Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: hChuAHn/MxVD8eTqZfotOtTAYGjvh4xQ3BJrxvQOoSU=
Subject key identifier: 31:2A:1B:8C:B0:08:C9:2B:5B:0F:E0:87:96:EE:B1:3D:A0:D3:CB:CD
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01A1897713A729AFEC4F96226DE9C8F168F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 0626
Signing time: Thu 29 Oct 2026 21:00:44 +0000
Manifest this update: Thu 29 Oct 2026 21:00:44 +0000
Manifest next update: Fri 30 Oct 2026 21:00:44 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: QjMHinLRsTFJ8hSDZaVKTmpWUG3gUByMj0gr9Te8/ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:13:a7:29:af:ec:4f:96:22:6d:e9:c8:f1:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Oct 29 21:00:44 2026 GMT
Not After : Oct 30 21:00:44 2026 GMT
Subject: CN=312a1b8cb008c92b5b0fe08796eeb13da0d3cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:a6:2c:43:3e:b2:a2:97:17:f0:2d:04:0a:
53:16:15:8d:6e:6c:8f:93:84:46:c7:2a:04:4b:d1:
3c:08:ba:73:60:ba:2b:8e:43:0b:d2:8b:2f:44:a3:
d6:7e:f6:bd:88:21:a1:28:b8:30:5c:d9:fe:52:bd:
3c:5e:45:cc:28:53:5b:f0:1a:c1:57:b3:34:ff:f0:
3c:6e:49:88:0a:4e:21:1d:36:f1:ee:f2:78:d8:57:
56:e3:1e:f1:47:5a:21:3e:99:62:d7:72:7d:61:0f:
99:3d:05:8d:17:5f:44:00:f7:c9:7d:c2:9c:00:ad:
4b:44:06:1b:d3:00:59:21:9c:5c:53:d5:52:6d:b6:
0e:5a:0b:8d:e1:6d:5c:a8:f3:3d:83:eb:92:71:e8:
d4:44:c2:d4:d2:69:4a:83:e5:d9:fb:34:bb:20:04:
c3:94:50:50:b9:7e:43:85:d9:1e:b3:29:63:16:5a:
d8:2e:39:26:62:6f:6d:4b:f5:a6:e7:21:ce:81:04:
74:be:7a:28:97:06:ba:b4:48:b5:fb:3d:fc:4b:fe:
1d:99:06:39:53:3a:eb:a4:0c:ed:f6:f5:b3:0f:ad:
ae:4d:cc:fc:7b:de:67:38:c8:97:c9:34:cd:7e:aa:
7e:1d:d4:ca:f5:c5:1f:76:d6:b9:ec:0c:b2:b9:fc:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2A:1B:8C:B0:08:C9:2B:5B:0F:E0:87:96:EE:B1:3D:A0:D3:CB:CD
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b7:2d:eb:7a:68:70:0f:25:f4:a1:3c:a5:e7:ab:28:b1:d7:
be:d0:eb:19:47:b7:c0:de:00:b5:4d:b6:76:7c:87:40:f0:e3:
47:77:9c:8b:04:8c:a4:9d:d7:a2:ab:d2:2b:73:31:20:31:94:
b9:10:17:29:b5:2c:0f:69:f0:ae:95:d8:ba:54:96:0f:57:fb:
8d:2c:1c:33:b7:c8:74:61:38:d9:5f:8c:ca:ef:43:8e:04:17:
63:36:59:eb:42:7f:10:d0:2f:ca:fb:41:6e:2d:eb:d3:ad:ba:
10:f2:98:bb:e1:e6:79:a8:f3:f5:5a:0e:7f:98:86:9c:f7:99:
81:2c:03:48:e9:f3:98:67:8d:b9:a0:75:d6:68:fa:66:89:09:
69:2e:81:c3:5e:55:76:60:94:ca:c3:b7:4d:d0:30:31:d2:36:
bf:74:11:f7:d6:5c:82:b3:61:ce:36:ef:14:9c:cb:be:b9:63:
db:50:80:21:b0:c2:9f:1f:e0:63:e8:1d:d3:ae:7a:4f:ca:ed:
b0:3b:1c:9d:5f:71:61:6b:4f:90:e6:4f:ff:f1:31:83:71:8d:
5a:f0:ec:3b:f9:66:c8:64:d4:96:66:9b:bc:c1:31:16:81:bc:
f2:f5:50:32:61:de:cd:43:20:3f:f7:d0:b2:0d:d4:e6:48:db:
29:db:0b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJdxOnKa/sT5YibenI8WjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjYxMDI5MjEwMDQ0WhcNMjYxMDMwMjEwMDQ0WjAzMTEwLwYDVQQD
EygzMTJhMWI4Y2IwMDhjOTJiNWIwZmUwODc5NmVlYjEzZGEwZDNjYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEOmLEM+sqKXF/AtBApTFhWNbmyP
k4RGxyoES9E8CLpzYLorjkML0osvRKPWfva9iCGhKLgwXNn+Ur08XkXMKFNb8BrB
V7M0//A8bkmICk4hHTbx7vJ42FdW4x7xR1ohPpli13J9YQ+ZPQWNF19EAPfJfcKc
AK1LRAYb0wBZIZxcU9VSbbYOWguN4W1cqPM9g+uScejURMLU0mlKg+XZ+zS7IATD
lFBQuX5DhdkesyljFlrYLjkmYm9tS/Wm5yHOgQR0vnoolwa6tEi1+z38S/4dmQY5
UzrrpAzt9vWzD62uTcz8e95nOMiXyTTNfqp+HdTK9cUfdta57AyyufwLwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEqG4ywCMkrWw/gh5busT2g08vNMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLct63po
cA8l9KE8peerKLHXvtDrGUe3wN4AtU22dnyHQPDjR3eciwSMpJ3XoqvSK3MxIDGU
uRAXKbUsD2nwrpXYulSWD1f7jSwcM7fIdGE42V+Myu9DjgQXYzZZ60J/ENAvyvtB
bi3r0626EPKYu+Hmeajz9VoOf5iGnPeZgSwDSOnzmGeNuaB11mj6ZokJaS6Bw15V
dmCUysO3TdAwMdI2v3QR99ZcgrNhzjbvFJzLvrlj21CAIbDCnx/gY+gd0656T8rt
sDscnV9xYWtPkOZP//Exg3GNWvDsO/lmyGTUlmabvMExFoG88vVQMmHezUMgP/fQ
sg3U5kjbKdsLtg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 07:12:42 2026 by rpki-client