Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: CfPYDBIPS0D1SC6bcr6fDFDt7yAhWvjNMqjHf5vhii0=
Subject key identifier: 52:11:07:0A:33:78:15:35:4D:A1:83:B4:C7:AC:65:F9:6E:0E:72:02
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A0D5392E5281B444DD1EB9BE4657B67A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0F25
Signing time: Thu 24 Sep 2026 21:01:29 +0000
Manifest this update: Thu 24 Sep 2026 21:01:29 +0000
Manifest next update: Fri 25 Sep 2026 21:01:29 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: u6/t/lbC7cu92XNBEb8ABbH/ioUz4CYuq9q0lwPWo2g=)
6: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (hash: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=)
7: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
8: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
9: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:2e:52:81:b4:44:dd:1e:b9:be:46:57:b6:7a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Sep 24 21:01:29 2026 GMT
Not After : Sep 25 21:01:29 2026 GMT
Subject: CN=5211070a337815354da183b4c7ac65f96e0e7202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:f5:ec:51:aa:61:d5:92:6c:f1:e5:33:87:
af:59:79:ea:ba:5f:23:48:10:92:61:53:8f:e3:b5:
3b:d2:bc:f4:0e:49:0f:77:fb:ae:f8:7a:31:f8:9a:
94:e2:ac:1b:02:bf:0b:e3:c9:09:2d:e1:75:36:fd:
e5:e1:b1:f2:42:6b:6d:1b:17:4f:2f:09:dc:a4:09:
48:1b:b7:84:63:42:44:67:47:df:77:3b:8b:3a:92:
a7:a8:e6:43:64:0b:76:b7:99:b6:cf:3e:86:a7:0c:
79:fa:86:82:68:c8:27:c6:ba:ce:4c:26:d8:60:95:
c8:16:59:84:72:eb:57:66:d2:50:f2:88:0c:54:34:
47:fe:e3:3f:7b:40:11:2b:94:b6:37:98:81:bf:9b:
5f:f2:15:c3:4c:3e:ae:1e:01:43:dc:ca:50:8a:23:
29:8e:eb:50:70:d4:0c:b0:ae:af:a3:02:fc:2d:b5:
f3:f8:aa:17:60:e7:42:d0:7f:8a:53:e3:2a:80:39:
79:76:7f:3e:e4:a1:99:eb:13:9f:50:be:a4:e3:16:
82:bd:f7:5d:ec:90:d3:bb:89:bd:a0:d1:9f:a2:6f:
13:72:67:bf:47:92:26:cc:cd:16:8b:39:5d:43:84:
c2:ca:e1:41:c7:1b:a2:3f:d4:de:76:60:42:5d:51:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:07:0A:33:78:15:35:4D:A1:83:B4:C7:AC:65:F9:6E:0E:72:02
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:05:84:ba:ff:b9:ef:55:5b:f7:97:5f:5f:f4:34:de:27:
39:85:f7:b5:26:85:35:ab:25:c8:68:33:96:09:75:f2:f1:54:
33:fa:4b:d8:7d:43:d3:b7:da:58:d2:e3:ae:2d:18:ac:78:d3:
50:ac:db:fb:61:50:c5:18:33:3e:35:9a:dd:62:13:a3:c2:a1:
57:8b:39:cb:00:19:b2:5b:dc:c1:0a:64:a8:7c:57:fa:22:bc:
3a:3f:26:aa:e4:67:05:83:4c:32:65:18:0a:96:c8:dd:c4:1d:
35:46:1f:87:cd:5e:59:32:1b:14:0b:96:9e:d1:89:ec:2b:31:
75:a8:8d:70:da:aa:a5:f2:35:63:07:f5:26:f1:a9:5b:6a:86:
39:fa:00:65:bd:b9:f3:23:11:a6:91:85:88:59:dc:75:9c:c3:
aa:60:d9:bf:f4:fd:44:3a:f7:34:41:5d:f8:0e:0d:78:ae:74:
1e:05:6a:66:3f:7e:cd:20:55:37:6b:93:2f:8e:4f:2d:5e:ab:
cd:7e:de:85:08:5f:3f:50:27:6d:bf:76:97:dc:fd:e8:5b:20:
3a:ae:24:e0:5b:66:c9:0b:6d:31:2e:a9:74:2c:a0:cb:bd:e7:
c6:82:c8:09:67:62:19:4b:c7:93:03:b3:ab:3c:d5:4c:c4:55:
98:93:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:04:05 2026 by rpki-client