Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: v8le9gzboJBLZUIt4617O9MGca1vq5zPY2EirBZzktc=
Subject key identifier: 27:87:1C:B1:30:74:09:B4:93:17:78:2C:9D:0C:E6:18:F2:B3:08:6F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019E1D591454CC742BFD8DC00A4D6C4C9684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0DB8
Signing time: Tue 12 May 2026 18:00:37 +0000
Manifest this update: Tue 12 May 2026 18:00:37 +0000
Manifest next update: Wed 13 May 2026 18:00:37 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 8R9+unujLoyDyiszvaP5PikTK1IBZlz29/bt9b1RA0k=)
5: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
6: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
7: cpp14lYte57TF7_rOo5C_RYckG4.roa (hash: b/cjdeFMFYdAqGy2c2qn5r13JjD0oTuLC+SpSP2D99Y=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: zIfoqljlX85QzvnSXMz6EhCgOUU.roa (hash: uL/4npychei8p19DfH7kPshAnDAeAA584UCQvzLeiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:14:54:cc:74:2b:fd:8d:c0:0a:4d:6c:4c:96:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 12 18:00:37 2026 GMT
Not After : May 13 18:00:37 2026 GMT
Subject: CN=27871cb1307409b49317782c9d0ce618f2b3086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:1c:f0:9c:fc:94:b7:25:9a:ee:34:07:c9:
b7:05:0f:a7:43:cb:51:30:c8:3d:0a:25:42:fd:98:
36:7e:9f:d4:cc:5b:81:4c:77:20:2c:4b:d9:b9:8b:
9d:96:58:f4:d0:30:2c:45:36:c9:05:47:ca:6e:d9:
8c:d0:e1:32:f5:f0:d6:2b:b2:09:f1:73:a2:b7:fd:
10:75:c3:25:39:10:60:b5:08:40:b6:d8:2f:11:ce:
66:a4:3f:83:58:ef:ca:bc:3f:03:ff:46:3e:fe:9e:
8c:73:ed:9f:ec:00:0b:ad:05:bf:46:b9:5a:ca:35:
eb:b7:a4:38:92:6e:3f:bc:00:e3:38:f6:75:7c:63:
b6:a8:3c:bf:16:0f:f3:82:e7:cf:ea:f5:bc:e6:f9:
9f:37:ed:4b:30:9d:76:3e:41:d1:bc:07:5a:93:42:
31:95:bf:36:86:52:0f:7b:50:4d:7c:27:c9:80:2b:
b7:47:27:55:8f:54:e4:e3:8c:51:7b:eb:e7:f6:8b:
ad:21:2f:17:49:f1:8c:8d:de:0a:66:79:a5:ab:0a:
69:31:18:f7:52:d9:6a:eb:42:08:33:00:c0:40:6b:
31:d6:64:2b:30:24:11:85:bd:16:a1:2d:d6:4d:e7:
c5:b2:b2:88:91:24:71:0b:cf:a8:f7:3c:28:a9:99:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:1C:B1:30:74:09:B4:93:17:78:2C:9D:0C:E6:18:F2:B3:08:6F
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:76:19:b4:18:b8:8a:1a:cb:8a:ca:f0:65:d4:7f:f3:60:06:
0b:cb:ed:b5:6b:86:61:34:25:ac:68:3f:a5:2f:27:b8:8e:9a:
f9:8e:75:a8:db:f1:71:f8:a5:0f:59:70:af:1e:9d:cf:56:0d:
d7:03:81:30:d1:09:aa:7f:0e:34:27:97:dd:b4:60:8a:44:62:
1e:6a:64:3c:3c:c8:75:77:8a:c6:c9:27:a1:b9:f0:04:71:d8:
09:02:05:a2:e8:1b:66:cd:4b:eb:40:91:92:4a:10:9e:6c:47:
5d:c9:fd:be:b0:1f:fb:84:fe:8e:ac:93:df:7e:c0:1a:47:55:
6b:17:58:64:b4:3f:45:78:8e:8a:64:0b:c9:a5:bf:d7:34:4d:
f6:d0:23:74:d9:73:6c:d6:36:25:83:3b:66:6a:42:4f:f5:49:
3d:52:3e:a8:35:45:e0:cf:5c:07:38:95:12:f5:c9:0d:87:0f:
37:ef:34:50:5a:c9:19:fd:24:78:45:f4:34:c4:74:f8:d1:bb:
fd:f2:b8:ca:91:d8:d0:c7:1e:99:36:9b:31:57:91:df:e4:b6:
9c:b7:f8:2a:fb:46:e3:d3:9b:67:5c:ae:2a:a8:54:1d:ab:d0:
2e:ef:98:6a:0b:32:6c:85:12:b9:49:29:3d:85:32:1a:9a:ac:
f9:9f:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:08 2026 by rpki-client