Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: lLcFwDfu8qUuyHw40To3wAt1SmD9X/ZPZ+nKxl5YC2c=
Subject key identifier: 95:DF:AE:0C:07:0F:2A:DC:2F:61:90:9E:F5:0A:3B:6E:55:D5:45:0D
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 019FA2CE7FA33F6BADB966A980FF22C95F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 052A
Signing time: Mon 27 Jul 2026 09:01:09 +0000
Manifest this update: Mon 27 Jul 2026 09:01:09 +0000
Manifest next update: Tue 28 Jul 2026 09:01:09 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: dwl1VTfIsvYXLKNSbxaC5KE3NsqyHjKOhrW43lvFoFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:7f:a3:3f:6b:ad:b9:66:a9:80:ff:22:c9:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Jul 27 09:01:09 2026 GMT
Not After : Jul 28 09:01:09 2026 GMT
Subject: CN=95dfae0c070f2adc2f61909ef50a3b6e55d5450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:ef:44:ab:23:4e:d0:0f:03:b3:e1:9e:69:
cd:9c:af:52:a8:f0:1b:19:7e:2c:95:62:e7:e4:b5:
5b:f8:15:46:03:32:6f:ff:d6:8f:5b:ff:d8:12:fd:
d5:69:ee:99:59:93:47:7c:b0:46:26:af:9d:a6:41:
73:f3:65:f5:07:cf:80:73:6e:60:a1:ea:f6:b6:e6:
11:b3:e2:8c:d7:1f:45:05:84:34:c6:18:2b:cb:99:
bf:fa:d8:f4:29:15:38:ad:61:53:bd:1a:de:6e:38:
c9:d1:36:fe:92:2f:58:f7:83:18:30:d1:0e:a0:3e:
40:de:41:cb:c8:99:e7:e2:f0:ce:38:98:c5:df:c2:
02:45:fc:4f:c2:d8:a7:7c:27:48:cb:56:93:0d:36:
d6:a0:03:1a:5f:6e:96:fc:08:41:1b:5b:d8:36:ef:
54:05:a1:80:6a:27:ee:2b:ed:28:6f:26:4b:bb:33:
ce:79:bd:c8:55:ef:de:60:2f:7e:0c:5a:15:0b:70:
db:a0:4b:5a:3d:0e:46:3a:b9:fa:a6:7a:6d:c6:70:
85:6f:50:ed:86:83:ce:7b:a4:3b:a6:36:69:f3:b2:
ca:ed:ec:96:7d:29:09:87:24:d7:5d:22:94:53:f7:
ac:2d:fa:97:d4:44:c9:e8:9a:bf:69:0f:1f:ea:52:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:AE:0C:07:0F:2A:DC:2F:61:90:9E:F5:0A:3B:6E:55:D5:45:0D
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9c:32:bf:ec:c5:7b:32:6b:1b:5f:62:5f:3d:31:9e:c4:8b:
d7:54:5e:ca:09:60:dd:df:9d:d9:d7:06:43:11:7f:e7:ab:ec:
1a:77:1d:d5:72:b9:d8:bc:01:15:99:f3:e3:f8:ff:6c:19:ec:
27:c7:56:5f:2a:e7:c9:35:7c:f3:a9:ee:2c:7b:1a:8f:2b:48:
e8:40:01:ff:18:61:8a:54:54:28:e2:ca:82:e8:76:fd:31:71:
ce:7b:17:c1:91:83:3e:61:06:b2:52:3a:36:fe:ac:25:6a:a3:
18:63:db:45:f9:cb:48:23:54:38:e7:62:c5:bc:0f:c0:b2:4e:
ee:02:9d:9e:b3:6e:b8:53:89:8c:2b:79:0e:45:15:78:a8:ad:
34:42:8f:5c:75:f5:7a:c4:d7:e7:4c:e6:2d:a5:c7:26:5f:3f:
1e:3f:30:01:fa:3f:e3:10:2b:0c:4a:aa:9c:23:96:c5:19:28:
f7:af:97:af:1a:12:fc:66:15:61:54:ba:87:fb:e3:73:0e:97:
a1:d8:13:b3:50:87:53:c0:8f:71:ce:24:05:ce:39:5b:40:a6:
4c:b7:2f:d9:00:bd:d1:45:7e:96:99:4a:88:be:77:e5:36:ba:
24:31:fe:e8:b5:04:40:00:cc:f6:3c:4a:33:55:13:c2:b7:b3:
01:42:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:54:31 2026 by rpki-client