Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier: 1+tJrhtbG/0D8fo9mj9AXtPUuycyf9e8SISChBpxMTU=
Subject key identifier: B0:FF:79:27:AD:5D:58:F4:5A:CB:FE:AF:0B:88:51:1D:12:FF:67:D0
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial: 019D9B19C833780E18474809281EA5D6016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number: 16CF
Signing time: Fri 17 Apr 2026 11:00:51 +0000
Manifest this update: Fri 17 Apr 2026 11:00:51 +0000
Manifest next update: Sat 18 Apr 2026 11:00:51 +0000
Files and hashes: 1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: AVnSS1QvZuTsXn+MidhEqAeELRmdKRb8w9OiI3NZts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:c8:33:78:0e:18:47:48:09:28:1e:a5:d6:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
Validity
Not Before: Apr 17 11:00:51 2026 GMT
Not After : Apr 18 11:00:51 2026 GMT
Subject: CN=b0ff7927ad5d58f45acbfeaf0b88511d12ff67d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:1e:85:15:29:f5:66:86:d1:c3:03:51:39:
2b:e7:36:3d:9f:21:4f:aa:f4:22:00:20:42:e0:e8:
a9:55:18:44:7d:3e:fe:6c:60:1a:30:4d:c6:7c:53:
f4:f3:de:dc:15:f6:56:bd:0f:e7:5c:3c:e0:ba:8e:
50:e6:66:eb:63:46:6d:52:4c:aa:e4:f9:27:fb:e7:
cb:0c:2b:fa:be:45:9e:2d:2b:30:5f:d9:0f:0d:8b:
98:d4:2d:26:bc:d0:fa:86:15:a9:48:f2:6e:e7:f3:
26:3a:06:20:ad:de:f0:9f:47:48:78:d0:9e:c9:07:
59:e6:75:fe:14:ee:79:11:4b:d7:b4:59:96:5d:34:
c9:57:35:a3:93:47:22:fc:21:88:97:e7:c6:fe:cf:
f3:ed:22:1d:6b:6e:e9:a2:0d:83:e5:72:16:01:95:
c5:15:50:ec:e6:ec:64:4a:f0:59:b9:d4:73:ae:fb:
18:20:1f:5b:2d:b2:90:8b:4a:15:50:a9:5f:9e:30:
a8:72:4d:b9:a1:6a:f8:6d:ac:ff:3a:9b:5d:bc:7b:
7f:80:ef:06:7e:00:cd:e3:b1:74:6e:b4:9e:f5:f6:
98:ef:c4:f3:a7:bd:ea:2a:91:a4:0e:6e:1e:b9:51:
ce:c4:3d:42:72:62:da:92:35:76:e9:5d:a5:6c:b7:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:79:27:AD:5D:58:F4:5A:CB:FE:AF:0B:88:51:1D:12:FF:67:D0
X509v3 Authority Key Identifier:
keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:30:13:af:cb:f8:89:6a:45:83:a8:17:72:ae:d6:d2:18:
1a:60:53:9b:a8:67:ef:b2:7b:b1:ab:1a:9c:0e:a9:54:c3:ac:
82:1b:b0:c6:36:1e:88:f4:63:62:06:04:e8:8d:0e:70:3b:1c:
42:57:45:34:c6:78:63:ae:2c:57:38:cb:eb:52:e9:56:9c:ca:
5c:9d:52:18:65:9c:4f:c0:42:0f:25:9b:e1:56:e9:a1:64:64:
60:3d:4c:07:3a:8d:9a:94:4b:f9:44:0f:62:7e:de:d4:77:f9:
de:bb:1d:6d:83:e4:90:9d:1a:15:aa:7e:50:85:04:64:28:bf:
1e:50:16:89:27:17:43:f2:a1:aa:5a:c1:2c:97:08:0a:7a:b7:
82:ea:f6:fe:61:43:e1:92:da:93:84:0e:04:3b:e3:ab:8c:b8:
77:a1:9e:ab:a6:95:b5:c4:6e:76:1e:1e:a4:8a:38:bb:25:81:
c7:37:22:60:87:28:5e:17:83:65:14:3b:85:45:2f:04:82:fa:
4a:a3:c8:8d:68:a9:48:83:10:95:73:b3:c9:10:ad:ce:42:14:
8c:d1:17:2f:02:22:f0:0b:65:83:97:f4:ed:8a:cb:d9:3f:28:
01:86:31:0a:25:09:2c:ff:57:6c:3a:ae:22:7d:5c:dd:b1:2f:
94:75:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:52 2026 by rpki-client