Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: KMzMHOp2Q0N+FZ/R0iSCmfLfzBw14SoQH3eEhlRd7mU=
Subject key identifier: 90:25:42:32:2B:7C:78:89:9D:18:96:7C:48:A9:FB:1D:FB:F2:A6:15
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019EB9216188062233506CD008FEDD92B833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 04B1
Signing time: Fri 12 Jun 2026 00:00:32 +0000
Manifest this update: Fri 12 Jun 2026 00:00:32 +0000
Manifest next update: Sat 13 Jun 2026 00:00:32 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: Q6NGGnaebMt7OTIlFkTw3WZGsyAE6BrHikcmCE5qifs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:61:88:06:22:33:50:6c:d0:08:fe:dd:92:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jun 12 00:00:32 2026 GMT
Not After : Jun 13 00:00:32 2026 GMT
Subject: CN=902542322b7c78899d18967c48a9fb1dfbf2a615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:6b:a9:5d:ac:f3:60:d0:65:ac:f4:e7:da:
3f:bc:21:3d:90:b1:8b:a2:33:3a:70:87:a8:5c:cf:
2f:1c:95:21:a1:91:57:01:28:d6:85:3c:1f:6a:a1:
3c:c9:ba:df:9c:9a:86:50:c2:96:5f:1d:b6:d7:88:
6b:e7:a9:73:1d:95:aa:47:d7:d0:2b:1b:1e:63:eb:
96:2e:07:29:4e:a7:17:76:4a:9c:27:34:c1:80:22:
69:41:49:fd:6a:77:6a:25:79:ae:04:c7:ed:5d:51:
36:c3:31:a8:47:f4:34:85:d4:77:44:e8:d1:ad:6e:
06:45:12:3f:5b:3e:94:ea:d5:89:c4:84:97:bd:32:
6b:4b:ad:3f:26:d7:33:6a:07:1f:b2:27:ac:87:1e:
a9:00:ca:8f:af:24:81:d3:ab:ef:4f:8a:a8:ef:a5:
20:a4:3d:36:7b:86:bf:fa:55:7f:3c:01:42:85:50:
9e:a3:b4:33:3e:b8:62:83:52:cd:cd:60:0c:d1:c3:
70:11:02:fb:80:4e:fd:a7:57:94:c0:6f:7a:20:a9:
bf:ea:77:4a:40:5d:74:1e:7c:29:22:31:20:99:5b:
87:c1:ee:28:89:e2:de:db:eb:a7:e2:bb:9a:59:cb:
3a:28:95:2d:01:59:6b:0f:15:4d:3c:f4:6c:15:75:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:42:32:2B:7C:78:89:9D:18:96:7C:48:A9:FB:1D:FB:F2:A6:15
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1c:0c:81:9a:2d:d5:5f:f2:27:11:8b:56:c0:50:d4:92:e9:
df:0e:96:04:d9:ab:e0:6b:a2:07:59:bb:18:de:2c:5a:be:fd:
1e:a6:c0:57:5a:64:30:55:b0:bd:36:f2:d8:27:aa:57:25:74:
1f:b3:78:af:d2:bc:1d:36:7f:a8:91:9b:81:8c:4e:ae:57:3d:
79:d3:bf:3b:ac:b9:cb:d2:05:74:a5:9b:bc:56:ff:64:da:87:
cd:72:f7:50:bd:8c:a9:45:46:14:bf:0e:b3:a7:d3:be:42:03:
c6:2d:6e:6f:81:8a:ea:ef:8c:7f:78:3a:2a:e8:72:cf:60:3f:
1e:09:c1:a6:e6:26:81:61:3b:c6:86:ef:ec:c1:8f:ba:44:0b:
0d:87:d1:5e:f8:64:a2:72:e2:c1:4b:b7:90:ff:d1:be:71:e0:
c5:13:60:ce:bd:2f:63:73:6a:4d:ae:23:92:c9:d1:a8:ce:e3:
8c:cd:b9:de:01:ba:f4:71:4e:ee:78:6f:5d:99:92:61:5f:fc:
46:3f:e8:6d:0f:55:71:c7:89:23:ae:27:2c:1c:e8:ed:67:ad:
3b:6f:e9:b3:d7:e9:d4:70:c9:9d:f4:2d:25:4e:e1:97:1b:01:
77:63:e8:1a:ac:96:3c:99:35:1d:df:6f:92:b0:c1:f9:e6:98:
78:31:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:53:02 2026 by rpki-client