Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
File: siDZG06dcPA0-hahaoh9QlV5Kt4.mft (raw, json)
Hash identifier: l35uZrjy6j2CO1zKtzTL6b37uaJ2Wjw6xSDCpKTKYUU=
Subject key identifier: A5:1E:E5:E0:B6:C1:FC:B7:37:7D:B0:B9:88:7A:3F:3D:D0:6C:0B:D0
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 01A0280FC4243E6520C5EA2A874792BF77F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
Manifest number: 1A16
Signing time: Sat 22 Aug 2026 06:01:56 +0000
Manifest this update: Sat 22 Aug 2026 06:01:56 +0000
Manifest next update: Sun 23 Aug 2026 06:01:56 +0000
Files and hashes: 1: 9qwf6-Dqoc3yJJecKnCaJyAyhZ4.roa (hash: /C2CSaK00NB+/TpXiHAeWUhtWjQTZ45pzq0LkkZy9eA=)
2: siDZG06dcPA0-hahaoh9QlV5Kt4.crl (hash: AsbHkkfGFEyZW5GO1heVPOrX+FB3ATos0xp5ECHT7I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:0f:c4:24:3e:65:20:c5:ea:2a:87:47:92:bf:77:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: Aug 22 06:01:56 2026 GMT
Not After : Aug 23 06:01:56 2026 GMT
Subject: CN=a51ee5e0b6c1fcb7377db0b9887a3f3dd06c0bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:bf:5e:bd:4b:58:78:fa:69:fa:49:6f:e7:
fb:ab:ed:3b:f3:4b:e0:0e:a8:66:45:2f:19:16:76:
d0:77:9f:f2:90:8b:92:88:46:df:c6:8c:3b:51:17:
a4:ad:9a:ab:a5:b1:17:46:5d:51:58:ca:3f:a0:fe:
ec:4c:ed:2f:3f:fe:1e:e4:dc:a7:f2:f4:ee:4e:b1:
c2:9f:7e:d1:5a:a0:c4:cb:e8:81:fe:47:01:ee:66:
2a:52:fa:e7:74:b0:ec:4f:a0:5e:fc:19:77:e4:3c:
57:89:61:7e:96:6c:28:75:5f:b1:34:13:a1:50:de:
7f:65:87:89:74:ef:61:07:58:b2:e8:59:5d:38:61:
f0:23:27:17:78:be:02:79:16:27:a3:7d:fe:41:27:
c5:41:2e:e9:f8:f2:52:fa:f1:04:53:95:72:95:83:
ca:da:0a:8b:03:00:5a:d8:4e:08:d0:b7:63:8d:cb:
85:c1:a2:b5:7a:79:d7:31:90:d8:78:aa:a5:d2:54:
52:47:c0:3d:1b:53:78:27:a7:34:f4:74:f1:6c:f8:
ed:58:1f:9e:de:a4:c8:08:24:bc:e8:05:74:16:7c:
7f:5a:6a:b9:8e:ec:5d:5c:1f:3a:36:2f:fd:5d:01:
2b:ea:b1:e4:92:33:95:61:c9:66:e0:40:c2:44:4f:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:E5:E0:B6:C1:FC:B7:37:7D:B0:B9:88:7A:3F:3D:D0:6C:0B:D0
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ba:a8:c7:a0:d5:9d:77:42:1b:a1:14:1f:78:0e:dc:75:92:
86:21:96:c2:cd:20:cb:55:8a:4c:6c:46:33:5c:61:98:ca:ca:
f0:82:6d:8f:02:5e:23:28:0a:d1:f0:f9:dc:0c:e6:de:a4:f7:
ac:b8:83:7e:05:71:79:ae:84:90:db:e2:4a:52:ea:b5:7c:d0:
2d:f0:f1:b3:8c:e3:1f:53:0c:a4:d6:fc:12:64:9e:75:06:6f:
9a:96:06:a0:35:08:92:d7:ba:1b:c6:85:bf:1b:3f:5f:e6:53:
77:b0:39:13:0e:28:c8:c7:3d:d2:f9:c3:c7:1e:8b:52:9b:26:
2a:eb:1d:45:d4:5c:a9:04:83:1b:87:f9:78:41:00:a6:2a:55:
02:a5:9c:ff:1d:8d:d7:0c:9c:46:6f:72:ae:23:27:dd:b5:59:
75:5a:74:7d:33:d6:9f:80:c1:5a:c9:f1:01:a1:b0:a7:34:4e:
42:b2:c4:6b:7a:96:68:c0:4e:21:14:bc:c4:f3:6f:00:03:b7:
5e:4d:bd:7e:16:c6:e1:78:0b:dc:36:0c:b7:18:cd:72:0c:81:
24:31:3f:2a:f0:c2:2c:42:ac:d4:b6:65:c9:77:6e:44:99:12:
d1:89:f9:69:d9:b9:01:c6:46:91:eb:62:01:5f:8b:13:02:7f:
27:16:00:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 12:31:50 2026 by rpki-client