Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: 9/Lrzc6pcyisY/2d5puDkHBjQzM7jtF/Kzz0R2HlZAQ=
Subject key identifier: 29:94:A4:74:BC:CA:99:A1:1F:F1:64:86:51:87:E6:A0:67:A1:66:FD
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01A17EF3E2A56E8C55E365F423F70E444AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 10AB
Signing time: Tue 27 Oct 2026 20:01:14 +0000
Manifest this update: Tue 27 Oct 2026 20:01:14 +0000
Manifest next update: Wed 28 Oct 2026 20:01:14 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: rCN0QSh89gZsir3igGkDhQtSswwxRBK36x5LyQwofcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:e2:a5:6e:8c:55:e3:65:f4:23:f7:0e:44:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Oct 27 20:01:14 2026 GMT
Not After : Oct 28 20:01:14 2026 GMT
Subject: CN=2994a474bcca99a11ff164865187e6a067a166fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:92:07:01:ef:b9:8c:32:0f:3c:2a:a2:f4:
37:3e:2b:56:e4:76:73:5e:6a:f4:f6:44:e0:6d:93:
88:32:39:14:93:d5:6f:5f:34:84:29:19:ae:d3:d1:
64:67:19:98:c0:a8:95:88:8f:38:34:59:d5:87:14:
8e:76:12:4f:04:d6:6d:94:cd:5c:de:af:7a:42:5a:
4a:8f:16:9b:a8:e4:34:4d:df:e5:da:2f:1d:b5:b9:
26:03:67:75:dd:e0:44:bc:3e:8d:dd:f8:f4:b5:7d:
6c:8f:fa:75:5c:e5:33:2d:e4:62:da:cd:bb:f5:e4:
24:e5:8a:59:d2:65:a1:1a:68:be:fb:f6:93:45:6c:
fb:a1:64:05:74:27:6d:fc:98:c0:22:d2:2a:69:29:
8a:e5:78:c4:50:9e:77:c1:81:22:1c:27:0f:6a:d2:
1e:96:67:a3:ae:5a:33:73:24:7d:d6:44:ba:bc:b7:
3a:14:82:a3:97:01:48:ad:9f:ed:35:60:42:bd:0c:
ee:56:1e:55:6d:2b:37:85:fa:57:a8:5f:2d:bb:91:
b1:18:99:f6:1a:6f:45:de:4f:8c:70:94:e4:57:68:
b7:1c:83:4c:a5:8a:69:59:63:c9:91:57:78:6c:f3:
9f:e5:21:5f:76:5a:0c:da:2a:d6:d8:8f:9f:d4:70:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:A4:74:BC:CA:99:A1:1F:F1:64:86:51:87:E6:A0:67:A1:66:FD
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ba:59:ee:a2:5a:cb:01:6c:2a:98:da:07:69:ca:21:f0:90:
22:d8:e8:33:a6:75:bf:4c:0c:dd:11:1f:e7:14:f0:16:4b:df:
b6:77:90:79:eb:b0:80:0e:61:c7:ae:5c:51:0a:20:60:13:b5:
78:96:9e:c6:ca:76:11:14:34:d8:43:d1:b2:be:a6:1d:4d:86:
16:5b:ef:a5:b1:b4:e2:07:4b:fe:9a:58:df:d2:cb:36:4e:de:
95:a2:cd:1b:8d:5e:ef:70:a8:fe:89:d2:12:a1:b0:ba:cd:1d:
ec:f9:75:dd:73:84:bb:20:42:da:fd:86:50:ca:88:90:73:c5:
6e:25:f5:6e:33:76:00:92:7f:e5:f9:29:2e:36:ad:04:f7:45:
f1:e7:f7:32:4f:37:c5:2f:c6:16:bd:7c:6b:f7:34:46:b8:dc:
51:69:40:25:f0:5c:ca:c0:fe:2c:99:e3:31:31:d1:49:ed:f1:
6d:b8:2e:6c:c3:22:8e:ba:66:98:5d:0e:01:6a:8c:58:a5:57:
1b:9b:02:ec:a2:f9:ed:3f:6b:73:03:3d:b7:d3:db:fa:b4:a1:
67:b8:bd:e2:d5:2f:e8:8a:a7:60:ac:37:c8:d3:db:7e:f2:4f:
56:3d:33:a6:e8:98:f4:d1:2d:be:a2:8f:18:b5:61:17:63:9f:
b1:d4:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:52:15 2026 by rpki-client