Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: MrBXiukIfDsjAUI249u3TggPef94/clrCExbFTpV7a4=
Subject key identifier: 4E:88:D8:5A:D2:07:3D:77:9F:C2:6A:55:79:A9:2E:48:AF:EC:F5:D7
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019D3940E214BD9FF69CD0C27FDDCA37F4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0D3F
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: M5/ScO+fJ40Iwahe5WXg3/3LDG5nKj1WvAj0rH2zt6E=)
4: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
5: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
6: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
7: ymWClNNTNIEna9tb8fGbQQqYz78.roa (hash: ymeUWDuxiyE39DPrcubXZYDRp9D4NZYlmaQUgjvzXkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:14:bd:9f:f6:9c:d0:c2:7f:dd:ca:37:f4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=4e88d85ad2073d779fc26a5579a92e48afecf5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:85:94:07:09:fa:82:d6:ae:8d:39:59:51:
18:b4:89:0f:3d:09:f4:cb:f1:9b:c4:41:cf:6c:2d:
10:b7:63:5f:0e:62:c5:7f:29:0e:27:0a:1f:d1:de:
b2:af:0d:47:07:ac:56:7b:66:4f:b2:7d:11:47:73:
1f:e0:70:db:39:42:1d:a6:c1:4a:99:59:38:4c:2c:
b3:16:75:eb:a1:4e:f6:19:cb:fe:a4:a3:40:0d:07:
1a:6f:1b:ba:a4:44:58:fa:43:86:a3:9b:e4:14:75:
86:e9:6d:98:82:72:32:0d:a9:b2:95:09:71:46:a2:
40:e3:17:8c:58:bb:e8:cb:87:b2:06:63:94:47:70:
97:07:6a:4f:48:48:82:43:a0:04:8d:3f:f5:9d:e3:
07:2d:16:30:2e:24:bc:1d:73:35:59:fc:14:36:c9:
e3:78:d8:60:bd:61:c3:f9:1b:c3:62:07:38:eb:19:
7e:8e:ee:42:f6:fe:70:8e:24:44:49:6a:f7:3f:54:
93:5d:ca:5f:5a:63:09:2c:c0:2a:07:e9:bc:87:f0:
5f:13:79:9f:65:8b:b4:ba:42:57:ff:49:85:10:ac:
d1:1d:8d:e6:11:ef:0d:3d:8f:36:51:ee:21:8a:4f:
d8:99:cd:46:00:ab:bd:40:c5:13:66:d7:cf:96:56:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:D8:5A:D2:07:3D:77:9F:C2:6A:55:79:A9:2E:48:AF:EC:F5:D7
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:96:15:34:8b:84:d5:c2:0c:42:d3:aa:f7:a6:76:a5:31:
6c:b6:11:fe:ce:68:07:37:f8:c5:c3:18:fd:f4:f2:6c:58:6b:
0b:69:3f:49:27:bd:ba:a6:df:c1:65:8f:95:01:e4:4f:4a:4f:
12:af:20:0a:ac:38:5d:0c:44:4b:55:c3:52:ac:69:d5:d7:e5:
52:ee:51:eb:0f:9f:99:58:d9:ea:2b:e1:59:75:26:9d:4f:99:
fd:e9:45:cc:77:a8:71:d3:5a:48:a2:6c:49:9a:29:39:9e:a0:
32:ba:a0:ea:fb:3a:34:45:eb:4e:d4:90:4c:0d:8c:d2:12:22:
0d:d5:2b:3c:01:d6:aa:dc:fe:a5:27:8f:b6:12:bd:97:e9:6b:
00:b6:e8:e4:fa:ab:aa:59:63:da:06:08:80:84:51:b2:b7:74:
17:53:65:ac:a2:5f:29:f5:94:d3:7f:b2:8d:e3:91:dc:be:98:
17:ef:90:92:09:c1:3a:0f:6b:21:41:f4:1e:f5:c0:9f:97:a0:
16:85:2a:26:c2:42:5f:fb:95:45:97:3b:66:6a:b1:89:cb:3c:
25:9c:f0:49:0b:06:1e:c3:26:16:e8:ce:25:58:0b:84:28:a7:
b9:ee:ca:77:db:eb:59:a2:ca:b1:17:ce:70:66:8f:d9:84:c4:
b1:56:cc:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOIUvZ/2nNDCf93KN/TIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjYwMzI5MTEwMDQ2WhcNMjYwMzMwMTEwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZTg4ZDg1YWQyMDczZDc3OWZjMjZhNTU3OWE5MmU0OGFmZWNmNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0aFlAcJ+oLWro05WVEYtIkPPQn0
y/GbxEHPbC0Qt2NfDmLFfykOJwof0d6yrw1HB6xWe2ZPsn0RR3Mf4HDbOUIdpsFK
mVk4TCyzFnXroU72Gcv+pKNADQcabxu6pERY+kOGo5vkFHWG6W2YgnIyDamylQlx
RqJA4xeMWLvoy4eyBmOUR3CXB2pPSEiCQ6AEjT/1neMHLRYwLiS8HXM1WfwUNsnj
eNhgvWHD+RvDYgc46xl+ju5C9v5wjiRESWr3P1STXcpfWmMJLMAqB+m8h/BfE3mf
ZYu0ukJX/0mFEKzRHY3mEe8NPY82Ue4hik/Ymc1GAKu9QMUTZtfPllaKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6I2FrSBz13n8JqVXmpLkiv7PXXMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQeWFTSL
hNXCDELTqvemdqUxbLYR/s5oBzf4xcMY/fTybFhrC2k/SSe9uqbfwWWPlQHkT0pP
Eq8gCqw4XQxES1XDUqxp1dflUu5R6w+fmVjZ6ivhWXUmnU+Z/elFzHeocdNaSKJs
SZopOZ6gMrqg6vs6NEXrTtSQTA2M0hIiDdUrPAHWqtz+pSePthK9l+lrALbo5Pqr
qllj2gYIgIRRsrd0F1NlrKJfKfWU03+yjeOR3L6YF++QkgnBOg9rIUH0HvXAn5eg
FoUqJsJCX/uVRZc7Zmqxics8JZzwSQsGHsMmFujOJVgLhCinue7Kd9vrWaLKsRfO
cGaP2YTEsVbM9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:38 2026 by rpki-client