Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: j44TbkseKclbCiur+qFPhNRV4ZScwKa75YxS28JSPH0=
Subject key identifier: 51:B0:5F:31:E0:AF:63:C7:4B:D5:D4:6D:29:76:38:BE:B1:95:EE:42
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 01A12B447006A6279BB03192681076D319F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 12F3
Signing time: Sun 11 Oct 2026 14:01:07 +0000
Manifest this update: Sun 11 Oct 2026 14:01:07 +0000
Manifest next update: Mon 12 Oct 2026 14:01:07 +0000
Files and hashes: 1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: nUTisr8RnKsyWGm8gx8xKxuKsgFXVtphZE6FM14z3Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:70:06:a6:27:9b:b0:31:92:68:10:76:d3:19:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Oct 11 14:01:07 2026 GMT
Not After : Oct 12 14:01:07 2026 GMT
Subject: CN=51b05f31e0af63c74bd5d46d297638beb195ee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:91:4d:95:89:e4:2b:a4:3b:e4:85:c9:73:
45:d3:36:6d:42:be:62:bc:55:63:dd:21:82:63:ca:
f7:84:5b:9f:b5:b9:cd:76:5b:66:7c:84:67:4a:a7:
99:c3:20:7c:12:52:ba:bd:16:70:26:ec:0f:36:01:
e5:e0:8b:56:d0:38:72:d5:3a:7f:e4:d2:7c:18:1f:
a7:2f:2b:f9:5d:bc:f5:38:3e:3c:21:d2:21:96:26:
b0:36:f0:89:44:40:9d:fd:6c:5c:8f:8c:9c:7a:a7:
a1:63:a0:0a:f4:7f:c2:de:97:54:2e:8d:dd:dc:d1:
8d:c8:57:6f:41:9f:3f:b8:8a:ba:14:10:ec:b6:42:
7a:19:11:0c:25:9b:16:76:39:23:45:33:da:f7:f4:
9a:a7:cf:c4:a0:29:92:fb:56:0c:27:19:d7:b5:0c:
81:72:5c:bd:9b:07:74:cb:df:5b:1e:f5:53:89:04:
7f:0e:4b:82:97:95:68:5e:c1:ff:ef:e5:6b:4b:45:
24:15:6a:e8:c4:6c:a2:2c:44:73:f3:df:80:f7:75:
b6:e3:ee:66:5c:73:d9:db:cb:b2:3d:c6:97:3e:1f:
b5:85:b3:ab:19:81:2f:da:8c:8c:3c:19:e7:00:2b:
37:1f:c9:7a:72:c0:c5:9d:80:e1:5b:44:e8:d0:e7:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:5F:31:E0:AF:63:C7:4B:D5:D4:6D:29:76:38:BE:B1:95:EE:42
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:be:ef:4e:44:c6:59:38:22:39:51:a8:57:c8:b1:a6:a5:
a7:fc:1d:e6:c0:f8:db:fe:6e:a0:6b:86:f4:13:cb:8b:c0:bc:
f6:01:96:e7:c3:97:23:f2:ec:a7:6c:97:8b:ce:9e:20:66:87:
5c:9b:2e:39:55:e3:26:d9:11:3d:22:40:ab:13:82:4a:4b:ae:
7c:56:a4:26:8e:41:e9:7d:65:ab:ec:80:b2:aa:e2:4b:e0:e0:
4c:c8:94:6e:2c:14:f8:47:13:33:94:85:8c:eb:4e:93:06:05:
8f:62:1a:fb:81:a8:40:c0:31:8f:62:56:60:7a:bd:04:69:d2:
d2:61:a3:5f:13:a8:20:7e:d6:42:09:9b:48:1f:e2:c0:70:df:
b3:1a:40:0a:6a:22:d4:82:a0:6b:74:ea:eb:b2:86:a5:28:13:
93:a8:80:a7:38:94:ae:30:62:46:e5:d1:e8:74:dd:2c:1a:fb:
4e:d6:20:35:0e:b8:be:eb:a2:fd:6a:c1:2a:f3:b1:de:59:75:
8b:af:ab:01:7a:cb:af:51:90:0b:ff:81:03:d6:63:68:c0:e4:
a4:a2:69:38:8a:e0:7a:ca:c6:3f:db:ce:de:e4:00:48:84:75:
57:2a:35:8e:78:26:18:ca:cb:31:1a:83:b8:c2:14:a9:ed:61:
85:97:64:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRHAGpiebsDGSaBB20xn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmU4OGY1MDdjZDJlYWRiYjIzMmM4NjRmNzFlZGJhNmVj
YjVkYTAwHhcNMjYxMDExMTQwMTA3WhcNMjYxMDEyMTQwMTA3WjAzMTEwLwYDVQQD
Eyg1MWIwNWYzMWUwYWY2M2M3NGJkNWQ0NmQyOTc2MzhiZWIxOTVlZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pKRTZWJ5CukO+SFyXNF0zZtQr5i
vFVj3SGCY8r3hFuftbnNdltmfIRnSqeZwyB8ElK6vRZwJuwPNgHl4ItW0Dhy1Tp/
5NJ8GB+nLyv5Xbz1OD48IdIhliawNvCJRECd/Wxcj4yceqehY6AK9H/C3pdULo3d
3NGNyFdvQZ8/uIq6FBDstkJ6GREMJZsWdjkjRTPa9/Sap8/EoCmS+1YMJxnXtQyB
cly9mwd0y99bHvVTiQR/DkuCl5VoXsH/7+VrS0UkFWroxGyiLERz89+A93W24+5m
XHPZ28uyPcaXPh+1hbOrGYEv2oyMPBnnACs3H8l6csDFnYDhW0To0Oep/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGwXzHgr2PHS9XUbSl2OL6xle5CMB8GA1UdIwQY
MBaAFJ4uiPUHzS6tuyMshk9x7bpuy12gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYt
OTJkNWQzOTcwYTU5LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYtOTJkNWQzOTcwYTU5
LzEvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEu+705E
xlk4IjlRqFfIsaalp/wd5sD42/5uoGuG9BPLi8C89gGW58OXI/Lsp2yXi86eIGaH
XJsuOVXjJtkRPSJAqxOCSkuufFakJo5B6X1lq+yAsqriS+DgTMiUbiwU+EcTM5SF
jOtOkwYFj2Ia+4GoQMAxj2JWYHq9BGnS0mGjXxOoIH7WQgmbSB/iwHDfsxpACmoi
1IKga3Tq67KGpSgTk6iApziUrjBiRuXR6HTdLBr7TtYgNQ64vuui/WrBKvOx3ll1
i6+rAXrLr1GQC/+BA9ZjaMDkpKJpOIrgesrGP9vO3uQASIR1Vyo1jngmGMrLMRqD
uMIUqe1hhZdkoQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:27:01 2026 by rpki-client