Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: rAJBLBGyjlhXxlhLq2xD1nBb4BHibOF3cADJAhbFpO4=
Subject key identifier: F2:95:B7:B1:E0:FE:D6:A7:C9:22:15:05:AF:46:F3:9B:13:99:48:BB
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019DCF753C6388EAD80C9F8B98CBA37FEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 0438
Signing time: Mon 27 Apr 2026 15:01:00 +0000
Manifest this update: Mon 27 Apr 2026 15:01:00 +0000
Manifest next update: Tue 28 Apr 2026 15:01:00 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: E8ig1BhhlzpxQb3U6RZiHlWK5fCxHsIVxe2OEbRMhNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:3c:63:88:ea:d8:0c:9f:8b:98:cb:a3:7f:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Apr 27 15:01:00 2026 GMT
Not After : Apr 28 15:01:00 2026 GMT
Subject: CN=f295b7b1e0fed6a7c9221505af46f39b139948bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:2d:e8:91:6f:d0:a0:dc:e7:8f:a9:f3:c9:
82:d8:29:ef:84:40:da:ba:3e:94:47:8e:a0:e2:2d:
7c:3f:dd:76:6e:db:5d:5e:12:c5:2d:ec:6f:eb:c6:
32:b1:29:e2:bc:db:33:66:12:c8:1c:38:dd:ee:98:
69:c5:03:20:24:37:f2:ee:cb:3c:f6:e3:c2:27:22:
be:72:1b:b3:ed:97:3f:3c:05:94:9a:e5:db:8a:7b:
41:df:95:c3:e3:a5:56:51:02:b7:fd:ac:a4:da:23:
37:2d:ef:ed:a7:d8:b8:69:bb:6e:cd:d7:96:d1:e1:
d1:17:94:10:3e:f8:de:60:11:5c:5e:29:d7:3d:25:
c3:62:00:5e:06:3d:fc:c7:17:5c:df:84:b5:de:85:
1a:be:e6:68:e1:18:cf:5f:2b:61:1a:d6:6e:f6:92:
51:6c:cb:53:53:cc:37:97:d8:63:16:20:b0:8d:99:
e4:ef:de:eb:1d:c4:a8:4a:c6:20:41:36:36:48:b4:
15:9a:2e:4e:86:60:95:b4:da:0f:b4:33:99:5a:58:
c1:f4:76:2b:91:19:04:14:3e:97:51:30:b0:8e:92:
a2:1e:84:b8:01:88:58:e4:1b:81:69:c3:23:cc:28:
28:1c:3f:f4:cd:c7:5e:8e:2d:1f:37:c7:51:5f:54:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:B7:B1:E0:FE:D6:A7:C9:22:15:05:AF:46:F3:9B:13:99:48:BB
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e1:70:18:86:c9:69:b4:0f:6b:2f:dc:7c:b6:1f:d2:26:69:
4c:03:fb:eb:a0:22:ac:70:a0:f4:e1:78:2f:04:c2:eb:22:67:
9b:a9:82:26:aa:d5:f9:cf:d5:91:a2:0d:00:2d:d1:5e:6f:6c:
6d:1c:14:b4:6b:46:e9:22:2b:54:87:f1:57:0b:43:7d:5d:4a:
a6:cc:8b:5b:f3:7f:74:22:73:c4:51:8c:c1:61:1a:2e:e6:97:
bf:5c:c1:82:77:b9:2a:3e:57:24:b1:35:9f:79:07:8b:c4:df:
fd:ac:c8:db:c4:da:80:87:27:44:42:d8:64:6c:9f:10:0d:22:
f0:dc:9d:3a:82:db:a8:95:e3:a2:d8:53:25:eb:2b:88:93:84:
9b:74:8d:a4:c7:d5:83:7c:d5:0c:44:30:e5:24:9b:6b:99:76:
99:7a:5a:1c:a3:2f:63:1d:42:61:b9:0d:eb:c2:31:b6:ce:38:
56:1a:70:b2:a2:16:bb:62:cd:98:03:96:a9:57:3c:47:ea:8c:
29:e1:5a:e5:e5:cd:79:2c:e5:e5:61:5b:fe:6f:d2:14:38:70:
ce:ba:fe:92:12:20:29:28:a6:c5:75:c1:63:7e:32:b2:1c:0c:
10:54:48:df:d2:9e:b1:06:3a:ba:29:93:24:06:34:7b:4d:00:
09:97:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:51 2026 by rpki-client