Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: cJ49lQ3lmZAs3YEyxHp1UqY14pcBkMm5RX2sBTOeFxI=
Subject key identifier: CA:5C:01:29:CD:DE:01:F0:36:2C:61:2F:2E:F1:23:11:AE:37:C0:E0
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019D394100ACB9FCFE8AE8E1E9B73A021829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:54 +0000
Manifest this update: Sun 29 Mar 2026 11:00:54 +0000
Manifest next update: Mon 30 Mar 2026 11:00:54 +0000
Files and hashes: 1: 55lJ7aRN6GIyWx76DhXMl-EsW9s.roa (hash: G5fDZfDdF/UdXSzqkrIqSIBvAXZx8jiKJDU264Jekto=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: 1MeNfiQ2+YnyYVfBHBCzYMEv2Key44t8TxvJ9YMHbFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:00:ac:b9:fc:fe:8a:e8:e1:e9:b7:3a:02:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Mar 29 11:00:54 2026 GMT
Not After : Mar 30 11:00:54 2026 GMT
Subject: CN=ca5c0129cdde01f0362c612f2ef12311ae37c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:80:30:04:05:b7:e2:f0:ce:f4:32:6a:ce:
3f:06:48:a1:94:b1:ad:0d:af:0e:2f:39:2d:16:a5:
21:fd:04:9d:d0:d6:2e:6e:a5:41:7f:31:2b:db:77:
e1:78:79:f3:29:aa:65:2b:0c:54:65:60:00:f9:38:
5c:c5:5d:c0:a5:7b:ef:f7:e3:e0:3f:35:d2:fd:27:
6c:4d:da:11:d6:14:5e:42:64:2f:7b:9b:a0:52:64:
0f:c1:e2:d4:72:f9:8f:71:c0:ec:49:13:2d:88:17:
6e:88:6a:19:52:b6:9e:94:8b:65:06:b8:36:ff:4b:
d8:e6:7d:b5:54:9a:51:de:ca:dc:73:91:3c:1d:d7:
68:f7:8b:71:3d:1d:ec:6d:5a:27:46:b6:b7:01:e0:
b5:9a:d7:25:99:df:00:bb:d1:1a:e7:b8:fd:7f:d7:
2a:d5:a8:c2:ed:b1:8d:81:0d:4e:c6:ba:17:b6:02:
1a:de:38:14:e7:7f:96:d6:7f:64:ea:c1:0f:19:ba:
b1:eb:eb:14:9b:68:d5:be:8f:c0:a0:83:8f:ac:b9:
09:7b:ef:9c:f1:4c:bf:de:50:c9:90:93:2a:3b:c6:
9c:f9:bd:a1:5d:3e:da:ad:ac:62:88:1b:7e:4a:69:
9a:32:71:17:48:40:82:09:a0:d6:aa:4f:20:31:26:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:01:29:CD:DE:01:F0:36:2C:61:2F:2E:F1:23:11:AE:37:C0:E0
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:8c:5f:4f:40:32:a3:56:48:9a:5b:3d:c5:e3:92:f6:21:
59:e1:3e:41:d6:5d:af:fa:9b:99:87:b9:cb:4e:1a:b3:35:72:
2b:ec:e5:d4:e9:bf:2a:21:4e:90:8e:fa:99:29:34:cf:cb:77:
b6:57:a9:55:0b:bd:d0:4b:4d:d8:94:47:f6:dd:1b:c3:79:25:
3c:19:ff:5c:b9:7e:0a:98:1a:2f:14:84:48:5f:2e:58:73:c3:
94:59:70:4e:bf:25:18:56:15:d2:a2:f5:ad:e1:56:11:53:3b:
bb:58:7e:18:c4:1a:a6:68:a4:28:08:a2:1e:09:16:a1:fa:c9:
83:f7:58:61:8e:79:a1:f6:93:10:9f:71:ac:11:57:cf:01:bd:
f5:1c:0b:72:a1:11:71:f9:f2:d4:2c:bc:57:bd:3e:37:ec:09:
46:c8:d0:b6:08:be:63:40:22:e5:88:c7:ec:35:fc:83:94:59:
17:f8:ad:05:8b:3d:ee:45:ba:66:e2:25:3c:35:6f:a4:f3:bb:
a1:18:98:c5:76:95:f3:81:8a:a8:58:22:7f:62:ff:56:f4:9f:
33:69:16:95:46:50:33:c4:ba:b6:e8:c5:70:f2:f0:64:d2:4d:
a8:50:5d:c2:3d:28:07:93:8f:4a:38:35:79:b9:75:b1:0f:ec:
9d:d1:cf:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QQCsufz+iujh6bc6AhgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk
Y2I2MzIwHhcNMjYwMzI5MTEwMDU0WhcNMjYwMzMwMTEwMDU0WjAzMTEwLwYDVQQD
EyhjYTVjMDEyOWNkZGUwMWYwMzYyYzYxMmYyZWYxMjMxMWFlMzdjMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyOAMAQFt+LwzvQyas4/BkihlLGt
Da8OLzktFqUh/QSd0NYubqVBfzEr23fheHnzKaplKwxUZWAA+ThcxV3ApXvv9+Pg
PzXS/SdsTdoR1hReQmQve5ugUmQPweLUcvmPccDsSRMtiBduiGoZUraelItlBrg2
/0vY5n21VJpR3srcc5E8Hddo94txPR3sbVonRra3AeC1mtclmd8Au9Ea57j9f9cq
1ajC7bGNgQ1OxroXtgIa3jgU53+W1n9k6sEPGbqx6+sUm2jVvo/AoIOPrLkJe++c
8Uy/3lDJkJMqO8ac+b2hXT7araxiiBt+SmmaMnEXSECCCaDWqk8gMSYuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpcASnN3gHwNixhLy7xIxGuN8DgMB8GA1UdIwQY
MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt
YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5
LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQaMX09A
MqNWSJpbPcXjkvYhWeE+QdZdr/qbmYe5y04aszVyK+zl1Om/KiFOkI76mSk0z8t3
tlepVQu90EtN2JRH9t0bw3klPBn/XLl+CpgaLxSESF8uWHPDlFlwTr8lGFYV0qL1
reFWEVM7u1h+GMQapmikKAiiHgkWofrJg/dYYY55ofaTEJ9xrBFXzwG99RwLcqER
cfny1Cy8V70+N+wJRsjQtgi+Y0Ai5YjH7DX8g5RZF/itBYs97kW6ZuIlPDVvpPO7
oRiYxXaV84GKqFgif2L/VvSfM2kWlUZQM8S6tujFcPLwZNJNqFBdwj0oB5OPSjg1
ebl1sQ/sndHP8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:57 2026 by rpki-client