Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: Q3Ck3PP0BvAc910Y1h5+PlnMrVIwKfkB1GRGznk8Z9M=
Subject key identifier: EE:66:21:9B:92:3C:F4:AB:A9:AE:72:67:69:49:2C:85:53:C0:FE:03
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019E32979C859BA37C18B6AF815EFF3DEF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0DC3
Signing time: Sat 16 May 2026 21:00:57 +0000
Manifest this update: Sat 16 May 2026 21:00:57 +0000
Manifest next update: Sun 17 May 2026 21:00:57 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 18jNci79HhGZutzrqXUdFLiahdyqtscJVWuKPe8wmiM=)
5: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
6: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
7: cpp14lYte57TF7_rOo5C_RYckG4.roa (hash: b/cjdeFMFYdAqGy2c2qn5r13JjD0oTuLC+SpSP2D99Y=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: zIfoqljlX85QzvnSXMz6EhCgOUU.roa (hash: uL/4npychei8p19DfH7kPshAnDAeAA584UCQvzLeiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:97:9c:85:9b:a3:7c:18:b6:af:81:5e:ff:3d:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 16 21:00:57 2026 GMT
Not After : May 17 21:00:57 2026 GMT
Subject: CN=ee66219b923cf4aba9ae726769492c8553c0fe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:51:8f:9c:d9:4b:d9:1d:06:f5:32:26:43:
a5:ff:63:7a:a6:af:c1:72:53:91:6e:a4:fb:f8:e3:
f8:aa:65:6d:72:6c:8b:e4:af:84:60:9a:3d:5a:5e:
fc:31:34:11:16:25:54:25:45:ad:11:7e:ed:8b:98:
aa:37:2f:b0:2f:ae:0a:5d:1e:ad:b4:42:25:59:33:
fd:23:ee:11:38:9f:7e:ab:1f:c1:62:75:92:f9:76:
24:84:a1:d0:db:72:47:d0:8c:a3:6d:37:17:0e:a4:
ea:6d:e5:fd:32:d1:20:6b:18:58:c8:53:69:f2:78:
4d:c1:26:03:af:51:25:0d:57:87:d7:45:80:12:59:
0d:16:07:d7:bd:9d:57:0f:7e:5d:f9:4f:93:b7:13:
75:8a:16:29:b1:9c:3d:8d:97:07:74:57:1c:a2:98:
98:a5:a0:0b:05:1e:9f:86:d3:cc:a4:2b:60:c3:36:
a2:80:15:99:ec:d6:4d:ee:b6:f5:e6:de:28:19:94:
48:ed:ec:40:47:00:9b:2e:d6:f9:41:68:ba:51:9f:
a3:47:31:de:8a:46:15:67:74:51:11:ad:45:6a:2b:
28:b1:4f:0c:a4:d4:35:a9:b7:8f:65:df:62:4d:2d:
b4:6d:16:1c:b7:99:32:53:7a:c4:e4:a3:e9:5a:fc:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:21:9B:92:3C:F4:AB:A9:AE:72:67:69:49:2C:85:53:C0:FE:03
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5c:e9:1f:21:fa:43:0e:e5:2c:98:05:8d:f8:d4:9d:01:e1:
15:9b:66:ef:f5:28:08:e5:c4:2c:f1:b8:fb:16:de:92:cc:fd:
a6:1b:81:2c:92:28:4d:98:62:12:d9:c6:1b:17:64:37:1d:f9:
eb:52:07:51:e1:77:cf:fe:0b:e9:e7:12:67:49:58:d4:56:28:
f3:69:20:c0:58:db:2c:1a:c8:5a:df:33:5a:3e:40:f5:85:2f:
b6:8f:a8:d5:1d:75:78:96:e4:a5:d3:ee:f1:c7:a7:df:9f:67:
ac:84:c8:e0:5a:3e:0b:ac:d3:39:a6:6e:93:d6:66:ac:81:3a:
b5:b0:6d:a3:b0:31:c1:44:b1:27:84:a7:99:10:47:6a:e5:42:
a6:dd:22:e5:be:c5:7a:99:ef:ef:f8:c3:e9:75:de:78:2a:e1:
e1:60:88:bd:42:66:76:06:dc:4d:08:bf:c8:de:c0:c3:29:6f:
8d:cf:98:53:7d:59:b3:18:90:ce:91:90:56:2f:23:5e:88:e0:
5a:c2:b9:1e:07:d6:c6:fe:d5:ae:1b:b4:1e:44:b4:52:e2:ad:
86:65:3f:52:19:33:23:61:39:80:f0:64:55:4b:32:d4:2d:54:
e6:49:e9:7b:73:d6:c1:98:58:ee:90:22:9c:5d:31:bc:fc:9e:
17:56:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:39 2026 by rpki-client