Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier: 8LcY07nyTfX/yQPAOp8w4tf818eod9Pxf60Ro9Nu0MQ=
Subject key identifier: 7D:9C:32:5F:46:00:C8:87:5C:28:0D:49:0E:FD:2E:25:8D:4A:FB:98
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial: 01A13E25D5CD953A569981B54CD81F783E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number: 05FF
Signing time: Thu 15 Oct 2026 06:00:29 +0000
Manifest this update: Thu 15 Oct 2026 06:00:29 +0000
Manifest next update: Fri 16 Oct 2026 06:00:29 +0000
Files and hashes: 1: Dr6F3L4xRt2i8RUfH4s0XX8o0U0.roa (hash: GCUyOT0XAk3FRNMCon8x2Cr9zKCfKsyTPv23kvE35X4=)
2: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: dUC2iqFStESY/MqDYpKtdUZTuIdyhemCl5BuNw6jen0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:d5:cd:95:3a:56:99:81:b5:4c:d8:1f:78:3e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Validity
Not Before: Oct 15 06:00:29 2026 GMT
Not After : Oct 16 06:00:29 2026 GMT
Subject: CN=7d9c325f4600c8875c280d490efd2e258d4afb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:6b:bb:4a:69:91:82:ec:1d:f1:d2:7e:0e:
4f:7b:46:7d:a4:9f:13:8a:cc:83:c4:25:4f:df:54:
5b:db:00:ca:27:c0:c2:71:39:13:57:ca:e3:ee:cb:
11:2b:67:b6:ab:10:9e:30:77:a4:f3:ff:42:85:00:
b5:34:69:e1:d2:91:f8:b8:fe:08:6f:5b:40:ae:cc:
0b:36:0a:f7:85:13:64:f4:06:6f:3d:7a:11:d1:f2:
df:f5:cd:69:01:5c:c8:a0:d6:2b:a9:8e:61:90:42:
73:10:b9:be:e1:0d:b2:54:d6:8f:08:ff:06:10:fa:
47:ae:a5:34:99:80:3b:43:a0:96:74:53:fa:2a:42:
33:07:42:45:66:59:b9:15:e6:a9:3a:96:19:dd:5f:
38:71:74:ae:b5:70:87:ac:69:03:24:de:f9:3b:c0:
e9:a4:af:4d:54:88:2d:d3:10:42:68:56:85:43:60:
98:a5:6f:51:f1:48:0f:5c:a7:e2:3c:80:a9:5c:02:
cc:da:83:61:99:91:d6:11:7b:ad:68:f2:0d:b9:28:
65:9d:c3:7b:43:5c:4f:c5:f8:d4:68:08:7c:30:da:
ff:8f:29:3b:42:d8:90:ea:e6:a8:f2:b4:24:a5:68:
fe:3c:6d:2d:5e:e1:5f:83:82:92:41:10:d9:fc:84:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:32:5F:46:00:C8:87:5C:28:0D:49:0E:FD:2E:25:8D:4A:FB:98
X509v3 Authority Key Identifier:
keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:6a:f3:30:27:1b:ce:90:c4:61:23:4d:8d:9d:0e:ee:43:
63:d4:ff:3c:a2:7c:c5:4d:53:1e:85:5d:a5:2c:b8:81:94:82:
14:df:97:96:39:ce:1a:63:69:f0:2a:ba:0d:67:57:04:22:35:
21:ce:b0:1a:6b:ef:3d:49:d2:02:7f:21:41:9e:de:0b:d0:6e:
d9:47:78:7d:66:15:70:27:9f:c0:6e:d1:b5:92:a3:bc:11:89:
9d:ef:e5:d3:8a:d6:ad:dc:f0:2a:19:bc:05:8f:16:e0:dc:03:
dc:7c:08:16:5b:c6:7d:be:59:53:b4:a0:d5:7f:4a:b4:25:63:
0f:15:a9:29:0e:9f:ab:e2:a2:05:5d:4e:e2:b3:20:56:d2:3b:
47:cf:ac:a9:8b:ed:7e:cc:22:de:2f:20:e0:4b:bd:5b:48:cc:
dc:f5:d6:35:a5:14:2f:e9:0c:b8:80:7b:50:b6:6f:0e:69:f1:
17:60:e1:9b:ee:8a:e8:c4:10:6e:5f:0a:9c:e6:9c:4f:60:b7:
33:27:9c:f8:11:d1:2a:28:57:d5:d6:fd:e4:73:ca:8c:de:92:
10:2e:ad:47:16:78:1f:8c:a0:7b:30:63:a1:3d:2b:ec:42:2a:
4e:73:a6:9d:a8:01:86:6c:7a:69:71:cb:97:28:dc:85:8c:70:
72:cf:78:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JdXNlTpWmYG1TNgfeD5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjYxMDE1MDYwMDI5WhcNMjYxMDE2MDYwMDI5WjAzMTEwLwYDVQQD
Eyg3ZDljMzI1ZjQ2MDBjODg3NWMyODBkNDkwZWZkMmUyNThkNGFmYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIJru0ppkYLsHfHSfg5Pe0Z9pJ8T
isyDxCVP31Rb2wDKJ8DCcTkTV8rj7ssRK2e2qxCeMHek8/9ChQC1NGnh0pH4uP4I
b1tArswLNgr3hRNk9AZvPXoR0fLf9c1pAVzIoNYrqY5hkEJzELm+4Q2yVNaPCP8G
EPpHrqU0mYA7Q6CWdFP6KkIzB0JFZlm5FeapOpYZ3V84cXSutXCHrGkDJN75O8Dp
pK9NVIgt0xBCaFaFQ2CYpW9R8UgPXKfiPICpXALM2oNhmZHWEXutaPINuShlncN7
Q1xPxfjUaAh8MNr/jyk7QtiQ6uao8rQkpWj+PG0tXuFfg4KSQRDZ/ISPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2cMl9GAMiHXCgNSQ79LiWNSvuYMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJblq8zAn
G86QxGEjTY2dDu5DY9T/PKJ8xU1THoVdpSy4gZSCFN+XljnOGmNp8Cq6DWdXBCI1
Ic6wGmvvPUnSAn8hQZ7eC9Bu2Ud4fWYVcCefwG7RtZKjvBGJne/l04rWrdzwKhm8
BY8W4NwD3HwIFlvGfb5ZU7Sg1X9KtCVjDxWpKQ6fq+KiBV1O4rMgVtI7R8+sqYvt
fswi3i8g4Eu9W0jM3PXWNaUUL+kMuIB7ULZvDmnxF2Dhm+6K6MQQbl8KnOacT2C3
Myec+BHRKihX1db95HPKjN6SEC6tRxZ4H4ygezBjoT0r7EIqTnOmnagBhmx6aXHL
lyjchYxwcs94aw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:42:21 2026 by rpki-client