Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: bVCgTB/wZvtkNcE44C6O1F0oSS0O3/BWnSA4CL4CUWY=
Subject key identifier: 49:75:FD:AA:A6:09:A7:E6:6F:7A:19:2A:CC:AB:62:86:38:5E:05:E6
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01A1242F3463B2D056EFFCD156E839030F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 107C
Signing time: Sat 10 Oct 2026 05:00:35 +0000
Manifest this update: Sat 10 Oct 2026 05:00:35 +0000
Manifest next update: Sun 11 Oct 2026 05:00:35 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: udAvuJVU5K607YTdyoo+/rbB+RiOVi9/SQMjYWwJObc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:34:63:b2:d0:56:ef:fc:d1:56:e8:39:03:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Oct 10 05:00:35 2026 GMT
Not After : Oct 11 05:00:35 2026 GMT
Subject: CN=4975fdaaa609a7e66f7a192accab6286385e05e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:8d:b7:e9:5f:2e:e4:61:36:97:cd:fb:ce:
0d:f5:38:a2:91:46:32:71:1b:71:8f:56:c6:1d:16:
a0:c2:85:75:93:90:aa:f0:26:d6:7d:78:b0:fe:c2:
b6:59:2f:80:cd:45:f5:fd:93:ac:61:7a:9d:d3:e8:
21:c1:2c:0c:8a:83:20:bd:54:f7:4f:ed:bf:7f:27:
82:06:40:48:dc:a7:6e:37:07:81:97:4a:8a:b7:f9:
45:72:d4:34:13:a0:4d:f5:f8:5f:40:49:72:d4:f2:
7e:18:cd:95:9d:70:39:6e:0d:d2:85:9a:d1:c0:1e:
f9:b8:2b:6f:50:84:19:fd:71:06:0d:e6:c9:e4:a4:
59:9e:89:43:9e:f4:ed:15:01:ca:2b:bd:6d:b4:be:
1a:b5:13:81:08:3a:7e:92:a9:ce:c0:97:f6:2d:3b:
e5:a6:5b:9e:07:a0:bb:e7:cb:b0:a1:90:57:6e:83:
7d:df:04:ae:fa:5b:7b:6b:b9:5b:18:ac:87:c6:25:
0f:92:4a:4f:c0:6d:51:81:fd:7c:48:8c:7f:f2:de:
08:42:7b:7c:ee:bb:ba:0d:20:36:1a:d2:d6:3d:e8:
29:63:b3:88:f0:b1:2e:3a:fc:5a:05:2b:3f:12:4c:
45:46:aa:21:34:31:fc:6b:f5:6b:85:df:33:b1:e2:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:FD:AA:A6:09:A7:E6:6F:7A:19:2A:CC:AB:62:86:38:5E:05:E6
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:80:5b:b9:13:b2:0b:4c:bf:1e:85:65:82:2e:54:6c:ac:6d:
76:21:a1:58:37:3f:c7:fc:68:cf:e1:b0:43:34:c5:60:63:49:
87:6a:96:53:41:a3:7b:d7:c4:d1:28:f5:aa:d5:60:31:f7:ca:
0c:79:0e:d9:40:eb:20:f0:7b:34:32:d7:a8:2c:fa:01:39:fa:
0d:f7:8b:30:3d:47:18:c8:5a:ea:39:f4:1a:ee:6b:fc:40:25:
09:4a:54:ad:d7:1a:af:22:05:72:ec:54:bb:59:61:92:0d:18:
79:c2:6b:a2:66:47:b8:08:ed:3e:19:99:74:7a:76:2e:48:bd:
64:0f:5b:1c:80:9a:4a:50:62:03:47:c0:1c:8c:34:ad:68:b9:
f2:68:40:6d:b3:c8:e6:41:da:f5:3e:d7:50:be:79:fa:7d:69:
9f:a9:34:69:10:4d:57:82:46:bd:99:9a:bb:77:ec:d3:cb:03:
2d:db:ae:50:f6:5e:ac:47:66:55:57:db:71:9a:9a:14:4a:12:
dd:5a:2e:81:7e:ac:bf:21:b3:6f:2b:1b:aa:8e:ad:14:ba:88:
06:d8:4b:b6:5e:7a:cb:89:f5:0a:43:bd:d4:95:d7:2a:a0:7a:
c3:ff:aa:dd:df:51:2b:52:79:4f:d6:b9:ee:f7:03:17:eb:53:
3a:9a:37:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEkLzRjstBW7/zRVug5Aw8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjZiOWU0NDQ2NWYwYmQ3MTNjMGExZTA1MDEwM2QzOTEx
ZGNkNjcwHhcNMjYxMDEwMDUwMDM1WhcNMjYxMDExMDUwMDM1WjAzMTEwLwYDVQQD
Eyg0OTc1ZmRhYWE2MDlhN2U2NmY3YTE5MmFjY2FiNjI4NjM4NWUwNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLKNt+lfLuRhNpfN+84N9TiikUYy
cRtxj1bGHRagwoV1k5Cq8CbWfXiw/sK2WS+AzUX1/ZOsYXqd0+ghwSwMioMgvVT3
T+2/fyeCBkBI3KduNweBl0qKt/lFctQ0E6BN9fhfQEly1PJ+GM2VnXA5bg3ShZrR
wB75uCtvUIQZ/XEGDebJ5KRZnolDnvTtFQHKK71ttL4atROBCDp+kqnOwJf2LTvl
plueB6C758uwoZBXboN93wSu+lt7a7lbGKyHxiUPkkpPwG1Rgf18SIx/8t4IQnt8
7ru6DSA2GtLWPegpY7OI8LEuOvxaBSs/EkxFRqohNDH8a/Vrhd8zseK5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl1/aqmCafmb3oZKsyrYoY4XgXmMB8GA1UdIwQY
MBaAFDYmueREZfC9cTwKHgUBA9ORHc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wMjJhZjUtODYyYy00MjhlLWJlZTgt
MjhhNDY4MWMzN2Q2LzEvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wMjJhZjUtODYyYy00MjhlLWJlZTgtMjhhNDY4MWMzN2Q2
LzEvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4BbuROy
C0y/HoVlgi5UbKxtdiGhWDc/x/xoz+GwQzTFYGNJh2qWU0Gje9fE0Sj1qtVgMffK
DHkO2UDrIPB7NDLXqCz6ATn6DfeLMD1HGMha6jn0Gu5r/EAlCUpUrdcaryIFcuxU
u1lhkg0YecJromZHuAjtPhmZdHp2Lki9ZA9bHICaSlBiA0fAHIw0rWi58mhAbbPI
5kHa9T7XUL55+n1pn6k0aRBNV4JGvZmau3fs08sDLduuUPZerEdmVVfbcZqaFEoS
3VougX6svyGzbysbqo6tFLqIBthLtl56y4n1CkO91JXXKqB6w/+q3d9RK1J5T9a5
7vcDF+tTOpo3og==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:39:37 2026 by rpki-client