Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: XJz0SDIwzYXR6mfP/BYJaYJ4ocaoRRGdgAneFldLIIw=
Subject key identifier: B0:1D:C1:DC:C4:FC:54:34:F6:65:0F:B4:20:E0:60:AA:FC:DE:74:53
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 019D389BA820A8FE149C2DF4EBC2B42DD341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: ZX1/BGzsjJ5W7xMVDPUdGlh8yOJJ8HbKK+GOwWHGRho=)
2: hUoQ0TpU-X9GlLheCyO-wfvH5kc.roa (hash: McwvJ1iO5xbO5tc5urCHd+wPP0AiWFFllzKeNdIvGeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a8:20:a8:fe:14:9c:2d:f4:eb:c2:b4:2d:d3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=b01dc1dcc4fc5434f6650fb420e060aafcde7453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:30:84:35:d5:8b:57:1f:f1:3a:45:7c:85:
48:d6:77:c1:9a:25:e8:bc:b4:9b:91:d9:69:7f:d4:
b1:50:6e:06:ea:3e:3a:f7:36:ee:64:4a:72:dc:a8:
1d:63:36:e2:34:90:47:e4:1e:d4:98:cb:ff:90:14:
5d:b0:f3:95:05:42:9f:f0:23:50:73:d1:95:b5:8b:
fd:e1:24:38:7b:92:b4:de:3a:5c:2b:39:f5:05:b1:
ab:64:b0:76:9a:d3:a8:fb:5d:f3:67:5a:da:f8:b2:
b1:7c:0f:7a:6f:d3:6f:3a:10:45:cc:e8:7e:52:9b:
06:26:60:db:32:8e:69:ab:ec:7e:57:ae:0d:4c:cf:
a2:6f:b0:20:7e:0c:12:dd:76:d4:b7:56:99:0e:6a:
22:cc:75:75:2e:db:3d:d1:4a:ba:14:d9:69:2a:3c:
c3:70:2d:ea:1b:02:a7:ed:26:96:be:d8:f3:07:39:
9b:26:b8:73:8d:89:c5:e0:fe:5c:72:4e:a3:3f:bc:
22:23:b1:b0:d7:33:d8:bd:1d:23:8a:93:78:7a:7b:
18:ca:80:01:81:b5:c2:2c:ea:b5:e3:8d:0a:55:c5:
ad:a3:d9:82:00:7b:49:9e:2d:9d:43:a9:70:e8:3d:
67:ad:c0:89:0b:97:0f:3b:69:5b:d8:17:c9:9c:35:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:C1:DC:C4:FC:54:34:F6:65:0F:B4:20:E0:60:AA:FC:DE:74:53
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:92:f3:68:ef:f9:af:a3:6f:d5:03:8d:fc:a1:00:10:1b:d2:
3a:3e:b1:cf:68:2c:7c:ff:24:33:e4:89:7c:45:e8:a8:04:11:
57:66:4b:a5:73:93:a4:75:ec:de:eb:98:d4:e7:28:fd:f3:8b:
e6:5e:53:00:95:91:51:81:99:5f:df:f2:9b:96:f9:b4:7b:8a:
c2:89:5e:dd:e6:f0:eb:0c:a9:43:73:86:0c:0c:24:29:78:de:
c4:2c:2f:2f:0f:f0:7b:15:69:21:d4:71:be:bd:a0:45:86:67:
bf:d4:7d:9c:1b:8c:3b:50:d9:15:4e:34:40:02:72:f4:3f:16:
e1:87:80:53:4c:ca:2a:d0:cc:87:20:22:9f:c0:54:bb:62:46:
33:6b:fa:7b:96:74:8c:cc:59:43:88:4f:9d:a9:64:47:f7:b7:
43:7c:77:51:fa:96:f0:b0:20:7b:c5:a3:77:02:cc:f1:2e:fa:
80:02:43:a4:58:46:41:a9:c2:94:3b:90:33:f8:68:52:9b:42:
5a:b4:3b:cc:a3:2f:d5:b9:36:af:44:f0:c5:b0:c9:38:cc:1f:
e1:04:c2:be:a7:34:d9:7a:92:61:d6:59:33:b0:8d:09:13:7f:
7f:57:4c:63:f6:c5:29:4a:2c:17:ed:13:14:7b:5e:e5:de:45:
ee:0c:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client