Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: 6Ftq8w4XCBkzJdiCgNCpfoAlSe/Z2gHTg0JS1iLS/jg=
Subject key identifier: 41:9A:DC:26:B3:0A:97:41:96:D7:C7:90:5F:A5:31:47:7F:B3:5B:8F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A1DCEFCA334697C78EABED0A12CAADBA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0FB2
Signing time: Sun 15 Nov 2026 02:01:04 +0000
Manifest this update: Sun 15 Nov 2026 02:01:04 +0000
Manifest next update: Mon 16 Nov 2026 02:01:04 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: XgV3NuqEFqWESiRQF2A82TRMYORdbGq048EFd9vtcfs=)
6: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (hash: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=)
7: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: x-gsFUsDHGitGQKCRuc3VM0kNoM.roa (hash: zEe9p5KemNkACCMNdCrYtOf0QH3Rb5Ycu0XNQjS02kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:ca:33:46:97:c7:8e:ab:ed:0a:12:ca:ad:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Nov 15 02:01:04 2026 GMT
Not After : Nov 16 02:01:04 2026 GMT
Subject: CN=419adc26b30a974196d7c7905fa531477fb35b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:a1:a1:5b:94:b9:1b:72:6b:d2:2b:96:e8:
4a:32:35:55:36:50:72:57:10:7c:ea:3b:1b:7d:75:
73:aa:e9:9a:c2:2a:87:0d:82:39:b5:fe:c5:9c:f1:
24:6f:f8:e7:33:c3:9a:b1:48:8d:20:43:c9:d7:a8:
72:e2:1b:f1:cd:0b:08:f6:38:e1:4f:66:bc:60:86:
bf:bb:5a:52:b9:8b:db:bc:b5:c9:58:a9:32:fe:47:
47:9e:56:f3:fa:92:7a:86:a1:87:c4:70:50:c4:12:
bd:43:79:4f:5d:f1:36:17:f0:2c:c3:4c:85:06:22:
3c:55:95:54:4f:1b:13:fd:89:c3:e3:75:42:86:c5:
ca:01:ab:8c:05:84:b2:ab:21:a5:dd:c0:f0:92:4b:
16:5a:7c:f3:6f:b4:2b:23:8c:82:1f:bf:fb:50:ea:
51:d7:70:67:d1:a0:bc:ed:d3:ec:b1:e3:c7:af:e5:
89:50:a9:30:7b:04:3f:00:cd:e1:0b:a4:db:b3:51:
94:74:ed:c7:b1:f5:06:9b:4b:fe:1f:da:5b:26:18:
c7:a0:1d:4e:e9:44:c3:56:5a:e7:3d:09:da:a0:a3:
c0:a8:ee:3c:af:ee:93:6d:21:1c:e4:34:f8:96:b6:
01:69:02:d9:74:aa:5c:61:de:b5:24:ac:ac:68:15:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:DC:26:B3:0A:97:41:96:D7:C7:90:5F:A5:31:47:7F:B3:5B:8F
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:00:1d:4e:93:e7:fa:22:f4:ad:46:ef:bc:5a:c4:cc:cf:ba:
16:25:24:1d:1a:2b:8e:24:20:b9:f7:ea:fe:5e:35:ba:e2:dc:
6c:b9:e2:a5:b6:e7:da:5e:5d:dd:4d:55:42:32:6d:a7:47:0f:
85:ef:d7:c5:ec:02:96:67:e2:ae:0c:13:e3:b6:e5:dd:c3:06:
98:73:0f:f1:24:2c:f8:64:e7:58:2b:f3:32:1a:aa:3d:89:c1:
b9:58:6b:8e:1e:9c:8a:b2:9e:e7:ba:ba:c4:97:23:3d:aa:e8:
fc:d7:c2:f0:95:11:77:b2:c9:1c:43:ae:7f:09:07:43:96:6e:
7d:3e:a4:4c:86:16:af:62:b1:b5:70:ca:f4:ad:df:2d:d5:79:
75:cb:9f:b8:de:55:1b:67:39:a0:c8:e6:04:14:d6:92:b4:76:
b5:20:f1:f9:2d:be:46:44:e3:c2:bc:80:08:af:5d:72:0d:6a:
2a:41:18:63:40:9d:63:88:ca:ec:77:3f:78:4b:3f:be:77:c9:
98:62:98:95:8d:6b:9a:c1:ce:86:e6:c4:80:a4:39:40:a9:c2:
33:e8:a7:3f:33:f1:f0:7f:97:bc:d8:cf:c0:dc:5a:06:99:13:
8d:fc:bb:ac:b5:1e:6b:49:39:19:2c:dd:84:fa:a8:24:eb:73:
28:c9:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:50 2026 by rpki-client