Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: S6zJ9mT6EqzWtcY4T3Vjy+lpu5EL1Fa7Ztczs6Gu+BM=
Subject key identifier: 69:A9:58:4B:64:4C:A3:FF:3B:B9:4F:CD:0F:B8:EA:F3:7E:90:92:C4
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 019D9A752BBE7ED75ED5A460394C5D4029AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0EA7
Signing time: Fri 17 Apr 2026 08:01:03 +0000
Manifest this update: Fri 17 Apr 2026 08:01:03 +0000
Manifest next update: Sat 18 Apr 2026 08:01:03 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: 3LlvingqF9m6NAtYfYlK+60jou6G1mEquzndyLEXymw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2b:be:7e:d7:5e:d5:a4:60:39:4c:5d:40:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Apr 17 08:01:03 2026 GMT
Not After : Apr 18 08:01:03 2026 GMT
Subject: CN=69a9584b644ca3ff3bb94fcd0fb8eaf37e9092c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:98:be:88:20:6c:15:d5:78:24:ba:70:dc:
91:cf:97:3c:6f:a4:5e:04:1c:bb:aa:ba:84:4e:22:
25:7d:35:22:61:a8:47:18:b5:92:ef:35:dc:0f:af:
8a:3d:79:93:69:f2:9a:9a:41:12:91:64:ce:87:12:
10:01:db:a8:6c:e5:44:35:d3:64:6f:e1:5d:2b:90:
1b:20:2e:d4:12:5b:62:f7:65:42:bd:b3:14:9c:fb:
0a:95:3e:7b:68:7d:85:c7:de:dd:de:eb:1c:d1:65:
bc:ee:a9:11:ae:5a:6c:a5:6c:3f:da:9d:06:7b:b3:
e4:fe:e4:07:f2:a3:97:e2:ef:91:ce:58:10:0f:65:
ba:95:49:80:6c:0d:1d:ec:ab:79:ea:9a:dc:21:26:
a2:1b:22:fb:fb:18:14:df:94:c3:10:43:5b:f5:99:
6f:6d:4d:63:35:a6:05:51:5d:23:58:b2:02:37:ee:
db:11:3d:ca:d7:b9:cc:63:b9:64:74:36:0d:4e:05:
93:b1:32:86:4e:6d:93:a3:5d:02:cb:1f:38:91:51:
9c:47:05:47:70:10:ca:22:f3:65:60:ac:57:81:87:
92:a6:4c:f8:f5:7f:91:1e:14:4f:1e:e9:de:a4:8b:
d6:32:d1:e9:ad:51:81:f9:1d:6b:e7:26:b8:2b:08:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:58:4B:64:4C:A3:FF:3B:B9:4F:CD:0F:B8:EA:F3:7E:90:92:C4
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:ae:44:8d:0f:26:87:3a:6c:3c:42:fe:16:15:93:f3:6f:
18:7b:35:bd:7b:77:b1:94:df:fd:73:61:cc:f4:19:bc:8a:51:
e9:43:95:28:60:cd:df:8c:67:91:d5:fc:93:79:c3:74:86:88:
19:92:eb:71:56:3d:7c:4c:7c:d0:65:14:3d:87:87:23:0b:ec:
1c:dd:29:f7:4b:f6:1e:97:4d:a7:db:89:b9:67:47:32:a1:8e:
da:d7:20:77:af:75:ea:ce:c7:f2:a9:8d:d2:66:f6:82:4d:5f:
7b:b5:0b:18:80:2b:5b:ea:6f:30:b6:27:08:79:e7:96:56:7b:
f4:be:af:c5:a0:3d:ef:9a:23:8e:0a:00:8c:2f:bf:f0:d2:97:
c3:e3:73:2a:f9:c6:ae:53:e5:05:16:43:68:0a:b2:40:7f:2c:
89:94:0e:d0:50:6d:22:b0:d1:e8:52:c4:25:b9:ab:86:59:8e:
86:0f:ca:90:73:b8:f9:f6:61:8a:c7:7c:5f:d1:ba:70:64:cd:
2e:fc:67:1e:21:be:3e:3d:0d:a2:53:f8:c1:b7:e6:92:99:9a:
f3:0a:ae:49:90:72:e9:ba:78:0f:c8:11:48:62:ea:fb:12:5c:
10:ad:dd:2b:5b:24:da:6a:c8:3d:b9:58:03:22:d1:b9:ef:eb:
36:00:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:04 2026 by rpki-client