Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: ke5QHtEAKp4dm/7rXYyoUi4mtqAgd1Yu1wsJauyvSps=
Subject key identifier: 3B:92:F7:F7:9C:E0:E3:D7:0C:FC:E7:ED:AB:7D:3E:72:F3:F0:54:8A
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01A10BEFD9553EE4C7DFF63917E6EF796A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 05E5
Signing time: Mon 05 Oct 2026 12:00:30 +0000
Manifest this update: Mon 05 Oct 2026 12:00:30 +0000
Manifest next update: Tue 06 Oct 2026 12:00:30 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: EEPC8YW7f2C9DU0i9mZvPe5Rpgd3pr/UZsoP/Sf4RvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:d9:55:3e:e4:c7:df:f6:39:17:e6:ef:79:6a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Oct 5 12:00:30 2026 GMT
Not After : Oct 6 12:00:30 2026 GMT
Subject: CN=3b92f7f79ce0e3d70cfce7edab7d3e72f3f0548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:0c:9e:b6:01:20:68:77:13:8c:5f:66:3b:
9b:fa:ea:4b:55:2e:5d:fa:26:13:0f:19:9b:82:ce:
91:2f:e3:f7:5b:66:99:32:46:bc:85:41:96:e9:9e:
1d:97:89:d6:b8:66:42:f2:06:e0:74:0e:ef:41:44:
2b:4a:37:56:a8:30:99:bb:9f:6c:4a:98:31:88:81:
f4:f8:57:c6:42:f8:93:53:6f:79:53:a4:e6:b6:77:
d8:af:85:77:2e:e0:1d:fe:cc:55:68:a9:15:00:18:
10:e2:c9:39:0d:9e:a0:ef:fa:a0:dd:f6:fc:fd:cc:
41:10:2f:ba:4c:96:e7:d5:32:9f:91:3c:ff:4f:f3:
ca:52:61:83:01:58:3e:e6:e1:b3:6c:02:78:b9:a3:
89:bb:32:1f:b7:6c:f5:43:07:16:d8:1b:a8:d5:af:
6d:32:a1:db:c5:ae:cc:81:9b:6e:89:2c:66:a1:39:
8a:7c:cf:6c:e0:42:64:42:33:04:94:37:88:7b:bf:
f8:42:37:80:47:45:e6:c1:d8:85:a8:55:bd:b4:22:
3f:9c:75:bc:00:73:0f:68:6f:be:57:fa:15:29:85:
e8:30:43:97:35:d5:3e:55:c2:69:b9:4f:18:16:f5:
d0:5f:5f:3e:24:84:06:c0:20:e1:ba:9b:71:c9:26:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:92:F7:F7:9C:E0:E3:D7:0C:FC:E7:ED:AB:7D:3E:72:F3:F0:54:8A
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:37:15:d8:d1:bc:ed:5c:2c:eb:06:b5:08:b3:91:e2:b9:69:
3c:86:84:42:38:c6:03:fe:96:d5:5e:67:66:ba:a4:65:95:e9:
a4:c9:fb:37:cf:ca:d8:a2:02:23:6b:31:21:9b:dc:17:7f:80:
bc:b2:a2:52:29:6e:94:6f:71:17:ee:52:41:9e:e2:3f:48:87:
04:91:c6:04:6c:7f:94:e1:09:a9:fb:08:0a:3c:4f:0c:a1:38:
b7:2d:3a:21:31:b2:74:3c:c2:c5:2a:41:fa:7a:ef:f2:3a:44:
37:f1:97:bf:e1:80:29:bf:43:33:c2:43:01:8c:52:28:82:82:
f0:d7:bf:77:ed:32:db:b2:75:68:e1:c3:b0:b1:6a:9d:27:eb:
0f:b2:4b:e1:c5:2d:41:2c:d8:b5:c6:f6:b0:68:1d:e5:42:71:
09:90:11:c9:70:83:47:68:dd:cc:6e:de:ff:07:03:88:79:fe:
25:b3:d5:49:e0:df:0e:ba:29:01:b5:b9:ad:70:97:eb:2c:8c:
85:be:6e:92:fd:4f:36:b1:eb:6f:39:15:99:d2:ac:76:33:44:
0c:8b:74:db:10:c9:1d:c1:cd:50:6d:f7:e0:14:c8:69:27:28:
56:a1:8f:50:0c:4f:55:b9:07:46:f8:89:ee:da:dd:bc:b2:47:
ba:d2:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:39:37 2026 by rpki-client