Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: d44LnNoSH9PJcmSHBgnUFEpBQAbiKphiDw8qZvFZ/HU=
Subject key identifier: B2:A3:A1:AC:B1:B0:C7:4C:3B:A5:A6:E6:70:FC:26:48:2D:33:CC:92
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019CE5C94E8D106778BFF746480D52CE9E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 03BF
Signing time: Fri 13 Mar 2026 06:01:40 +0000
Manifest this update: Fri 13 Mar 2026 06:01:40 +0000
Manifest next update: Sat 14 Mar 2026 06:01:40 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: wpBnDSO7AzzjtN/ut9oP3auCPfTR92Vn5u3lPDY5EN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:4e:8d:10:67:78:bf:f7:46:48:0d:52:ce:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Mar 13 06:01:40 2026 GMT
Not After : Mar 14 06:01:40 2026 GMT
Subject: CN=b2a3a1acb1b0c74c3ba5a6e670fc26482d33cc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:99:af:33:d8:14:ef:95:80:58:e4:9e:a4:
f8:ed:69:97:e2:85:e2:61:e2:66:86:46:72:a7:46:
95:73:1c:cc:3b:a0:47:5b:e1:fc:86:59:05:3d:7e:
cf:ab:bc:f0:05:24:a8:0e:d1:a2:44:0c:ea:a3:e5:
c7:b3:df:16:11:98:c9:41:fc:a4:9a:15:63:79:a8:
d0:a5:ba:0d:7b:b9:c0:5e:d9:4e:f1:bc:54:66:df:
a0:df:96:20:2b:68:83:0b:40:35:49:5c:e9:9a:13:
cf:d4:63:53:86:ab:bf:9e:e1:01:c2:0e:43:3c:01:
e2:6a:9a:2f:cf:72:0d:21:df:e6:e8:bf:7e:b0:51:
d9:18:0a:45:c8:1e:80:5c:b6:b9:dd:8a:e4:2b:3a:
b7:2c:29:89:96:49:77:c4:c9:fd:91:f1:83:34:24:
d1:45:e2:43:97:d5:59:94:e2:30:31:9a:5e:d7:9e:
fc:46:06:8d:bf:36:3b:e7:fc:ba:c2:d9:9c:a1:31:
1b:08:a3:37:2b:31:a6:29:e3:48:98:c0:e3:a3:b3:
65:85:93:84:a3:ba:96:8c:7c:e6:a4:69:d4:a9:d8:
bb:e4:4b:67:e7:7a:cf:b5:3e:cc:f3:8f:93:95:8b:
ce:bd:67:46:04:18:91:4e:cd:52:34:6f:06:95:fe:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:A1:AC:B1:B0:C7:4C:3B:A5:A6:E6:70:FC:26:48:2D:33:CC:92
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:27:d3:04:b5:dc:b8:ea:54:71:76:fd:f8:de:77:fb:40:0f:
58:90:47:d9:28:92:44:e8:95:2f:eb:a9:71:c3:1a:39:33:ea:
24:85:7d:87:9a:2a:85:75:f2:be:42:f6:76:46:0a:e6:ad:56:
1e:2b:6a:66:66:b6:8c:3a:b6:dd:b0:ae:cb:d7:d8:39:dc:6e:
6e:ac:70:4c:45:b2:b8:d4:0b:af:7b:36:b9:13:b9:58:9d:3d:
90:65:ab:63:8b:07:06:1a:0d:b1:d2:88:50:ad:20:0a:69:4a:
b9:f3:17:14:99:eb:c9:f3:2a:60:14:4a:77:49:7c:9d:45:de:
80:55:bb:40:24:89:71:09:51:6a:2f:22:45:df:60:04:35:c4:
55:42:94:2a:e9:b7:19:19:b9:0e:50:df:36:2b:93:fb:43:af:
f3:39:96:e0:d1:67:96:17:df:85:ae:89:8f:0f:74:1c:d7:4d:
31:d0:84:0d:b8:a9:c3:57:3d:b8:85:bc:35:f5:4f:7a:d1:8a:
39:f7:57:41:09:8e:35:8f:7d:27:ff:ad:6e:17:a3:4d:5e:96:
b7:df:ff:d5:88:cf:8f:7c:60:bf:75:6e:e1:f2:10:02:0d:39:
2e:16:5a:a4:91:74:cb:9d:be:cd:2c:de:f1:9e:bc:e3:3c:a4:
93:e1:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:14:14 2026 by rpki-client