Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: GpUudYaMiCxkyXwGIW27OR4IoBILqLknml6lrvYMW78=
Subject key identifier: DD:5E:0B:D4:5C:20:0B:6D:BB:D7:69:EF:9D:9E:75:E3:7B:0F:8F:08
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 01A1667DE5FA743231FC738C386EF7CEB88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 18C6
Signing time: Fri 23 Oct 2026 02:01:29 +0000
Manifest this update: Fri 23 Oct 2026 02:01:29 +0000
Manifest next update: Sat 24 Oct 2026 02:01:29 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: xE51GV+diacUghZ4/KhHhYzsaPPCj7407EXevwVOVm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:e5:fa:74:32:31:fc:73:8c:38:6e:f7:ce:b8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Oct 23 02:01:29 2026 GMT
Not After : Oct 24 02:01:29 2026 GMT
Subject: CN=dd5e0bd45c200b6dbbd769ef9d9e75e37b0f8f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:08:d5:84:c6:c9:00:12:2d:43:32:bf:ec:
d7:e8:f9:94:16:7d:e1:d4:dd:fe:41:be:1a:1b:8d:
6a:5c:ee:db:5f:d0:61:21:68:23:57:1b:c3:9e:8d:
73:83:eb:95:bb:c9:ed:cd:f9:db:65:6f:10:df:85:
80:1e:74:5a:cb:45:77:c5:d0:b1:77:05:44:8e:38:
73:42:2f:ce:3d:a9:36:6d:59:5a:c7:60:9e:ec:0d:
42:c0:5f:68:5b:46:d5:de:64:7a:4b:b6:df:9e:08:
6c:78:6e:34:c6:b9:9f:e0:e5:60:fc:1f:8c:d9:55:
42:58:28:df:a5:b3:5e:b3:72:d9:ac:29:6d:9c:1c:
8d:1a:36:62:57:42:58:d3:9c:e2:7e:53:3a:f2:f7:
34:6a:fb:1e:39:1a:bc:24:e8:ab:43:79:0f:f2:e9:
dc:d2:ed:ab:0c:08:a7:4c:fb:22:79:19:86:e7:3e:
bf:c9:51:84:e2:39:5e:33:71:0e:14:95:ed:21:aa:
dd:ac:de:36:b1:95:16:e8:18:2f:3e:58:72:7a:ff:
48:30:1c:1c:90:2e:fc:b5:3e:66:b5:9f:72:29:72:
b0:fa:e6:43:66:45:c0:a8:d1:47:00:5d:66:34:23:
7b:d6:75:0d:3a:03:4f:7f:97:be:75:c9:57:8a:c6:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:0B:D4:5C:20:0B:6D:BB:D7:69:EF:9D:9E:75:E3:7B:0F:8F:08
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:d1:4b:a3:47:48:42:0c:42:4a:69:a4:04:c6:b1:1f:72:
9d:9d:c8:98:8c:db:2a:fd:f1:91:6d:c2:57:02:21:43:b4:3f:
da:b5:e2:6d:9f:b5:74:ec:69:f7:f3:85:b8:b6:e4:f7:93:c7:
70:a6:7b:54:01:78:c6:b1:fe:cc:f6:56:28:aa:92:dd:69:c4:
e1:65:2c:44:91:e6:d8:28:77:84:81:06:9b:b9:5a:86:31:df:
45:41:05:ce:cd:da:7b:c3:05:9f:e8:c0:fa:6b:7a:24:16:88:
09:b8:4e:1b:85:3f:80:95:0f:74:c4:9a:d0:97:98:50:50:87:
5f:69:fb:71:67:98:4a:3e:6c:37:64:b6:9b:33:e1:31:68:7e:
60:68:9a:55:d3:42:25:85:0b:6b:2f:58:c6:05:62:d3:61:f2:
d1:c9:89:82:49:16:5a:bf:d2:33:a9:76:1e:1b:23:d6:a9:ad:
23:14:c6:dc:77:39:2f:cc:b2:78:54:4f:5b:fb:30:ca:88:1f:
11:71:29:2d:64:9c:67:72:9e:f1:05:35:c9:6c:b9:77:c3:8a:
72:57:12:7e:73:b3:d9:f8:5b:d5:9c:00:49:02:9c:3d:ad:e9:
44:6e:a6:bd:2d:ff:69:2d:da:52:fe:06:70:8d:02:f4:b7:38:
61:e3:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:45:31 2026 by rpki-client