Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: HY+sFW2cPGD+5x4/nxmjX8NWBc+ttP9lYhrpIa2d4yA=
Subject key identifier: 67:B1:21:B7:12:D9:1D:B0:62:24:55:54:A3:8D:68:15:75:D3:3B:97
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 01A0FC4690375EFD2FB320707E53863B6DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 188F
Signing time: Fri 02 Oct 2026 11:01:17 +0000
Manifest this update: Fri 02 Oct 2026 11:01:17 +0000
Manifest next update: Sat 03 Oct 2026 11:01:17 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: ZCd6/RR9Kcsdo7EoOQ4L1beSPCnHz+PjGqH7kcraQUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:46:90:37:5e:fd:2f:b3:20:70:7e:53:86:3b:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Oct 2 11:01:17 2026 GMT
Not After : Oct 3 11:01:17 2026 GMT
Subject: CN=67b121b712d91db062245554a38d681575d33b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:68:85:7a:8f:fa:1b:95:79:26:eb:2e:da:
79:92:c3:91:ca:f9:89:21:c3:2e:8e:df:c7:9c:e5:
dd:2a:58:78:a1:1e:d2:b3:f1:14:cb:b0:0b:90:3a:
a6:57:d0:1c:5a:f3:09:34:ed:48:59:78:b2:9b:8a:
50:54:07:68:42:5e:8e:d7:81:74:37:75:d9:9a:67:
e1:fb:d5:87:3b:84:97:58:84:b1:13:ab:ae:19:f8:
03:36:7b:45:7c:69:2d:d0:5b:d8:ff:b4:07:39:db:
07:75:91:b6:a0:e6:ef:61:95:a7:1f:8c:f3:1a:b1:
89:9b:98:5c:e2:1f:f5:90:2e:dc:4a:69:f9:78:cd:
b7:57:b7:d2:b1:12:50:d1:6b:fd:59:62:ad:13:b4:
f4:b1:87:3d:f3:bf:06:4c:e2:67:e8:5f:d2:1b:71:
b8:0f:07:c4:5e:af:e4:b1:02:7d:81:4a:5e:1f:4e:
26:73:99:a2:68:25:47:46:b9:34:fc:b5:b0:ce:cb:
fd:47:dc:26:a2:e8:46:c0:18:77:0d:b8:a6:73:c8:
59:b9:26:76:ab:a1:00:90:09:9e:f3:60:06:53:99:
34:f9:52:ce:cb:6a:03:4f:8e:78:de:17:a8:44:c5:
66:9d:4a:1e:b3:49:b0:5f:10:c5:e9:f1:cd:02:85:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:21:B7:12:D9:1D:B0:62:24:55:54:A3:8D:68:15:75:D3:3B:97
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:eb:9d:d7:92:e8:10:5b:63:bb:98:c3:96:d0:f1:c1:30:
2d:b8:04:f9:31:47:86:45:2f:86:16:21:3c:d8:37:ce:b4:47:
87:db:85:d4:98:b9:c0:12:1c:b7:d1:29:2d:7f:02:8f:76:70:
41:cf:b6:7d:54:20:f3:6c:a3:bc:c0:3d:b3:fa:0c:83:8d:be:
d0:52:1f:65:cd:1c:d4:9d:ed:b6:4e:d9:e8:0f:40:7b:92:3a:
21:be:3a:42:f5:84:10:cb:7c:f6:c4:77:98:d7:ea:8c:17:2a:
57:0f:bb:94:4e:6f:a7:bc:cf:a6:a8:9a:08:a0:fb:2c:1f:19:
d5:d8:39:28:31:7f:68:14:10:98:0f:04:cf:89:4a:98:56:c5:
49:74:d9:b8:29:f7:6d:90:3c:f5:d9:1a:72:43:97:15:f9:5a:
ce:3d:14:03:a6:5e:2a:e6:3e:10:9b:55:af:a9:68:70:c9:60:
48:77:17:fb:e9:16:e1:e7:25:20:30:5f:cf:f5:b0:33:b9:2f:
5c:a2:85:c9:4e:f7:da:a2:3f:39:5d:a7:82:a1:29:b3:ad:04:
7a:53:ad:01:52:7f:17:7d:a0:ea:f7:7a:82:76:ef:74:8e:56:
44:2b:75:96:dd:6a:16:dc:2f:d7:38:77:52:40:fa:a7:91:49:
3c:d5:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:58:46 2026 by rpki-client