Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: JI4MIqb/4CV8GK8jqmfO/RMvGFk1XQ9TIaWh2/cC7lA=
Subject key identifier: 3F:55:25:FA:58:7C:BE:3A:F4:3A:84:06:71:B0:CF:0A:C6:44:1F:A7
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A15B8C4B685450E18B0DF9E6940C412056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0F6F
Signing time: Tue 20 Oct 2026 23:01:23 +0000
Manifest this update: Tue 20 Oct 2026 23:01:23 +0000
Manifest next update: Wed 21 Oct 2026 23:01:23 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: /xiu+PQbo02wOEyLyUpMLAe9350J50cpi9wy6t/97PI=)
6: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (hash: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=)
7: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: x-gsFUsDHGitGQKCRuc3VM0kNoM.roa (hash: zEe9p5KemNkACCMNdCrYtOf0QH3Rb5Ycu0XNQjS02kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:4b:68:54:50:e1:8b:0d:f9:e6:94:0c:41:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Oct 20 23:01:23 2026 GMT
Not After : Oct 21 23:01:23 2026 GMT
Subject: CN=3f5525fa587cbe3af43a840671b0cf0ac6441fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:b6:a4:5c:89:73:b2:aa:bd:56:0f:23:3b:
12:fb:10:91:6d:20:c8:5b:db:ed:eb:bb:f9:3f:a2:
69:64:88:96:7c:a9:8a:a4:cd:10:54:9e:78:91:73:
b1:d2:20:f6:1c:65:5d:a8:0b:02:1c:4e:d8:4e:59:
04:c9:d9:c6:a2:aa:38:25:4d:2f:6d:24:61:14:1d:
2d:af:85:0c:46:fc:9a:1e:89:d4:32:34:79:e6:b5:
e9:75:4c:a0:6f:30:1e:2a:a4:e8:81:63:aa:b1:30:
f8:bc:5c:b3:70:52:71:bb:27:b8:00:75:e0:ab:ed:
d1:ee:2e:d6:52:d6:92:bf:45:95:f1:20:df:ec:4b:
b1:9e:4b:3d:fc:5c:36:b6:0f:84:15:0c:77:b1:ff:
2a:0b:34:8a:d0:cb:52:71:c4:4b:8d:80:19:7d:50:
6f:81:08:b1:e9:f9:d3:ca:c8:b8:d3:a4:cd:20:34:
ab:f3:57:11:3f:94:81:60:57:28:4d:97:a1:14:3b:
c4:5f:9c:e3:a2:2a:20:14:f3:43:0c:02:7f:13:ad:
c0:1e:21:b4:17:83:b8:9d:96:9a:9a:45:27:93:9c:
40:06:c2:c8:3b:7d:26:0a:83:c4:2a:ba:5c:cc:62:
da:f5:ca:ee:bc:fd:00:85:16:8b:ad:33:6c:b8:2b:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:25:FA:58:7C:BE:3A:F4:3A:84:06:71:B0:CF:0A:C6:44:1F:A7
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:e2:b5:10:72:23:0c:80:67:7a:3a:df:e7:78:63:69:e7:
27:d0:79:81:aa:f0:72:30:a2:5a:d8:8e:21:83:8d:74:59:bb:
e8:0b:42:72:a2:c1:6a:f6:69:19:78:ce:c8:5b:c1:fb:a9:c2:
84:34:1a:34:d5:2a:be:20:da:e6:72:e3:24:67:6d:3a:bc:6a:
2d:dd:89:de:e6:a7:ff:bf:49:f4:33:ed:eb:ea:0f:eb:d3:4c:
2f:e8:cb:40:b1:d2:1f:f2:bc:9a:49:3e:4c:07:cb:d1:9c:cc:
83:df:9b:fa:61:2b:bb:4c:af:62:63:f5:12:2d:87:e6:34:f8:
26:44:87:63:31:83:51:5f:60:69:65:c5:56:54:9a:e4:b5:31:
2b:ad:c2:c1:e1:22:74:c6:c0:0f:8c:f4:3c:f5:a8:a0:c5:c4:
d1:d3:a7:08:4a:b0:b2:e3:22:bc:de:3e:0d:28:24:f0:5c:69:
22:75:f1:22:f1:de:e6:b3:78:e7:e0:6d:a3:7f:0a:fd:80:df:
17:3c:45:40:3a:b0:e3:32:b2:4f:af:9d:dd:64:ef:bc:ad:cb:
59:30:c7:af:ee:68:42:dc:5b:1a:6a:28:db:e7:21:bd:f5:a3:
3d:41:b6:bc:d7:ed:a4:2f:0c:c1:c1:0f:0a:10:71:74:9a:35:
62:6c:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:13:57 2026 by rpki-client