Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: /d0hPJOLF+Iee2CYiLA40JPagdOf/01ytJ1Py1zmJGQ=
Subject key identifier: 41:41:05:46:9D:7E:9D:59:D2:BA:B2:C8:98:F5:BB:97:48:07:0C:DD
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 019F927FE39AE150E0A4B2D1A0010B5A7243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0FAC
Signing time: Fri 24 Jul 2026 05:01:22 +0000
Manifest this update: Fri 24 Jul 2026 05:01:22 +0000
Manifest next update: Sat 25 Jul 2026 05:01:22 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: Ticj1w+etz57ZN8iWMhwXn0NwzRoQbDTwFDJ9Z3YV2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:e3:9a:e1:50:e0:a4:b2:d1:a0:01:0b:5a:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Jul 24 05:01:22 2026 GMT
Not After : Jul 25 05:01:22 2026 GMT
Subject: CN=414105469d7e9d59d2bab2c898f5bb9748070cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:0b:36:06:9d:bd:56:74:da:2e:07:5a:92:
38:8e:da:6f:1a:c4:c7:04:20:6b:81:8c:e5:be:ce:
d4:84:a0:84:5f:3e:e6:2b:c4:87:20:a6:93:3c:d6:
0f:94:84:57:e3:ba:42:49:2f:aa:e5:6d:88:90:4c:
f2:5e:a6:ce:10:99:39:b5:e8:5d:12:55:e0:29:a7:
d5:0b:94:a0:ab:8f:2f:10:96:be:5b:c8:94:24:c3:
a2:f3:7d:b7:58:55:40:72:96:23:de:90:8f:54:be:
03:1a:7e:e7:a3:92:2f:55:17:2a:77:4e:01:f7:2c:
bb:20:93:cd:4b:10:e5:ee:a3:2d:2b:a6:f9:e3:d1:
44:f9:6b:da:05:cc:1e:a8:a5:37:f0:1e:8c:1c:51:
44:d9:f1:b8:a6:09:00:21:10:16:21:b7:d0:6e:af:
80:b1:c8:a3:a5:2c:2b:0b:10:9f:4f:2b:57:58:1a:
d3:a5:e5:7c:5a:33:b9:40:b9:a3:11:a6:98:20:b2:
af:e7:d4:ac:71:7d:0b:73:05:66:e1:d6:81:c4:7c:
1c:86:b7:0c:97:92:a2:f9:c8:85:02:f3:fd:30:4e:
53:6e:36:f6:a0:e7:34:e2:b4:33:d0:e2:48:2c:6f:
10:f5:e4:39:1f:0a:65:31:de:8d:af:16:1f:89:55:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:05:46:9D:7E:9D:59:D2:BA:B2:C8:98:F5:BB:97:48:07:0C:DD
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:33:a6:9d:81:c7:33:2a:86:10:c0:21:9c:26:42:bb:77:9e:
8e:44:b9:75:52:d9:d7:cd:fd:9a:a2:e1:d6:61:8f:f4:e9:a9:
11:40:dc:3d:31:f7:3c:db:09:b9:7a:b7:fd:17:9e:3e:8d:ad:
1e:1e:db:57:34:73:d9:c7:7c:b2:f3:4c:7c:82:75:5a:49:ac:
db:d6:d3:ec:35:7d:9a:84:b3:f1:29:1c:7f:38:4e:b1:2a:1d:
b8:55:8b:79:5a:5b:6e:e2:4a:17:d6:c6:9e:1a:cd:71:66:54:
e8:df:7a:4f:83:4f:e4:a8:50:02:3a:db:0f:b5:7b:aa:57:23:
e4:3d:86:24:63:2a:b1:92:d8:67:74:0b:8f:fe:55:7e:24:40:
47:f8:2f:cb:4b:a7:2d:58:dd:9c:8a:3b:60:fb:24:d4:33:e5:
00:2d:0c:ee:ac:85:0b:35:49:c0:24:ca:ce:0e:6d:56:6b:17:
0e:a2:67:a5:20:86:fb:d1:70:b1:b0:d8:ca:74:e5:6b:7b:57:
d9:69:1c:33:a3:68:d3:a6:fc:ba:44:3d:a5:cd:c3:6c:95:ff:
dc:69:27:f0:f2:33:e9:70:c6:98:71:6e:9d:3f:e6:e8:9b:65:
61:40:f0:cc:ec:29:98:3c:f3:be:bd:7a:c4:56:55:b5:f6:a2:
ef:64:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:58 2026 by rpki-client