Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File: siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier: 1ptbSmFcDBtuHmLMnHdLOR+ZOSBZ9NMzxNobCpXzerQ=
Subject key identifier: F7:65:89:B4:1E:5D:F7:34:54:B7:A8:49:B4:8E:44:32:7A:0C:88:A4
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial: 019D3940C6CEAAC9F983A5170E991A2E0D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number: 07A9
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: 6OXpRrtZl81uAbaJZrj6hG2s-58.roa (hash: Z7MiZK1QUdB+X/dedEvp9CdKiDJAaHCqww/ap/jKnh0=)
2: S01_WqX5A8fIJ61TCAKKbSOBBxA.roa (hash: kl6QxoWn5nkjbADcqJQCEzgHvLeLucFm5DAq4mJA9hQ=)
3: V0DG5GfpNDQhY80BVaNKbxP2_OQ.roa (hash: GGZTU575eBVslHsOPGqLGchOk6Yf9luJKsqt+OFhTRM=)
4: hOsDm_jLjaABWQYdgF5cRs0nk_I.roa (hash: x7cu1utx5qWvwfcBByX3NCvCKM+cJIOmug/RN9fVkCg=)
5: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: rnDzM+qnzGy35xeR5hzR0keuSBx+oNWUdDpl3U9Y2xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c6:ce:aa:c9:f9:83:a5:17:0e:99:1a:2e:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=f76589b41e5df73454b7a849b48e44327a0c88a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:6d:51:13:fb:b6:b3:32:5e:8d:46:e1:78:
fa:28:17:4e:91:02:b3:68:21:9f:06:e7:88:4f:ea:
65:13:0b:b5:d8:9e:22:9e:ff:8a:8c:7a:16:ef:76:
f4:84:d1:5d:eb:aa:af:3e:0e:fd:db:39:4b:4f:ad:
c3:14:04:2c:62:c2:f2:1e:3c:24:76:3e:cf:c3:6b:
87:3b:90:24:0d:ef:34:d7:28:50:23:60:5e:e9:a8:
2a:c9:6c:47:f2:a9:a1:03:75:73:1a:fc:1f:68:98:
c1:f2:15:f0:21:1b:8e:42:cd:b8:d3:4c:5c:8d:de:
dc:60:a5:92:f1:bb:2a:f2:53:63:de:15:c6:44:2c:
1c:e9:d2:e2:58:6e:f5:5f:57:6b:07:d0:dd:44:98:
f4:d5:6b:25:93:f0:fe:e9:d0:6f:0b:b7:b9:e9:c5:
3a:73:eb:7d:83:fb:b4:3e:96:6a:82:90:38:6f:38:
12:71:17:ff:5d:46:fa:d2:ac:88:4d:bb:f8:ca:b8:
9e:c8:84:c4:83:e5:b8:bd:89:93:a0:fe:fc:f0:54:
d0:8c:69:73:fb:0c:2d:0b:90:e4:d4:a0:29:f0:4d:
0c:7b:60:0b:a6:80:83:cf:b4:e0:89:68:e7:d9:a4:
8e:c6:48:f5:43:82:4e:ab:1b:25:15:be:d9:6f:f5:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:89:B4:1E:5D:F7:34:54:B7:A8:49:B4:8E:44:32:7A:0C:88:A4
X509v3 Authority Key Identifier:
keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2a:9a:c3:75:ad:64:2c:e5:ec:d1:f5:06:83:84:b5:db:c4:
51:c1:d0:28:9b:9c:30:ae:de:2f:f0:65:1c:7a:ed:2f:4d:aa:
ee:f1:7a:fe:4b:db:51:ab:3c:93:1f:9d:46:69:b3:1b:e5:26:
4c:d6:28:a5:0f:87:ce:8b:9e:f6:dd:f8:cc:00:f8:51:57:12:
65:21:31:4d:d4:c5:67:66:eb:ba:3f:d4:20:b8:c5:ef:37:9e:
63:b1:ff:f4:6e:cd:e0:8c:77:55:30:b9:8e:24:11:bc:db:54:
e6:e1:75:58:ef:c6:ac:e6:04:98:dc:51:9d:4f:4d:b6:77:14:
8c:45:a4:1f:05:b4:df:9a:18:3c:70:71:87:80:c9:4d:42:58:
34:66:8b:f9:c6:cb:4b:76:2b:dd:e5:79:7d:4c:b4:67:f6:51:
08:96:74:4c:3b:c9:a4:e8:40:c6:f1:4d:f0:7e:db:49:92:a9:
41:44:bf:95:ae:10:2f:92:88:95:2a:3b:19:8a:0b:41:4c:bb:
2e:e4:15:0c:ad:0e:95:f6:45:b4:e4:c5:e9:27:ac:1b:35:95:
9a:ba:25:6e:57:23:a1:39:44:c3:3b:9a:3c:7d:8f:5c:0a:da:
ae:95:f5:48:8e:c7:ed:36:f9:d0:6c:53:f6:94:de:aa:81:c4:
fb:b1:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:22 2026 by rpki-client