Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: P+JcQ8/u859UF05kNsRtrtwi4AJdNzwQPuM5KDfF1Bs=
Subject key identifier: A8:FA:B2:B1:4F:BA:7C:8E:06:A6:D1:91:D4:BA:87:12:06:F7:29:6E
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019E20922BAD4FBBDF663EDEBCF75F622728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 0462
Signing time: Wed 13 May 2026 09:01:50 +0000
Manifest this update: Wed 13 May 2026 09:01:50 +0000
Manifest next update: Thu 14 May 2026 09:01:50 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: mzh1G0Km7un1sOBMV98NKzrMohgfdj5Miqyre6x0bNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2b:ad:4f:bb:df:66:3e:de:bc:f7:5f:62:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: May 13 09:01:50 2026 GMT
Not After : May 14 09:01:50 2026 GMT
Subject: CN=a8fab2b14fba7c8e06a6d191d4ba871206f7296e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9d:b2:01:86:af:60:17:18:3f:e1:55:8a:49:
75:19:5e:2c:04:3f:b7:93:86:c7:44:26:91:a3:b4:
14:05:a2:d8:eb:49:ee:c8:a5:3d:9c:04:89:b1:08:
50:a3:3f:81:e5:d0:4c:2d:57:5e:48:3d:b6:44:2a:
96:74:8b:d1:4b:21:dd:42:47:ed:e6:18:13:09:37:
ee:c3:9a:85:52:85:ee:ce:d6:b0:62:52:25:dc:27:
36:a0:46:a9:ef:08:42:18:0f:4c:51:3b:e6:10:d6:
46:34:67:b6:2c:a6:7f:a1:4b:43:37:76:eb:81:30:
7f:ea:bb:f0:e1:73:ca:63:80:4b:73:cb:ac:4b:42:
a2:89:6e:94:f1:f7:34:1c:76:66:c2:53:63:44:ab:
fe:21:5c:09:c8:60:41:58:5e:67:47:50:7d:bb:59:
c7:45:75:ce:46:ed:b0:4d:9f:7d:5e:f5:8b:4d:04:
25:78:69:95:14:97:8c:e7:a7:b8:b2:bf:c2:28:8f:
70:72:a7:d2:f6:b7:f7:9f:c2:70:6d:2c:63:ca:a8:
f4:a0:0b:98:80:c4:4f:95:a8:af:b4:79:e8:7e:b5:
87:9e:dc:af:2f:b5:e0:6f:e0:e7:dc:1d:4f:b5:8f:
e0:36:85:2e:91:1a:ef:65:cb:d0:32:3d:19:3f:17:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:B2:B1:4F:BA:7C:8E:06:A6:D1:91:D4:BA:87:12:06:F7:29:6E
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b9:d3:e9:ca:bb:3a:93:0d:08:df:fe:92:71:77:09:7b:85:
38:d2:9d:a7:c4:6b:a0:84:f6:71:8c:e1:21:9e:08:e0:39:f4:
1b:85:4e:4f:9a:0a:4c:31:60:24:61:c1:46:fc:2e:1e:ee:69:
cb:1b:aa:03:15:fa:da:61:fc:90:b2:2e:24:84:c1:a2:23:f2:
6d:5b:c7:f1:39:05:fd:d7:fd:a5:09:af:44:20:79:df:ce:bf:
63:98:50:c1:54:21:85:db:b2:37:06:d1:6e:70:b2:8d:20:f0:
95:55:c6:7e:d0:93:e5:0b:22:0f:24:96:9b:16:39:d7:2f:26:
28:7c:5f:67:9f:15:05:7c:3b:73:65:45:f4:19:57:83:b4:aa:
57:ec:86:17:38:4c:4a:b4:28:44:a7:7a:57:f4:68:18:13:39:
d4:a9:f1:cd:51:06:06:8d:ae:c9:5a:64:64:2b:44:56:64:36:
5d:c0:60:6a:d1:3a:06:b4:df:6a:29:50:a5:63:f7:02:cf:f8:
7d:f2:60:49:4b:4e:d7:a6:92:29:27:7b:b8:80:97:3a:37:1e:
7a:7e:19:15:e8:c3:62:d9:6b:ff:e3:8d:f6:65:35:f1:3f:12:
51:6f:66:ef:60:f0:ba:49:ae:4e:49:4a:ab:65:cb:3a:fe:bb:
1f:0e:e2:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkiutT7vfZj7evPdfYicoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjYwNTEzMDkwMTUwWhcNMjYwNTE0MDkwMTUwWjAzMTEwLwYDVQQD
EyhhOGZhYjJiMTRmYmE3YzhlMDZhNmQxOTFkNGJhODcxMjA2ZjcyOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z2yAYavYBcYP+FVikl1GV4sBD+3
k4bHRCaRo7QUBaLY60nuyKU9nASJsQhQoz+B5dBMLVdeSD22RCqWdIvRSyHdQkft
5hgTCTfuw5qFUoXuztawYlIl3Cc2oEap7whCGA9MUTvmENZGNGe2LKZ/oUtDN3br
gTB/6rvw4XPKY4BLc8usS0KiiW6U8fc0HHZmwlNjRKv+IVwJyGBBWF5nR1B9u1nH
RXXORu2wTZ99XvWLTQQleGmVFJeM56e4sr/CKI9wcqfS9rf3n8JwbSxjyqj0oAuY
gMRPlaivtHnofrWHntyvL7Xgb+Dn3B1PtY/gNoUukRrvZcvQMj0ZPxd5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj6srFPunyOBqbRkdS6hxIG9yluMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLnT6cq7
OpMNCN/+knF3CXuFONKdp8RroIT2cYzhIZ4I4Dn0G4VOT5oKTDFgJGHBRvwuHu5p
yxuqAxX62mH8kLIuJITBoiPybVvH8TkF/df9pQmvRCB5386/Y5hQwVQhhduyNwbR
bnCyjSDwlVXGftCT5QsiDySWmxY51y8mKHxfZ58VBXw7c2VF9BlXg7SqV+yGFzhM
SrQoRKd6V/RoGBM51KnxzVEGBo2uyVpkZCtEVmQ2XcBgatE6BrTfailQpWP3As/4
ffJgSUtO16aSKSd7uICXOjceen4ZFejDYtlr/+ON9mU18T8SUW9m72DwukmuTklK
q2XLOv67Hw7ipg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:11:09 2026 by rpki-client