Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: q+YJKfuWdRsKT2tDUW+sSHmAfMaFjAqwtQmBbvTl/g0=
Subject key identifier: A3:96:07:8B:6A:C8:86:90:79:B1:5D:3F:D0:8D:E7:16:0C:CF:20:CA
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A153D33C38E5E2497C27703A471D7BA7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0F6B
Signing time: Mon 19 Oct 2026 11:01:54 +0000
Manifest this update: Mon 19 Oct 2026 11:01:54 +0000
Manifest next update: Tue 20 Oct 2026 11:01:54 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: sCWE2sxah7dUUc34XcA/4Ak6Yaj2EfLz+tGa6wdw7go=)
6: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (hash: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=)
7: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: x-gsFUsDHGitGQKCRuc3VM0kNoM.roa (hash: zEe9p5KemNkACCMNdCrYtOf0QH3Rb5Ycu0XNQjS02kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d3:3c:38:e5:e2:49:7c:27:70:3a:47:1d:7b:a7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Oct 19 11:01:54 2026 GMT
Not After : Oct 20 11:01:54 2026 GMT
Subject: CN=a396078b6ac8869079b15d3fd08de7160ccf20ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:8e:a6:4b:ed:44:24:16:dd:9d:cf:94:f2:
a6:e5:cd:d3:b5:8d:f9:13:d8:b2:e1:aa:13:bc:2a:
79:2a:70:b9:a0:fc:79:3c:6f:ce:69:af:6b:09:db:
a6:2f:49:29:d7:3e:cd:fa:ee:aa:30:8c:fa:16:d6:
90:af:a4:33:93:3b:df:3e:a0:97:80:6a:30:14:11:
17:d8:42:f0:aa:48:f4:28:b2:22:f5:4f:d4:a0:35:
5c:1a:53:87:8c:6c:84:1d:b3:2c:fa:f9:08:35:d5:
59:c2:41:f2:33:5b:68:15:7e:fc:a2:ab:44:ca:ad:
10:6e:cf:5c:20:5a:39:af:2e:05:5e:0d:f3:97:0b:
ea:e1:f7:cf:a4:fd:4d:8c:7f:3a:56:6e:da:6c:a5:
b7:03:15:4b:1e:74:d0:a6:59:f3:b2:5a:6d:a9:68:
fd:f9:cd:d1:47:58:04:1f:53:26:dd:01:55:9f:a9:
1f:27:78:d3:32:cd:b9:26:47:13:dc:11:f3:11:05:
7d:79:2a:fb:08:3f:61:b2:00:e1:29:67:25:f6:88:
b4:d7:54:7b:23:8f:89:14:23:be:45:3d:92:46:70:
a5:a4:25:d9:d7:79:58:4d:66:cf:6a:92:55:c8:1f:
bf:3e:a3:13:89:c1:bd:51:0a:54:a0:61:c4:2a:15:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:07:8B:6A:C8:86:90:79:B1:5D:3F:D0:8D:E7:16:0C:CF:20:CA
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:53:31:e8:1d:e7:ab:83:91:48:58:29:f2:df:72:51:b4:
3a:82:d4:80:b4:04:37:b3:23:36:f8:be:ab:a1:f9:23:70:76:
8c:be:6e:a2:97:89:49:2c:31:15:3a:e1:22:26:d8:e9:4d:14:
c2:71:4a:21:67:97:dd:1d:50:5b:b3:e3:4b:5a:88:e3:b7:72:
e3:fc:23:8c:d6:ff:8d:3c:bf:58:95:8d:6a:f0:aa:b7:57:81:
97:b0:43:08:1f:02:d6:59:45:28:5f:02:aa:a5:f4:10:bb:cc:
db:b1:af:7e:06:7c:05:44:d1:1a:d8:19:f6:e5:c6:82:69:b9:
1f:b5:b5:7a:44:7a:ae:bb:35:a7:68:55:97:f8:ec:c6:57:db:
1e:68:16:0b:18:0c:a3:ea:bc:57:07:56:90:b8:c9:a1:eb:ac:
3e:80:ee:dc:39:dd:e1:87:81:ed:98:50:f7:4c:1c:4c:07:4e:
91:18:81:cd:03:da:fe:d0:cd:c2:28:48:07:ad:68:03:4d:85:
3c:f4:63:78:b1:4e:2b:c6:f9:f1:cb:5c:0e:7a:a1:c8:b6:cc:
48:03:ea:5a:fd:0b:f9:ad:13:68:97:b4:dd:45:6e:61:c8:31:
e3:91:67:70:1f:d4:0b:5e:96:14:64:2e:c4:c0:2f:32:93:61:
b2:8c:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:18:50 2026 by rpki-client