Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: jDox9L32P/OcDpdYjXEvpeypJtYV7/uvcMve0zsy1tM=
Subject key identifier: 13:FD:A7:2A:8E:97:6F:39:15:6C:B5:7C:4A:3E:4B:F5:F5:38:C7:55
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 019CABA21C7F3D7DE4B499CFFE346C7868D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 1653
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: IIVV2As82hspViz/MDRpz8l+HB3/zqoU9OquJduG1Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1c:7f:3d:7d:e4:b4:99:cf:fe:34:6c:78:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=13fda72a8e976f39156cb57c4a3e4bf5f538c755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4d:11:39:60:2e:0c:c8:1a:87:c2:4b:24:0a:
c9:fe:25:b8:71:6a:b4:a3:15:da:77:6a:74:97:57:
47:ad:d0:2c:73:56:f3:2f:91:9e:0f:79:82:14:32:
0f:2c:69:40:b7:00:33:18:36:b9:f4:ce:53:12:c4:
90:f9:b4:69:aa:1e:9c:a7:26:73:26:62:0f:5b:a1:
ca:a7:06:1b:f4:24:d7:83:23:6c:68:f5:11:1a:62:
9d:c9:40:f5:12:a9:ac:df:10:bc:f3:46:c6:f8:00:
03:1a:2e:19:d1:fa:42:c6:12:47:73:78:25:5b:23:
17:77:90:8f:8e:98:f7:70:79:2a:d8:9c:fa:a8:f2:
46:53:00:d7:c8:13:11:e3:a7:f4:14:57:95:b5:f7:
0f:d9:27:06:bb:31:24:3a:ba:00:39:8f:c2:d8:ab:
e7:03:b5:29:2a:5d:1b:df:38:56:3c:c1:ca:5f:09:
31:96:f6:53:fc:62:f9:73:5f:c4:5e:a0:be:f4:28:
d4:66:80:8f:58:a5:3d:cb:b5:6a:11:c4:b3:57:07:
a8:87:74:72:19:84:04:fd:3c:b3:9a:2e:12:87:a9:
4f:2a:d9:d9:66:01:01:f2:0c:57:db:e8:b0:fa:1b:
03:4b:a7:db:27:16:75:b7:74:d1:e7:b2:9c:12:dc:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:A7:2A:8E:97:6F:39:15:6C:B5:7C:4A:3E:4B:F5:F5:38:C7:55
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:fe:b8:a3:bc:85:a0:0e:21:d1:05:ba:9a:d1:06:96:7c:
b1:82:26:5b:2f:c3:c4:8c:48:c2:ba:94:b2:b6:f8:03:60:0b:
15:ec:36:49:3b:1a:3d:fa:de:15:59:bf:c9:9c:7c:26:2b:15:
04:14:7f:2a:e7:34:47:26:03:70:78:66:60:84:4f:d1:86:a8:
18:14:52:33:1d:ac:d8:4b:55:6a:7a:a8:fd:f8:76:6b:70:03:
52:d6:26:28:65:6b:89:a7:b4:ca:89:47:43:97:91:b5:36:88:
d1:23:95:da:45:4c:45:df:f6:dd:4b:d1:57:6f:32:3d:8a:be:
7f:f2:d7:db:07:5a:d1:16:33:05:dc:bd:e2:84:ee:0d:91:23:
ec:4d:0d:26:ee:58:13:93:98:94:ed:04:69:2c:93:c7:5b:62:
74:79:9e:42:9d:75:b0:03:c2:af:6f:ca:ec:08:52:02:1c:70:
a8:25:94:ff:6c:ad:8e:18:22:c5:0b:29:6e:4e:94:6f:67:da:
22:ec:a1:2e:48:a6:21:a0:cc:f2:e8:2f:46:1a:c4:33:ad:8c:
42:d1:83:7f:d5:da:0a:d4:dd:f0:a4:61:d3:bf:1f:4b:ae:0c:
6c:44:61:36:a7:de:e4:92:8d:de:f1:48:2d:bc:8b:f3:cb:a9:
35:6c:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:37 2026 by rpki-client