b:14:4c:f0:
50:e1:1d:ef:7e:63:fa:b2:55:5b:c9:fc:2d:5d:c0:ae:24:f2:
4b:3b:e4:d3:98:2b:71:a9:62:9f:65:66:68:4b:bd:90:9a:89:
79:bf:8a:70:d2:a8:78:85:64:10:31:47:69:29:04:87:f5:67:
6e:50:fe:25:43:4c:97:3e:13:ab:24:49:f7:5b:9d:e4:b5:67:
b5:6e:68:98:9e:46:a7:10:23:9c:2a:bb:f3:7b:3c:10:35:0c:
99:e1:df:01:32:ee:a3:73:90:c8:cc:dd:fe:9d:94:c5:20:e5:
95:65:91:fe:42:dc:a8:d5:3e:72:5f:56:82:f1:15:4e:67:d3:
1b:34:8f:51:09:cd:7a:cd:e7:d5:a2:d9:1a:ef:8b:0e:b6:29:
63:c1:98:37:65:25:9f:be:d9:42:7a:f4:2a:ee:da:b5:b9:e4:
6f:e4:a3:98:62:14:e7:b7:46:02:74:44:ea:f1:53:41:2f:e0:
04:56:a9:8a:73:f4:9c:e8:f8:84:fb:ee:e3:ee:09:b4:77:b7:
8d:b1:c7:99:cc:d4:60:25:e4:db:94:b7:40:ef:81:8f:02:bb:
dd:ce:15:31:0e:83:86:af:30:d1:17:3a:9e:a6:07:9a:b5:d0:
9b:3f:d2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGgXN7EhEBokd2+sFUmVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi
NGU3ZGYwHhcNMjYxMDI4MjAwMTAwWhcNMjYxMDI5MjAwMTAwWjAzMTEwLwYDVQQD
EygzOGRiYjg0MWJmOGNjOWI5ZDhhZTg3Yzk3M2E4Yjc1MjMyY2EyNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMIIeYcBC7cwOFiz7b+TaYA3Rrkr
eb5RMlcDXiUSOTGSlL9yFsyKLrBR83aFGfVCmja2nMjkCqAyjN+VCpwN0RQnJ/2X
a2Z7OQZwQSo0KLsqXWkVhrwBlTdrxhupVtUkLZ2gPHyVjSCMHtPVlPeQ765mPcF5
epao4J8TCp7KPDM3IKOYufQ+VjYaqmCq5LCrn5fIYkUm0JdV5PkQmTlyec6TEpMH
vzQeskKSCjXHO07bVbOL7L3Ki6kAnL5/0sd8F8PygdmMCKXbQ4jKLR+3Tyjohwny
k5eP7XWA+Yui7r719J1tNBco4gR4k+pMh/WBHMYGFL3MrMZaGTQw4xqDgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjbuEG/jMm52K6HyXOot1IyyiQkMB8GA1UdIwQY
MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt
ZTY3MGEyZDQ3Yjg2LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2
LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFst6dAD
GgTquSIkod6LFEzwUOEd735j+rJVW8n8LV3AriTySzvk05grcalin2VmaEu9kJqJ
eb+KcNKoeIVkEDFHaSkEh/VnblD+JUNMlz4TqyRJ91ud5LVntW5omJ5GpxAjnCq7
83s8EDUMmeHfATLuo3OQyMzd/p2UxSDllWWR/kLcqNU+cl9WgvEVTmfTGzSPUQnN
es3n1aLZGu+LDrYpY8GYN2Uln77ZQnr0Ku7atbnkb+SjmGIU57dGAnRE6vFTQS/g
BFapinP0nOj4hPvu4+4JtHe3jbHHmczUYCXk25S3QO+BjwK73c4VMQ6Dhq8w0Rc6
nqYHmrXQmz/SfQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:05:39 2026 by rpki-client