Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: SdJkeiP1zOu+N1MVjnX9MKoHFwp0HFGq775EYVylv+E=
Subject key identifier: 0A:ED:F8:97:7D:ED:E1:12:FC:6F:2C:DD:B2:F3:41:02:D1:43:98:79
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019D26CD2F8CD25E238CA01F1A220BF19D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0D35
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: JbItZf9ABSf86-7KkkB1vZySk1o.roa (hash: a0tstjrRjaBDS5U88HwttEUlKK9xrHVF1IfCJj9oHFM=)
4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: TF2NnctBBVxVYOwIC1y+EV+eFY8M2U+xUblobNq3Zs4=)
5: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
6: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
7: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2f:8c:d2:5e:23:8c:a0:1f:1a:22:0b:f1:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=0aedf8977dede112fc6f2cddb2f34102d1439879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:b1:bc:ca:63:36:f0:77:2c:8f:f3:15:e9:
50:bd:d4:85:1c:c0:c7:54:89:42:e7:59:60:e0:54:
0b:60:b1:48:27:88:b8:8c:48:67:53:07:96:28:87:
9d:ac:55:23:cc:0a:57:74:42:e6:8a:3b:1c:0c:cb:
7f:6d:54:ba:55:4f:01:0e:15:ad:b6:4d:c4:d9:54:
b6:ee:42:e3:6b:43:5f:93:35:0c:c6:6a:10:dc:3d:
44:94:74:f1:db:b1:08:d9:f1:1f:6d:4b:d0:a0:23:
14:86:93:25:b5:21:1f:95:32:84:48:f1:a6:63:cd:
10:14:6a:1a:de:3e:4c:0c:d7:ef:7f:9c:4e:2c:bd:
a2:71:3d:10:b5:ef:cb:d4:31:60:50:1e:26:25:08:
a7:49:7b:5f:7e:a4:bc:86:00:e3:5b:84:97:0a:f6:
b8:9c:72:61:aa:50:ce:e0:13:24:73:4a:a7:9f:3a:
85:53:87:37:ab:0a:d2:25:3d:d1:b3:4d:d6:85:ba:
9d:41:ab:09:2c:90:7e:fe:64:b4:9d:55:57:68:39:
14:f2:3c:36:97:88:36:3e:77:9f:1f:78:72:ff:a0:
fc:d3:5e:1d:2e:71:28:c2:7c:ad:10:6e:4d:1d:1b:
4c:1a:15:55:8b:3b:77:7f:6d:c3:b0:22:5b:42:82:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:F8:97:7D:ED:E1:12:FC:6F:2C:DD:B2:F3:41:02:D1:43:98:79
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:f7:ce:97:01:26:10:37:f7:35:3a:5f:19:ae:83:8c:2e:
15:3f:0c:09:78:0f:58:88:fd:77:73:ce:cc:8a:2e:5f:ec:5f:
46:cd:b7:43:27:5f:e1:35:79:7a:2e:d7:24:55:cf:22:c5:e5:
d1:0c:31:ce:30:44:07:5f:f2:60:cf:a1:97:2d:40:3f:c7:c1:
7a:13:06:8a:54:f3:f1:8f:4f:58:42:1a:87:ca:7d:5f:01:2e:
a1:e8:d9:67:d3:54:69:a5:20:98:20:75:22:de:7b:76:9b:cb:
6d:1b:a4:53:8d:f4:9b:da:b4:38:5e:5e:a1:6c:4e:05:ec:e5:
ca:a3:33:5b:83:46:3f:0e:4d:f1:52:53:c2:1e:b5:19:16:61:
89:46:c8:58:e9:21:3f:76:55:66:0b:a8:68:65:86:5a:fe:e7:
7d:b8:bd:81:c7:c8:84:97:53:99:c6:31:dd:08:45:d8:a4:d8:
f5:eb:94:08:07:fb:6d:91:fb:2c:29:28:c2:50:7c:a1:2d:41:
44:d6:ea:b8:7d:09:b1:39:73:c7:9e:81:40:7d:2d:2a:65:a0:
1a:03:03:92:8b:62:46:ef:d7:88:4d:5c:76:46:59:97:fb:8d:
f7:e1:20:89:d0:e9:54:d3:f1:18:86:a7:55:8d:47:ca:e5:42:
78:94:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:35 2026 by rpki-client