Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: S3iBImivjtfMCJR1y2rWUMSyMRDGimeC2IxedbQ0QQI=
Subject key identifier: 0F:2C:B3:6C:DC:62:44:56:F6:E2:3E:66:D1:A7:CB:D6:6B:E0:7B:65
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01A08C7B92F36926B934CDDCD2689046D8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 05A3
Signing time: Thu 10 Sep 2026 18:01:43 +0000
Manifest this update: Thu 10 Sep 2026 18:01:43 +0000
Manifest next update: Fri 11 Sep 2026 18:01:43 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: yzAlmI3y65qvi7Muu8V2dce3cnGZguFDbXq8NF2JrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:92:f3:69:26:b9:34:cd:dc:d2:68:90:46:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Sep 10 18:01:43 2026 GMT
Not After : Sep 11 18:01:43 2026 GMT
Subject: CN=0f2cb36cdc624456f6e23e66d1a7cbd66be07b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:5a:fc:5b:bd:40:75:6d:c0:26:9f:e6:20:
f9:6a:b2:86:f0:cb:a1:1e:e5:5d:fb:b1:8c:81:90:
4f:65:aa:cc:da:e4:73:58:c2:94:06:eb:c4:84:a4:
91:6d:d1:8c:73:2a:9e:b4:d6:10:c1:94:aa:ad:6e:
78:08:44:7a:8a:6f:32:3f:44:80:33:bc:4f:50:39:
f9:1c:7c:72:80:63:ce:64:53:7e:70:00:2b:0d:51:
8a:a9:84:29:85:f9:30:21:b9:64:b1:b6:9f:7c:2c:
36:ae:0c:1e:5d:82:68:84:d2:43:2c:35:1f:0f:9a:
7d:53:06:22:84:a4:1f:d6:d4:20:bd:80:24:36:76:
53:14:a1:4b:2c:8e:62:70:c3:e3:49:9b:1a:4e:fa:
bb:1a:e2:48:5a:69:6c:87:71:a0:68:4d:16:87:4e:
d4:97:ea:1b:ac:66:fe:d6:9b:f2:c0:91:17:77:4e:
39:8b:79:4e:3e:74:36:03:fa:e4:b6:24:b0:68:c0:
dd:2f:42:2c:9c:41:c0:f3:58:29:95:db:81:7c:c5:
8c:78:3f:16:2f:af:70:28:9b:b2:6b:50:8e:30:ee:
05:b2:69:ea:3f:10:7a:f3:a7:d1:48:3a:72:0a:50:
b9:cc:27:6d:7d:10:0e:31:d7:a0:13:e1:44:28:0e:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:B3:6C:DC:62:44:56:F6:E2:3E:66:D1:A7:CB:D6:6B:E0:7B:65
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:22:c8:d0:11:90:e6:1f:42:ca:af:53:b0:dc:cf:53:a1:bd:
8d:f4:ca:59:fd:bf:15:05:5f:bd:7c:2f:4a:74:bc:80:4f:35:
51:d6:9e:78:c1:a6:74:d7:4b:8f:e4:5f:ea:49:04:82:c4:bc:
93:9d:8e:90:d4:6e:e7:3f:5f:b2:eb:2e:a1:08:7c:fd:fb:74:
e3:ab:b7:fb:75:0f:f6:2a:93:d9:a1:dc:da:9f:00:78:0d:44:
ef:fd:13:3d:fc:ec:99:33:48:fb:9f:7a:14:72:9b:13:9c:38:
8d:ec:68:1c:ee:43:d3:a7:a9:26:9d:1d:5f:19:ca:b8:c2:5a:
62:80:6f:3d:0f:be:9c:48:65:70:9f:68:07:02:aa:05:91:98:
13:a6:14:d2:e6:c8:cd:a9:78:d1:35:a4:21:7e:4e:e8:ef:a0:
d2:f3:06:1e:03:c7:aa:87:cf:d4:fb:de:3d:ee:35:e6:c7:b8:
56:b7:28:35:9c:d1:37:bc:66:29:7d:06:44:76:7e:c1:dd:62:
e6:93:d0:8d:3f:b0:23:83:05:6a:fd:d9:64:5c:c0:43:5d:85:
e5:3d:7a:d7:f8:ab:85:fa:73:73:32:fe:72:c3:fd:44:c4:e4:
20:64:04:c7:f1:e7:b6:b8:08:1d:38:d8:40:be:29:76:ae:db:
3f:43:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:18 2026 by rpki-client