Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: LJsYX/ScT7VDMITJzVEyb3WUSzpTbG0yWS5/N4drE3g=
Subject key identifier: 01:9E:CA:6D:2A:28:AF:73:43:B0:16:14:2A:04:3D:A4:24:4F:D8:DC
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01A122418056D67A0EF989A1E9F7EB19D1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 107B
Signing time: Fri 09 Oct 2026 20:01:20 +0000
Manifest this update: Fri 09 Oct 2026 20:01:20 +0000
Manifest next update: Sat 10 Oct 2026 20:01:20 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: HHzvNZgRHaUB9Xw5Vr9hzlHwzSaTX2G1aqzM6E9XQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:41:80:56:d6:7a:0e:f9:89:a1:e9:f7:eb:19:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Oct 9 20:01:20 2026 GMT
Not After : Oct 10 20:01:20 2026 GMT
Subject: CN=019eca6d2a28af7343b016142a043da4244fd8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:85:d0:48:f3:9f:32:8b:f6:91:46:88:6b:
a0:ab:27:14:41:96:e5:35:31:c7:64:89:4e:d8:b1:
97:b6:23:35:7c:19:78:84:7c:17:f0:a7:bf:f6:28:
80:71:60:7d:d5:46:38:7e:5a:30:c3:4e:ea:d2:0c:
b6:eb:d7:dd:cb:78:dd:bd:21:ef:d0:be:bd:b2:05:
5d:ff:63:22:9b:e6:a5:0d:a0:01:f9:1e:79:80:0e:
a5:2b:b4:e6:91:a6:95:97:38:cc:e2:da:69:f4:c9:
e1:ea:b3:a4:c0:73:c4:8e:0b:e4:f9:a5:29:6e:06:
49:c3:a9:ee:c0:d0:e5:fb:ba:13:84:1e:c2:ba:75:
69:62:95:e4:08:33:18:43:4a:b6:5a:e1:46:86:87:
17:c5:6c:ec:f4:0e:9d:6d:78:5b:27:6f:aa:e0:30:
8f:7b:cc:f2:12:0a:83:59:72:b3:0c:ed:b9:1e:a6:
73:8a:df:79:ae:78:ad:0a:8a:b8:70:9d:a6:82:1c:
04:22:ca:f6:bc:45:3b:53:41:de:96:d3:7c:74:bb:
42:2e:93:e2:2d:a5:38:eb:47:5a:07:a9:82:2a:d0:
8e:fd:b1:b0:5b:1d:13:d7:8d:a7:1c:37:cc:32:3f:
e3:ef:fd:84:fe:1b:e4:05:37:83:9d:d2:71:bd:9b:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:CA:6D:2A:28:AF:73:43:B0:16:14:2A:04:3D:A4:24:4F:D8:DC
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ac:4a:16:fb:1a:53:84:b7:7b:7c:78:91:e2:2d:82:58:0c:
e3:db:6a:40:b4:18:6b:ac:a8:08:d9:07:9e:b5:6c:bd:83:3c:
07:47:e0:72:77:a8:c7:e3:bf:e3:42:56:22:fc:a7:ca:52:ab:
d5:dc:76:45:e6:60:1b:08:34:87:55:27:e7:22:d6:5b:7a:4c:
e3:c0:6a:96:09:6d:e5:e0:53:a5:0c:c6:ce:7a:ef:0e:a3:00:
12:a6:2f:cd:ee:b7:9e:fe:da:69:f4:06:6f:38:0c:cc:aa:45:
31:7a:2a:dc:90:4f:9f:fb:8f:99:dd:4c:84:df:c4:fb:f7:7e:
5e:7e:04:0a:64:f9:60:22:ab:25:58:c4:94:6d:bb:13:ff:f4:
23:d0:07:ec:fe:2d:63:f7:16:21:44:76:7c:3d:db:87:9d:35:
6f:7b:3d:63:2a:a1:c1:b1:a3:ac:7f:8f:4a:7b:ed:43:71:c4:
04:21:8e:63:f3:86:8e:66:b7:c6:32:f3:21:36:f5:e2:77:0d:
06:10:09:20:bc:83:ad:79:4e:4b:c2:20:38:84:fb:eb:ff:00:
ae:ec:6f:23:80:32:9b:06:c2:53:58:47:b0:83:c2:63:49:cf:
9d:d2:ed:6e:5c:e3:d6:c5:50:f3:c2:ed:e1:c1:57:6f:98:b2:
4f:73:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:49:12 2026 by rpki-client