Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: JDavtSnhwjeUoRZA8KJpNqdIJK76QSh//fRHgG6CpUI=
Subject key identifier: F0:AC:C8:4B:43:50:70:AD:79:6C:B8:E2:16:C8:3F:47:F3:3D:BD:FE
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 01A158F90413091E093E5A445615FD50EA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 18BF
Signing time: Tue 20 Oct 2026 11:01:16 +0000
Manifest this update: Tue 20 Oct 2026 11:01:16 +0000
Manifest next update: Wed 21 Oct 2026 11:01:16 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: ctz8ahOCoHnJ7GuwPy9dLSI40kfe8ucKLIk9gqgX7rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:f9:04:13:09:1e:09:3e:5a:44:56:15:fd:50:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Oct 20 11:01:16 2026 GMT
Not After : Oct 21 11:01:16 2026 GMT
Subject: CN=f0acc84b435070ad796cb8e216c83f47f33dbdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:e2:6a:d3:5e:bf:ce:8e:c4:d6:36:c0:6e:
a4:2c:1c:a3:8d:2e:13:e0:48:99:f7:a3:10:49:8b:
be:de:4a:13:a5:9a:d0:fb:39:43:e4:8b:c0:08:8c:
76:0f:b9:91:3e:e2:cf:46:ef:2c:fd:48:ba:51:51:
a6:98:70:0c:5d:bc:e5:e5:61:59:4b:ae:48:cd:8f:
c5:8c:05:47:6b:2a:96:92:3e:6c:71:2b:61:08:de:
4b:78:56:c5:13:25:56:66:bf:af:1d:55:de:b7:c2:
7e:8f:a5:f0:0c:98:fa:9c:33:e4:2a:cd:13:9f:8d:
bb:0d:9c:c0:aa:10:01:03:d9:7e:5d:41:38:bd:74:
11:e6:5b:7f:76:05:ae:9a:fb:d3:b0:e3:73:77:37:
f9:75:7c:d4:2b:b4:71:86:3e:6f:48:8f:1c:ac:8d:
b9:1f:19:5a:86:c1:45:06:f5:99:25:1e:77:ef:c5:
4b:f7:ab:8a:9f:22:aa:74:62:85:2c:fe:89:b7:d3:
47:8b:5d:44:7c:ec:2f:27:46:62:e1:33:e8:64:95:
ff:ec:8c:88:7b:eb:e3:8d:cd:b3:92:80:17:74:cc:
d4:b8:ea:f8:67:f2:b3:77:ab:14:ea:38:14:cc:a1:
80:0b:52:37:8a:08:ff:09:8c:97:fc:fc:39:20:9e:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:C8:4B:43:50:70:AD:79:6C:B8:E2:16:C8:3F:47:F3:3D:BD:FE
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:e3:49:be:50:e4:9c:bd:91:c3:91:2c:a6:69:0d:22:1d:
b6:db:6d:6f:bf:ad:ba:db:62:76:09:a8:ef:d9:ab:fd:26:53:
3d:fb:a2:11:79:48:b4:ce:1e:b8:e3:e5:ba:30:8b:d3:b2:89:
f3:10:88:59:81:6f:9f:d1:11:ca:9d:b4:34:9c:e5:0c:b4:93:
07:f6:4f:07:32:07:50:aa:5c:48:4e:b2:dc:f9:f8:4f:fd:6e:
42:08:ff:22:b6:ad:d1:19:50:81:ea:a0:e0:eb:84:53:84:bf:
65:4e:4b:8e:99:20:75:db:ce:6b:5c:77:98:c9:6d:83:8a:9e:
6f:be:ad:46:27:c0:bf:4a:c1:73:84:4b:5c:e8:bc:17:86:48:
d5:4b:9d:4e:ee:8c:26:e4:93:af:64:5d:1d:aa:7a:11:08:a8:
33:bb:05:d6:bf:dd:b8:44:72:c6:ff:c8:3a:f9:cc:a8:71:0a:
4a:70:66:06:9a:6d:6e:69:d6:68:f8:57:8f:49:ce:9b:bf:94:
91:96:53:2e:09:3a:e6:16:db:8e:98:4f:79:6c:03:1a:c5:d9:
ca:29:9a:c7:b2:e0:16:65:59:73:6e:b4:96:4e:c9:82:2a:4d:
09:f5:71:36:71:2a:10:8b:30:30:5e:21:8a:da:ea:8b:7f:c3:
52:f5:25:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFY+QQTCR4JPlpEVhX9UOo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw
ODk3NWEwHhcNMjYxMDIwMTEwMTE2WhcNMjYxMDIxMTEwMTE2WjAzMTEwLwYDVQQD
EyhmMGFjYzg0YjQzNTA3MGFkNzk2Y2I4ZTIxNmM4M2Y0N2YzM2RiZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKPiatNev86OxNY2wG6kLByjjS4T
4EiZ96MQSYu+3koTpZrQ+zlD5IvACIx2D7mRPuLPRu8s/Ui6UVGmmHAMXbzl5WFZ
S65IzY/FjAVHayqWkj5scSthCN5LeFbFEyVWZr+vHVXet8J+j6XwDJj6nDPkKs0T
n427DZzAqhABA9l+XUE4vXQR5lt/dgWumvvTsONzdzf5dXzUK7Rxhj5vSI8crI25
HxlahsFFBvWZJR5378VL96uKnyKqdGKFLP6Jt9NHi11EfOwvJ0Zi4TPoZJX/7IyI
e+vjjc2zkoAXdMzUuOr4Z/Kzd6sU6jgUzKGAC1I3igj/CYyX/Pw5IJ7JvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCsyEtDUHCteWy44hbIP0fzPb3+MB8GA1UdIwQY
MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt
NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx
LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGrjSb5Q
5Jy9kcORLKZpDSIdttttb7+tuttidgmo79mr/SZTPfuiEXlItM4euOPlujCL07KJ
8xCIWYFvn9ERyp20NJzlDLSTB/ZPBzIHUKpcSE6y3Pn4T/1uQgj/Irat0RlQgeqg
4OuEU4S/ZU5LjpkgddvOa1x3mMltg4qeb76tRifAv0rBc4RLXOi8F4ZI1UudTu6M
JuSTr2RdHap6EQioM7sF1r/duERyxv/IOvnMqHEKSnBmBpptbmnWaPhXj0nOm7+U
kZZTLgk65hbbjphPeWwDGsXZyimax7LgFmVZc260lk7JgipNCfVxNnEqEIswMF4h
itrqi3/DUvUl1Q==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:44:33 2026 by rpki-client