
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: qsP6MPOsPTWErM59fNUImrH89qiLSEjpztQNsR+/rr4=
Subject key identifier: 88:6E:3A:DD:CC:B7:AE:B1:77:09:BE:2F:10:00:EB:1F:7E:30:22:2F
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 01A06D5E1DD7A141EE76CDDB7C58F8DEB674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1845
Signing time: Fri 04 Sep 2026 17:01:19 +0000
Manifest this update: Fri 04 Sep 2026 17:01:19 +0000
Manifest next update: Sat 05 Sep 2026 17:01:19 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: O1g37GAiRyrODFjgu4DDXVaXWtxbdfIqlO8MaQPZgi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5e:1d:d7:a1:41:ee:76:cd:db:7c:58:f8:de:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Sep 4 17:01:19 2026 GMT
Not After : Sep 5 17:01:19 2026 GMT
Subject: CN=886e3addccb7aeb17709be2f1000eb1f7e30222f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:30:34:4a:b6:d6:4e:c4:e9:15:88:d5:a9:
fe:f7:ff:42:2d:53:43:7d:9e:88:cb:af:07:d9:cb:
0d:b0:9a:62:aa:07:4a:3a:b5:2e:70:eb:bd:c0:ab:
2d:a4:9d:15:05:bd:47:95:21:67:49:e3:2b:a7:3f:
cc:83:b5:eb:ef:ba:5e:9a:84:ce:29:c3:02:8d:b0:
14:1e:45:92:46:3f:38:bc:9a:11:f1:54:67:b3:03:
a6:26:92:8e:49:c0:43:7f:ef:e0:00:e4:12:36:90:
ca:6e:7c:88:b6:b0:88:9d:0b:70:78:5d:3e:78:06:
67:47:9d:9e:85:86:7b:ae:bf:4b:92:9c:a8:f0:88:
5b:7b:f6:d4:cc:08:f3:ee:92:63:a5:e5:31:fc:8d:
75:ac:82:db:2a:54:bb:79:0e:31:48:b3:71:d4:79:
d8:d7:32:25:24:a5:1c:f7:c1:6f:5f:4c:69:2c:a6:
ca:a2:1d:33:13:76:f2:ee:8c:aa:41:23:dc:2b:9d:
25:a2:59:ce:ce:1c:4e:0b:21:ea:9a:93:18:79:12:
eb:6d:d2:12:7c:b4:fb:74:5d:d7:0e:18:11:19:e4:
40:58:bd:7c:dc:cc:11:cf:41:b0:5e:db:63:a2:41:
b4:b2:80:a5:be:ba:31:94:8a:95:9f:48:a8:c4:f8:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6E:3A:DD:CC:B7:AE:B1:77:09:BE:2F:10:00:EB:1F:7E:30:22:2F
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b2:61:0b:e9:32:83:3f:a4:67:a1:3c:3e:69:16:1f:82:99:
33:88:1a:31:5a:3f:3c:b8:a0:f6:a9:7e:99:ba:f4:c8:fd:1b:
ff:12:30:96:a5:94:2e:a2:70:3c:93:00:c1:30:63:35:ef:18:
65:26:ba:29:38:5a:1a:2a:af:bb:4f:52:2a:66:a9:da:a6:6f:
6d:f5:62:59:a3:33:9b:43:d9:0e:d6:b6:38:6d:01:ce:45:ca:
17:ec:95:1f:00:df:c7:bc:ab:ab:71:ac:ac:c8:da:77:b4:ae:
15:8d:3e:b9:60:c2:8e:2b:18:5f:68:03:44:87:72:d3:d2:6c:
e1:48:41:46:27:e1:d6:4d:d1:25:ba:42:f5:4e:46:fa:97:68:
8a:10:07:47:8a:ed:8e:43:2c:97:35:b4:20:93:cd:4c:97:40:
51:f3:e0:27:4b:fe:d9:b7:59:79:e4:ae:1f:1e:8e:61:bb:fa:
29:8b:dd:4a:6d:1b:ca:28:40:21:e9:c7:d2:75:cf:52:f2:42:
31:6f:86:97:a4:31:21:68:b8:a2:09:2a:e9:d6:8a:a2:3e:6f:
7f:0a:d8:f4:9d:95:a4:6d:06:b4:0e:38:3b:88:f4:e0:7b:4f:
47:b3:cc:61:28:c9:cb:e7:95:63:fb:6e:41:9a:24:9d:73:05:
24:c5:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:52 2026 by rpki-client