Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File: siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier: 8nXy14q/BDzqyd7ige6clamkXyH6qQTryHVsxpzJGrw=
Subject key identifier: 85:6D:5E:F0:1A:3C:B1:EC:9C:E4:6F:0D:A5:AC:2F:CD:A8:58:19:CF
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 01A1347E700AA6C0293FC829CBEA4F90FD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 09:01:03 +0000
Manifest this update: Tue 13 Oct 2026 09:01:03 +0000
Manifest next update: Wed 14 Oct 2026 09:01:03 +0000
Files and hashes: 1: 9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa (hash: /C2CSaK00NB+/TpXiHAeWUhtWjQTZ45pzq0LkkZy9eA=)
2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: bTeLkwvbzVXmJnEOEHUxLuHtmDxooTa4Gt0gGI3ZFdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:70:0a:a6:c0:29:3f:c8:29:cb:ea:4f:90:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Oct 13 09:01:03 2026 GMT
Not After : Oct 14 09:01:03 2026 GMT
Subject: CN=856d5ef01a3cb1ec9ce46f0da5ac2fcda85819cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:fb:5f:46:87:3a:86:ca:69:72:06:57:1a:
90:52:ef:e1:f8:6c:90:1a:3e:94:03:f2:75:04:b6:
2c:4d:8e:16:cf:b3:4a:f1:49:45:ce:11:33:ba:93:
97:02:44:f2:e3:7b:78:0e:ce:77:98:a4:2a:28:55:
8b:f3:f3:08:48:f5:82:ec:25:df:21:f9:af:c9:2b:
dd:1c:3f:94:6f:c4:4b:ec:3b:83:7c:40:cd:bc:4f:
3b:c1:66:04:f5:3f:01:3a:dc:98:55:0c:f0:60:db:
ad:6d:d9:14:63:df:85:fd:48:13:39:29:fa:20:75:
6b:bf:6e:f0:84:ae:a3:21:6d:6e:3a:b6:45:64:d2:
c5:29:7d:3b:e3:67:7d:b1:30:fc:a7:ba:16:73:10:
cd:b6:7b:80:1c:1e:04:73:98:e5:35:9c:41:7e:b5:
df:6a:fb:08:dd:a4:6c:4a:d0:f2:85:6b:51:b3:ec:
ca:c5:5b:59:56:26:57:b9:f0:8f:8f:2d:de:cb:5c:
05:91:e1:aa:3a:f4:e1:0a:72:21:92:eb:2c:76:b0:
ca:ae:4f:ea:27:e4:e7:83:53:4a:ee:2e:25:59:d6:
14:a9:cc:33:90:1c:04:1c:95:62:ef:b2:5e:55:98:
5d:4c:7f:3e:eb:0b:62:f9:de:68:51:a8:8a:3b:01:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:5E:F0:1A:3C:B1:EC:9C:E4:6F:0D:A5:AC:2F:CD:A8:58:19:CF
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:36:9b:36:45:aa:ed:7c:ab:a8:ac:d6:7f:07:5e:ba:b4:9c:
7a:8f:29:4b:89:a2:5b:3a:d6:14:c2:8a:21:ea:a3:06:de:68:
d1:50:68:79:86:c0:3e:49:a4:62:d7:99:a5:d0:dc:33:5a:02:
cf:38:41:5b:ce:c5:68:4b:2d:e3:5a:c5:c3:b3:b9:62:f6:12:
a7:23:0c:fe:33:46:bd:08:b6:75:17:09:14:3a:70:f9:08:10:
44:14:fa:c1:bf:a5:f2:ae:a4:15:7f:31:68:bf:6b:01:24:0e:
ff:8a:45:27:51:31:d0:05:ef:4a:1a:57:53:c3:80:6d:b2:b1:
51:6d:88:9d:d4:2d:d2:e6:af:10:6e:28:e7:90:f3:19:9a:90:
63:9a:f0:eb:a7:f1:e0:24:48:83:87:93:c0:52:fc:69:21:86:
e4:38:16:42:2f:a7:ae:c7:e3:b6:ca:8c:1d:96:3a:81:d3:e3:
bb:40:ba:62:70:57:6e:16:0e:ea:83:6d:b0:71:f8:58:0b:18:
a8:5a:55:3d:aa:4a:17:cf:83:b3:88:47:5d:66:ab:a3:a7:ae:
9c:e2:41:d6:c3:00:e1:65:91:d3:42:b9:26:54:5c:30:6e:29:
c1:ce:26:2a:80:25:09:c8:61:3e:e7:eb:52:4d:3a:58:2f:ba:
fb:a1:8c:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0fnAKpsApP8gpy+pPkP2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjBkOTFiNGU5ZDcwZjAzNGZhMTZhMTZhODg3ZDQyNTU3
OTJhZGUwHhcNMjYxMDEzMDkwMTAzWhcNMjYxMDE0MDkwMTAzWjAzMTEwLwYDVQQD
Eyg4NTZkNWVmMDFhM2NiMWVjOWNlNDZmMGRhNWFjMmZjZGE4NTgxOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhH7X0aHOobKaXIGVxqQUu/h+GyQ
Gj6UA/J1BLYsTY4Wz7NK8UlFzhEzupOXAkTy43t4Ds53mKQqKFWL8/MISPWC7CXf
IfmvySvdHD+Ub8RL7DuDfEDNvE87wWYE9T8BOtyYVQzwYNutbdkUY9+F/UgTOSn6
IHVrv27whK6jIW1uOrZFZNLFKX0742d9sTD8p7oWcxDNtnuAHB4Ec5jlNZxBfrXf
avsI3aRsStDyhWtRs+zKxVtZViZXufCPjy3ey1wFkeGqOvThCnIhkussdrDKrk/q
J+Tng1NK7i4lWdYUqcwzkBwEHJVi77JeVZhdTH8+6wti+d5oUaiKOwFg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVtXvAaPLHsnORvDaWsL82oWBnPMB8GA1UdIwQY
MBaAFLIg2RtOnXDwNPoWoWqIfUJVeSreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2lEWkcwNmRjUEEwLWhhaGFvaDlRbFY1S3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NDMyMjEtZjI2Ny00NzMxLWE3YWQt
OTg3MTczYjllOTg3LzEvc2lEWkcwNmRjUEEwLWhhaGFvaDlRbFY1S3Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81NDMyMjEtZjI2Ny00NzMxLWE3YWQtOTg3MTczYjllOTg3
LzEvc2lEWkcwNmRjUEEwLWhhaGFvaDlRbFY1S3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzabNkWq
7XyrqKzWfwdeurSceo8pS4miWzrWFMKKIeqjBt5o0VBoeYbAPkmkYteZpdDcM1oC
zzhBW87FaEst41rFw7O5YvYSpyMM/jNGvQi2dRcJFDpw+QgQRBT6wb+l8q6kFX8x
aL9rASQO/4pFJ1Ex0AXvShpXU8OAbbKxUW2IndQt0uavEG4o55DzGZqQY5rw66fx
4CRIg4eTwFL8aSGG5DgWQi+nrsfjtsqMHZY6gdPju0C6YnBXbhYO6oNtsHH4WAsY
qFpVPapKF8+Ds4hHXWaro6eunOJB1sMA4WWR00K5JlRcMG4pwc4mKoAlCchhPufr
Uk06WC+6+6GMcA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:01:44 2026 by rpki-client