Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: ld9dw2ebJu8lmaCVx1Xz/bp4/LHOt+Bl8Z4BVNxu+Zo=
Subject key identifier: 31:70:1C:24:BB:54:AD:CC:EE:A9:79:7A:E5:E2:75:32:5D:15:FB:30
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 019CAAC7055C390F7252540E83D12898C6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 091A
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: apek8wag2vtTdhmE5pj9/CKV/rrg+5fq8I64VONgA2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:05:5c:39:0f:72:52:54:0e:83:d1:28:98:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=31701c24bb54adcceea9797ae5e275325d15fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:1b:13:ab:33:fc:7e:75:06:3e:58:ca:3d:
65:86:bc:db:04:df:6d:7a:ba:35:67:5e:0a:36:91:
1d:cb:68:0a:ac:6e:1a:dc:59:2d:f0:88:f1:dd:fd:
29:73:22:56:ea:8d:32:04:a2:ac:23:c2:c1:e6:95:
e8:be:56:03:3c:66:52:ff:5b:83:d6:fa:b1:56:4b:
92:a2:4a:89:6f:d4:2f:18:a8:49:47:f5:6f:ed:d5:
64:ae:57:82:27:9b:3b:10:6b:75:04:d8:a1:22:fc:
84:de:1d:05:32:44:3a:5d:4a:3b:04:8d:3b:e9:6e:
8e:f4:e5:4b:db:4f:6c:23:6d:d6:b4:f9:0d:13:6b:
b9:4a:ac:a3:e4:51:06:65:17:b2:08:7e:aa:16:f0:
47:65:92:21:2f:9e:3e:3b:5b:76:b9:4c:e1:e4:1a:
bd:bb:bc:27:02:c1:2e:77:ed:c6:87:2f:96:cb:97:
bd:41:4c:60:14:f9:75:bd:da:9a:03:ab:d8:03:92:
bc:79:75:08:b2:bd:90:bb:06:0d:d6:6d:97:6a:ad:
b5:6f:86:89:4b:08:73:d1:e6:9d:f2:8e:aa:03:11:
d4:ad:3b:9f:10:01:01:09:0f:30:a8:c2:ff:d6:0f:
93:a9:31:26:32:7e:ca:3e:72:9c:2f:ea:be:a6:11:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:1C:24:BB:54:AD:CC:EE:A9:79:7A:E5:E2:75:32:5D:15:FB:30
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:95:71:aa:84:5e:d7:98:ce:5c:ac:30:5c:a7:5e:87:92:
83:a9:69:31:cb:d6:9d:fc:22:f3:f9:2c:f2:fd:57:08:01:91:
03:e4:4f:14:48:5b:c8:b2:d4:42:27:5a:53:f8:34:9d:93:dc:
8c:8b:e1:dd:42:37:86:70:76:b2:4c:e0:2d:9c:05:e5:1d:14:
3b:de:4f:72:ab:57:89:01:e9:88:8b:90:ba:2d:49:68:57:aa:
32:bb:61:27:36:36:92:8b:20:7b:d8:91:54:50:16:72:51:4a:
4f:c7:ee:57:32:fe:93:33:21:85:f4:81:3a:f4:b6:eb:6c:a9:
38:6b:c9:7c:9f:b6:56:56:5a:b7:c5:8f:1e:12:32:eb:68:f6:
d3:ce:8e:db:e2:db:f7:31:93:0b:52:d8:65:22:7d:da:0b:2b:
5e:2e:1a:a6:8f:9d:4d:c1:0c:da:df:8c:76:ec:96:c0:40:a9:
8c:6b:a8:b4:af:59:49:73:3e:5b:1a:8d:83:71:3a:49:06:78:
13:48:8e:32:7f:a9:5f:78:30:f2:59:dd:6d:6f:ca:af:81:d7:
3f:e7:c0:dd:91:7e:b4:f6:50:4a:59:36:59:50:19:f7:3a:2a:
8c:a5:36:f4:1f:95:3e:cc:e0:94:89:6d:c2:d9:4d:86:b9:c9:
18:14:8b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwVcOQ9yUlQOg9EomMbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMjAxZDQ5MTEwNWJlODc5N2M1ZjJhMzg1YWI0NTZmNWYw
YWYwNWIwHhcNMjYwMzAxMTkwMTM1WhcNMjYwMzAyMTkwMTM1WjAzMTEwLwYDVQQD
EygzMTcwMWMyNGJiNTRhZGNjZWVhOTc5N2FlNWUyNzUzMjVkMTVmYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwYbE6sz/H51Bj5Yyj1lhrzbBN9t
ero1Z14KNpEdy2gKrG4a3Fkt8Ijx3f0pcyJW6o0yBKKsI8LB5pXovlYDPGZS/1uD
1vqxVkuSokqJb9QvGKhJR/Vv7dVkrleCJ5s7EGt1BNihIvyE3h0FMkQ6XUo7BI07
6W6O9OVL209sI23WtPkNE2u5Sqyj5FEGZReyCH6qFvBHZZIhL54+O1t2uUzh5Bq9
u7wnAsEud+3Ghy+Wy5e9QUxgFPl1vdqaA6vYA5K8eXUIsr2QuwYN1m2Xaq21b4aJ
Swhz0ead8o6qAxHUrTufEAEBCQ8wqML/1g+TqTEmMn7KPnKcL+q+phH7kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFwHCS7VK3M7ql5euXidTJdFfswMB8GA1UdIwQY
MBaAFJ4gHUkRBb6Hl8Xyo4WrRW9fCvBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEt
ZGY0OTFiZDAzNzRlLzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEtZGY0OTFiZDAzNzRl
LzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRKVcaqE
XteYzlysMFynXoeSg6lpMcvWnfwi8/ks8v1XCAGRA+RPFEhbyLLUQidaU/g0nZPc
jIvh3UI3hnB2skzgLZwF5R0UO95PcqtXiQHpiIuQui1JaFeqMrthJzY2kosge9iR
VFAWclFKT8fuVzL+kzMhhfSBOvS262ypOGvJfJ+2VlZat8WPHhIy62j2086O2+Lb
9zGTC1LYZSJ92gsrXi4apo+dTcEM2t+MduyWwECpjGuotK9ZSXM+WxqNg3E6SQZ4
E0iOMn+pX3gw8lndbW/Kr4HXP+fA3ZF+tPZQSlk2WVAZ9zoqjKU29B+VPszglIlt
wtlNhrnJGBSL+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:14 2026 by rpki-client