Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: 7nh3o1MKWVKS2WbVNud7NvTXauzt3va4YrMMRS9I58o=
Subject key identifier: 07:B8:63:FB:21:03:E6:B3:8B:AB:45:A6:E8:81:A0:51:EC:93:BE:D8
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 01A18FB056EDFEAE81642262B35DD7487360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 1327
Signing time: Sat 31 Oct 2026 02:01:00 +0000
Manifest this update: Sat 31 Oct 2026 02:01:00 +0000
Manifest next update: Sun 01 Nov 2026 02:01:00 +0000
Files and hashes: 1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: hAOe6JAqQsz221EWqgwzpYpjgls6WAeAN5DZgK5wLqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:56:ed:fe:ae:81:64:22:62:b3:5d:d7:48:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Oct 31 02:01:00 2026 GMT
Not After : Nov 1 02:01:00 2026 GMT
Subject: CN=07b863fb2103e6b38bab45a6e881a051ec93bed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:78:8b:ef:4d:74:93:e7:f5:40:c6:46:40:
22:05:36:38:0d:c3:a8:3e:7f:a7:61:c1:72:3b:00:
d6:53:2e:ef:2d:a9:50:9e:86:e8:98:97:eb:ea:e2:
9e:c6:a3:d8:2f:9d:69:c3:fd:90:e6:e3:84:97:70:
cf:9c:77:b2:21:af:08:a1:56:7f:82:1e:e5:dc:cb:
80:76:cf:35:d3:13:fe:72:b1:e0:92:99:6d:d0:c5:
53:a9:1d:58:80:d8:b0:0d:0a:4d:32:ed:04:3a:ec:
d9:25:5b:1b:18:92:cd:d4:d8:d2:b8:33:96:1c:48:
ce:df:2d:58:2a:81:40:33:ad:03:f4:cb:60:40:80:
d0:70:af:88:39:22:d0:a2:18:6d:a8:33:5d:2e:a9:
b0:97:c4:cc:81:c4:73:ba:16:eb:db:21:19:06:01:
2f:65:cd:bc:1f:f7:45:a4:1a:f7:41:36:ff:28:02:
4a:d7:ab:84:3f:47:ff:5f:72:26:fb:1d:0f:d0:07:
a3:64:ce:8c:50:17:d8:5c:de:60:5d:81:17:ed:eb:
07:29:0a:07:b8:35:e8:0b:4e:6d:ee:ff:0c:95:cd:
17:6e:cc:44:59:b6:41:0d:05:61:63:b8:ce:9d:74:
0c:58:80:fa:0a:1d:58:23:0a:d8:81:d2:cb:5c:45:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:63:FB:21:03:E6:B3:8B:AB:45:A6:E8:81:A0:51:EC:93:BE:D8
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:22:3e:c4:d1:3f:84:05:c5:7f:bc:48:8c:6c:08:46:d3:54:
b8:b1:2c:94:d6:60:fe:76:4e:8a:ec:37:6e:57:2b:17:b1:b4:
23:b4:cf:e0:23:a0:7b:db:68:76:1c:77:d0:3e:51:da:e0:e6:
26:cc:32:90:a4:ad:6e:33:28:90:28:a8:73:25:17:91:ec:a9:
93:97:d0:8a:45:22:44:d5:64:8d:01:3a:5d:61:c3:d4:e3:99:
09:18:c5:64:94:53:c4:00:43:60:18:01:75:7f:54:f4:ba:bc:
bd:3a:e4:4b:fc:e4:e8:11:43:68:bc:78:a9:d1:30:ca:97:d8:
56:87:74:b9:26:57:c0:0b:93:4d:30:f0:01:c4:de:82:2e:3a:
48:aa:92:85:5f:33:8c:5d:94:2d:3d:da:f0:69:44:79:c6:ab:
79:63:77:c7:36:79:16:94:0e:e5:0d:30:5e:cb:85:ae:9f:da:
25:e0:9c:ab:52:a4:50:a8:13:f1:e6:0c:8c:71:4a:14:3b:9a:
bb:e4:b6:22:6e:f6:c8:e3:4c:69:1d:6e:02:92:41:7e:83:be:
2c:98:68:ee:b8:53:71:92:1b:cd:17:8e:52:ea:a3:43:3b:b0:
30:ab:fb:ce:c0:80:4a:b0:f6:bd:ac:92:a4:bd:2b:00:34:15:
e0:43:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:06:07 2026 by rpki-client