Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: 4Jx97QyYD0jks45f2E3JLHzeVeZoQJ62SPvHKP6kZGg=
Subject key identifier: C5:30:52:E1:0D:00:52:25:70:A9:A8:A1:BD:94:D8:94:45:90:D2:E5
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019D25834928B73E85AF8653D661EB4DA1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 03E0
Signing time: Wed 25 Mar 2026 15:00:54 +0000
Manifest this update: Wed 25 Mar 2026 15:00:54 +0000
Manifest next update: Thu 26 Mar 2026 15:00:54 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: 44ABotjCPcAK9ka4MP1mZdRKqA5X+gmKW84o8AjLU+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:49:28:b7:3e:85:af:86:53:d6:61:eb:4d:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Mar 25 15:00:54 2026 GMT
Not After : Mar 26 15:00:54 2026 GMT
Subject: CN=c53052e10d00522570a9a8a1bd94d8944590d2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:2b:38:97:d1:15:d4:b1:3c:21:54:30:a6:
f2:ef:a3:f7:6f:9e:18:c7:bf:02:ad:e7:86:61:87:
33:70:fe:0a:aa:bd:bb:17:98:cd:c2:0b:99:25:33:
ba:b8:b5:e7:5e:02:34:49:13:e6:ce:ef:68:51:4d:
7f:68:54:27:08:e5:4d:68:a2:79:6e:70:a5:95:29:
2e:df:2b:4b:f1:ff:19:1a:71:b0:ac:87:0b:cf:7c:
94:b5:54:28:61:93:fd:f0:c6:9a:8f:88:e1:b4:ea:
06:5a:52:52:bc:f1:3c:e9:6a:60:6c:3e:73:19:7c:
79:6e:24:77:ac:ea:1b:a2:85:de:1a:33:cb:da:d0:
bd:f7:e7:8f:e4:74:2f:77:a2:e9:0f:2f:1a:98:af:
36:84:37:f8:33:3c:3d:6b:4c:81:1f:47:2b:a4:3c:
32:98:64:ce:f8:2c:c5:37:04:31:4a:a3:f0:b1:e4:
8e:9f:ce:88:c6:a6:fd:01:30:64:d7:87:41:2f:ca:
ce:50:1e:78:cc:23:4c:58:33:e9:bf:7a:54:19:69:
ae:79:ce:78:d9:b5:ca:91:72:57:24:7a:54:fe:70:
4a:9c:7c:0e:87:e7:c8:5b:98:2a:1b:8d:58:09:62:
38:2d:26:94:25:71:7f:2b:ac:31:96:9b:0d:c5:27:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:52:E1:0D:00:52:25:70:A9:A8:A1:BD:94:D8:94:45:90:D2:E5
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1f:cd:a9:9a:9b:b0:57:2d:cd:88:93:52:d4:d5:5a:ca:cc:
3e:73:80:53:13:bc:fa:45:1d:b1:06:61:25:68:02:e5:a6:cb:
99:58:06:ec:2e:58:4c:96:d5:63:c9:06:3e:f9:ed:f7:31:df:
4a:f4:f1:44:c8:f6:20:24:90:ac:4c:0d:3d:53:87:35:36:2f:
08:3d:d1:ee:c7:ca:af:d8:a4:ff:df:ab:eb:72:61:f6:e4:16:
84:93:22:df:13:86:88:de:15:2b:74:95:64:eb:d2:bd:cf:81:
d9:d1:7c:87:45:aa:c4:1a:17:e7:3f:11:2d:2c:66:61:b0:2c:
dd:11:0a:03:b1:24:06:fc:0c:e3:88:db:14:c7:27:68:97:70:
ea:b8:10:64:80:a2:1a:b0:df:11:fd:dd:c7:ba:8d:86:a5:40:
07:c4:e8:35:ee:e6:a4:f6:b2:5f:21:f5:27:ac:2d:57:5d:eb:
e6:ea:b8:5f:e6:c4:3d:ec:ab:af:e2:2c:71:68:4e:fd:df:dc:
b4:71:56:04:c4:31:0a:ba:3e:63:23:3b:14:77:9f:f3:d4:fe:
59:c8:58:a7:96:2c:86:b6:36:d1:83:55:65:96:d1:95:c9:1f:
c6:4e:6c:a1:a5:bb:43:40:b2:30:88:d4:dd:cb:e7:70:03:3c:
eb:7b:93:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg0kotz6Fr4ZT1mHrTaHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjYwMzI1MTUwMDU0WhcNMjYwMzI2MTUwMDU0WjAzMTEwLwYDVQQD
EyhjNTMwNTJlMTBkMDA1MjI1NzBhOWE4YTFiZDk0ZDg5NDQ1OTBkMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf8rOJfRFdSxPCFUMKby76P3b54Y
x78CreeGYYczcP4Kqr27F5jNwguZJTO6uLXnXgI0SRPmzu9oUU1/aFQnCOVNaKJ5
bnCllSku3ytL8f8ZGnGwrIcLz3yUtVQoYZP98Maaj4jhtOoGWlJSvPE86WpgbD5z
GXx5biR3rOobooXeGjPL2tC99+eP5HQvd6LpDy8amK82hDf4Mzw9a0yBH0crpDwy
mGTO+CzFNwQxSqPwseSOn86Ixqb9ATBk14dBL8rOUB54zCNMWDPpv3pUGWmuec54
2bXKkXJXJHpU/nBKnHwOh+fIW5gqG41YCWI4LSaUJXF/K6wxlpsNxSeR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUwUuENAFIlcKmoob2U2JRFkNLlMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnR/NqZqb
sFctzYiTUtTVWsrMPnOAUxO8+kUdsQZhJWgC5abLmVgG7C5YTJbVY8kGPvnt9zHf
SvTxRMj2ICSQrEwNPVOHNTYvCD3R7sfKr9ik/9+r63Jh9uQWhJMi3xOGiN4VK3SV
ZOvSvc+B2dF8h0WqxBoX5z8RLSxmYbAs3REKA7EkBvwM44jbFMcnaJdw6rgQZICi
GrDfEf3dx7qNhqVAB8ToNe7mpPayXyH1J6wtV13r5uq4X+bEPeyrr+IscWhO/d/c
tHFWBMQxCro+YyM7FHef89T+WchYp5YshrY20YNVZZbRlckfxk5soaW7Q0CyMIjU
3cvncAM863uTEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:39 2026 by rpki-client