Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File: niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier: Czu9EbpbrF65Mil2Jm+eO0WFgyPqhBbczetX6f0V/F8=
Subject key identifier: 43:89:2F:5E:18:28:CA:DE:D8:0B:F1:8B:D3:72:E5:37:08:7D:6B:45
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer: /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial: 019F85D7572D69D7DBF8C4663A7524D8EF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number: 07E5
Signing time: Tue 21 Jul 2026 18:01:50 +0000
Manifest this update: Tue 21 Jul 2026 18:01:50 +0000
Manifest next update: Wed 22 Jul 2026 18:01:50 +0000
Files and hashes: 1: X2EsrEEFKbSK_iJs_zoiqzwXzhw.roa (hash: O5yVAVGf3Sgd/1yPE2jYUPZAzTieJMlFWiMeZmVlrTk=)
2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: ebr+B/Sk4U8yy+Y/xcgZOhuMG08ILZ75L5lb+9E8POI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:57:2d:69:d7:db:f8:c4:66:3a:75:24:d8:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Validity
Not Before: Jul 21 18:01:50 2026 GMT
Not After : Jul 22 18:01:50 2026 GMT
Subject: CN=43892f5e1828caded80bf18bd372e537087d6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:8d:48:66:3a:31:05:35:f3:d7:c5:8c:14:
88:1b:d6:35:19:d8:10:00:5f:ee:70:e1:e2:9f:a4:
49:3b:0c:9f:06:06:62:d7:60:68:43:06:92:b2:f5:
bd:70:38:2c:f4:05:00:49:f1:de:86:e1:1b:19:fc:
58:9a:7f:f0:ec:a1:ed:ca:52:f7:ad:24:85:83:96:
e7:ee:35:20:47:bf:c8:13:97:9c:51:e8:0f:ee:fe:
5c:b3:7e:1f:ef:4a:99:2f:9b:bf:12:eb:79:3c:04:
06:aa:86:91:f8:18:90:b4:a6:88:09:00:85:65:bb:
5e:10:59:b8:57:1f:aa:da:94:10:12:a4:1f:94:b1:
0d:be:d0:1d:19:e3:9a:8c:72:d5:be:3d:25:5f:0c:
a6:09:da:da:9c:e8:6d:87:4f:8c:26:7c:2b:df:20:
1d:c0:d3:34:22:ef:71:47:63:2b:53:03:a4:cb:7c:
3e:6c:d7:4d:7d:b7:b9:18:18:dd:22:0d:b0:77:4e:
94:e5:29:60:02:79:79:18:05:f0:0d:ac:91:ad:1d:
3d:22:92:8d:53:c2:ab:5f:b8:b6:c9:bd:e0:15:3a:
33:fc:ae:5b:50:84:a3:c3:80:75:64:64:98:69:f1:
87:6e:5b:48:7a:c9:b6:48:80:74:b3:21:f9:22:7b:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:2F:5E:18:28:CA:DE:D8:0B:F1:8B:D3:72:E5:37:08:7D:6B:45
X509v3 Authority Key Identifier:
keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a7:b4:6a:5c:1a:c8:1e:bd:44:f3:ef:c2:85:9d:2d:c8:68:
44:fb:2b:93:03:59:0d:aa:3b:c3:a4:f8:e4:96:e2:93:5b:27:
b0:22:f3:9f:30:bb:1e:4c:6e:b1:64:db:a3:4c:ae:4c:60:9e:
e8:57:08:57:8d:d7:92:a7:11:b1:ce:1e:6d:58:f2:37:7a:cb:
1f:2e:3a:58:70:36:d8:3c:0c:aa:d2:2b:1c:8e:38:a3:99:6c:
62:f5:cb:d0:ed:47:54:e2:b3:3e:fc:f5:99:f3:bb:77:9c:3f:
57:f5:7c:ba:9c:44:f0:84:2c:ee:ab:93:6c:f6:a0:eb:a3:c9:
38:ac:5c:18:eb:95:37:33:f1:f2:2f:1e:f1:99:d7:29:cd:3e:
5f:e5:4d:3c:39:45:c8:2d:be:fc:fd:64:e8:8c:c8:a4:26:64:
31:a7:97:86:7a:34:5d:aa:b0:46:a7:78:1f:ed:7e:0b:a3:94:
15:62:3a:ac:98:12:18:56:db:34:c5:48:93:c3:11:73:99:fc:
4c:74:38:43:a4:a8:d4:30:76:04:10:fa:2b:ce:90:38:bb:9e:
79:a5:40:b0:da:a3:d4:c8:09:b7:17:fa:2a:51:cb:9d:68:ee:
cb:f4:79:c8:d8:75:b2:54:5f:3d:4e:0e:6b:fa:0c:a8:8b:20:
8b:0a:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:45:25 2026 by rpki-client