Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: KgAou3x0EajZAwb1RXOhmFFeFk1QA6hlkiLuzY5Zew0=
Subject key identifier: EF:2A:F2:52:E0:CE:46:6E:63:B3:CF:27:87:8F:25:16:71:1F:17:69
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019F954A5F5885264C83952CD9706007AFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 0523
Signing time: Fri 24 Jul 2026 18:01:46 +0000
Manifest this update: Fri 24 Jul 2026 18:01:46 +0000
Manifest next update: Sat 25 Jul 2026 18:01:46 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: LSUhlOhsFWdB0vchdBwV+bal2Ax29tGLdIou8haAMIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:5f:58:85:26:4c:83:95:2c:d9:70:60:07:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jul 24 18:01:46 2026 GMT
Not After : Jul 25 18:01:46 2026 GMT
Subject: CN=ef2af252e0ce466e63b3cf27878f2516711f1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:89:3e:9d:61:55:b6:22:63:30:1e:ba:a8:
fa:60:40:05:f7:6a:e3:24:8b:b0:8f:be:c3:2b:86:
7c:b1:fe:16:cb:83:69:4c:e3:59:54:df:3e:ca:d6:
4a:19:30:f9:95:6f:98:5c:05:00:78:0a:08:9b:89:
ec:b1:9a:a3:a3:51:34:ef:3b:80:ea:c0:6a:2b:8a:
77:5a:89:87:60:57:7f:27:3e:69:e4:ca:c3:9d:ad:
b2:3b:40:95:84:25:7c:58:7d:75:6c:5b:02:1d:84:
7e:b8:1a:e8:a2:dc:56:86:d6:43:cc:ab:b5:77:1d:
2e:d1:2a:71:7e:db:5b:da:ee:2e:36:b4:eb:4a:46:
26:af:32:c8:68:9e:d2:ff:e5:ae:e5:70:62:8a:92:
0a:fe:06:e1:ab:4d:d9:df:ef:85:96:5b:65:a4:1d:
60:f9:ae:e5:fb:a1:b6:a5:ce:1a:96:95:97:ed:93:
01:ae:95:eb:75:f8:ba:96:4a:51:2f:c9:64:40:6b:
5d:4d:01:d0:36:a8:34:1a:6f:9c:0a:e9:42:9f:c8:
83:dc:ea:8d:29:6e:e2:b0:3c:66:68:f2:ee:74:64:
9a:fa:d9:b2:48:b1:74:bd:d9:2e:5a:57:32:db:27:
94:ed:e4:ef:8d:72:0d:a2:da:57:80:50:3d:7e:77:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2A:F2:52:E0:CE:46:6E:63:B3:CF:27:87:8F:25:16:71:1F:17:69
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7c:b6:ef:87:92:d5:74:a5:4f:9f:af:1b:64:57:23:47:38:
19:a0:db:7c:d0:f4:4d:b0:8c:95:55:44:b9:05:35:d1:0a:50:
4f:ba:fc:91:b7:c5:ba:1f:6f:53:e9:2a:6a:f2:61:55:40:58:
44:29:3d:82:10:37:2a:b6:25:30:3b:33:ec:6d:b6:a9:f6:15:
46:86:df:1c:e2:c9:22:49:44:76:d8:2a:15:08:0b:ca:0a:5f:
19:3a:bd:2b:5f:80:9d:62:61:ad:4c:c9:2c:79:b6:3a:65:ee:
ea:30:ea:6d:64:45:58:05:2c:46:b0:1f:b1:4c:b0:3f:e4:ef:
ac:50:93:61:c6:a2:cb:be:f4:20:0b:fe:2e:a3:01:de:8b:ae:
c3:a9:3c:2b:de:08:4f:34:33:fd:21:d0:37:bf:3a:cf:db:34:
86:90:d6:77:91:7d:9f:41:43:77:bc:e6:dc:b7:a3:59:5a:c0:
7e:67:7e:08:47:08:80:ce:8b:42:5d:eb:f5:07:7e:bb:4e:79:
a2:c8:0f:f4:1a:d5:54:27:6f:fb:42:91:a9:82:75:c8:2e:82:
31:f3:f3:79:6d:ee:65:5e:38:82:99:e3:bb:0d:e1:60:2c:7e:
b7:92:6a:39:a5:e5:2c:0b:76:d6:43:7f:46:6c:18:f2:22:cd:
fb:56:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:59 2026 by rpki-client