Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: ZlcB4G+70j0nsVL7Y3+KQFrMH6uq8mqGQk4z5cfmBUo=
Subject key identifier: 20:F5:3D:71:6F:9B:64:9F:0C:F5:5E:EF:AF:26:EA:22:0C:A7:34:E0
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 019D2961325F7B18CB63BC59EECB3F1DA96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 06AC
Signing time: Thu 26 Mar 2026 09:02:08 +0000
Manifest this update: Thu 26 Mar 2026 09:02:08 +0000
Manifest next update: Fri 27 Mar 2026 09:02:08 +0000
Files and hashes: 1: X2EsrEEFKbSK_iJs_zoiqzwXzhw.roa (hash: O5yVAVGf3Sgd/1yPE2jYUPZAzTieJMlFWiMeZmVlrTk=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: x5PUN5N2Gsx4EWBwaTWRpca/itBC3qlsoruCwqffYqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:32:5f:7b:18:cb:63:bc:59:ee:cb:3f:1d:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Mar 26 09:02:08 2026 GMT
Not After : Mar 27 09:02:08 2026 GMT
Subject: CN=20f53d716f9b649f0cf55eefaf26ea220ca734e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:5f:92:2f:d8:f6:62:74:21:6d:98:b2:88:
ee:31:d1:4b:76:41:b6:c6:ff:14:5e:a1:99:ec:27:
4e:b5:f6:65:b2:48:fd:9c:23:62:fe:6b:5b:33:32:
13:b1:4d:77:f4:2e:d6:7f:dc:ca:30:d0:b7:89:3b:
10:6b:38:ca:ad:01:10:e2:0e:21:4b:64:77:ba:7d:
53:af:5b:e9:9a:51:d4:89:aa:39:32:60:e6:a7:1f:
23:81:3b:1f:48:8d:7e:55:11:46:a6:51:40:7e:60:
ca:82:d3:5c:81:97:06:06:69:5b:ca:67:61:ca:36:
20:65:9b:7c:f4:6e:4f:74:72:c3:c7:f9:2b:6a:0c:
d7:0b:ce:fa:cc:a0:23:2f:e3:84:de:05:52:d6:2d:
d8:ca:78:fe:aa:ec:1c:fc:f9:67:94:23:16:be:1c:
e4:37:7b:85:bc:da:5e:74:f5:c1:71:a4:e2:6c:d9:
fe:98:f0:a3:91:84:fb:db:9d:a4:57:0b:02:b5:d0:
2f:70:57:f0:42:24:84:68:cd:f2:7f:a5:89:37:5b:
ae:de:2a:1d:30:eb:c3:06:84:d9:b0:76:99:05:f9:
c6:af:d0:b0:7e:d7:5a:5b:01:8f:51:03:75:44:be:
f1:9b:8a:27:1d:ab:db:c8:f8:a5:8d:e9:4b:21:5f:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:3D:71:6F:9B:64:9F:0C:F5:5E:EF:AF:26:EA:22:0C:A7:34:E0
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:c5:c6:0f:dc:5f:02:97:4f:6b:d3:b5:f9:e7:40:5c:74:
72:90:30:f3:a0:96:f4:bc:3c:8f:32:3b:b6:7c:62:d2:a1:fc:
87:8c:55:ef:83:db:bd:56:ba:60:c7:45:9c:77:0e:90:3d:c2:
bd:c3:10:60:9c:95:49:63:a6:21:e6:8d:aa:6c:dc:71:19:44:
6e:78:83:37:14:44:aa:2c:6c:82:02:5b:50:d8:8e:fb:ff:d2:
a5:fe:77:b9:d6:1f:e3:35:7c:b5:34:b0:f0:8b:6d:8b:73:5e:
c9:4f:c7:08:01:10:2c:1e:fc:ec:70:10:9f:71:25:87:f7:b2:
62:fa:6e:db:8b:7e:f4:74:b6:67:57:66:6c:d3:b5:07:a3:f9:
e2:7b:bc:10:66:e6:f5:ad:bc:b4:98:50:6a:be:39:0e:ce:ad:
80:35:71:25:e1:cc:6b:34:9f:16:22:be:3b:71:25:87:ed:f0:
3d:62:0c:a5:c0:5a:ae:32:e7:12:c7:b8:7f:84:47:68:3a:6f:
1d:ad:7d:30:a5:7f:83:d8:6a:2a:47:e7:87:a5:22:d8:50:69:
0c:e1:c5:44:9d:1c:f3:d8:c7:03:05:d7:4f:24:65:f9:ab:46:
af:6a:5c:0f:11:46:2f:92:df:f3:f2:dd:bb:cd:b1:ba:ae:bf:
4d:6a:42:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYTJfexjLY7xZ7ss/HalrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjVmODc2M2FhMzUxNjg5YjZiYTMzNjI2OWFiMjFjNGUw
MTIwYjMwHhcNMjYwMzI2MDkwMjA4WhcNMjYwMzI3MDkwMjA4WjAzMTEwLwYDVQQD
EygyMGY1M2Q3MTZmOWI2NDlmMGNmNTVlZWZhZjI2ZWEyMjBjYTczNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZZfki/Y9mJ0IW2YsojuMdFLdkG2
xv8UXqGZ7CdOtfZlskj9nCNi/mtbMzITsU139C7Wf9zKMNC3iTsQazjKrQEQ4g4h
S2R3un1Tr1vpmlHUiao5MmDmpx8jgTsfSI1+VRFGplFAfmDKgtNcgZcGBmlbymdh
yjYgZZt89G5PdHLDx/kragzXC876zKAjL+OE3gVS1i3Yynj+quwc/PlnlCMWvhzk
N3uFvNpedPXBcaTibNn+mPCjkYT7252kVwsCtdAvcFfwQiSEaM3yf6WJN1uu3iod
MOvDBoTZsHaZBfnGr9CwftdaWwGPUQN1RL7xm4onHavbyPiljelLIV/HywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD1PXFvm2SfDPVe768m6iIMpzTgMB8GA1UdIwQY
MBaAFJ4l+HY6o1Fom2ujNiaashxOASCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlYNGRqcWpVV2liYTZNMkpwcXlIRTRCSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYTQ1NjQtYTUyNS00NjE1LTlhM2Et
ODkzMGViYjgzZTMxLzEvbmlYNGRqcWpVV2liYTZNMkpwcXlIRTRCSUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wYTQ1NjQtYTUyNS00NjE1LTlhM2EtODkzMGViYjgzZTMx
LzEvbmlYNGRqcWpVV2liYTZNMkpwcXlIRTRCSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrDFxg/c
XwKXT2vTtfnnQFx0cpAw86CW9Lw8jzI7tnxi0qH8h4xV74PbvVa6YMdFnHcOkD3C
vcMQYJyVSWOmIeaNqmzccRlEbniDNxREqixsggJbUNiO+//Spf53udYf4zV8tTSw
8Itti3NeyU/HCAEQLB787HAQn3Elh/eyYvpu24t+9HS2Z1dmbNO1B6P54nu8EGbm
9a28tJhQar45Ds6tgDVxJeHMazSfFiK+O3Elh+3wPWIMpcBarjLnEse4f4RHaDpv
Ha19MKV/g9hqKkfnh6Ui2FBpDOHFRJ0c89jHAwXXTyRl+atGr2pcDxFGL5Lf8/Ld
u82xuq6/TWpCyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:51 2026 by rpki-client