Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: DYRyw9os6nX0rUN54zy1F0OvdLhkUEnboRNpk6MmZnI=
Subject key identifier: DF:C1:8E:A7:64:79:8C:4A:98:94:3B:10:D8:FF:59:D8:D8:85:A4:F3
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01A1396D5D96632060A46615CF7AF46C6A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 1087
Signing time: Wed 14 Oct 2026 08:00:31 +0000
Manifest this update: Wed 14 Oct 2026 08:00:31 +0000
Manifest next update: Thu 15 Oct 2026 08:00:31 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: mZhliHb0RXwih3dMKpkE0E/Lxx9eO6Y/NXICSjfEVXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:5d:96:63:20:60:a4:66:15:cf:7a:f4:6c:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Oct 14 08:00:31 2026 GMT
Not After : Oct 15 08:00:31 2026 GMT
Subject: CN=dfc18ea764798c4a98943b10d8ff59d8d885a4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:05:f4:c3:15:fc:06:1d:ea:a3:12:b6:76:
06:91:1b:17:df:ed:5a:f7:d4:a9:d0:c8:23:00:4b:
5c:43:39:77:2d:4f:5e:09:18:d2:bb:30:54:18:b7:
4b:85:88:5d:46:a1:ab:81:52:5d:60:cf:24:e7:93:
f6:a3:db:0e:aa:d3:a3:b9:95:88:88:df:38:de:07:
84:86:22:73:78:65:9d:2b:31:dc:44:c5:0f:23:10:
63:ec:ed:3f:94:c4:fb:66:60:63:42:77:1c:f1:6c:
10:5f:53:93:f2:6c:02:1c:42:d7:6e:d1:11:c3:51:
74:18:10:b2:8e:99:7b:39:99:5a:00:5b:de:d1:26:
5b:d7:b1:a8:92:83:ab:52:21:24:79:71:33:40:f1:
44:c6:58:f0:fc:d2:f1:11:ab:10:09:c6:7c:ba:46:
c3:fc:e3:ee:f9:af:d1:c6:1b:1b:24:42:0b:bc:71:
1f:58:52:5a:e0:08:7c:ab:f9:04:0f:ed:63:7e:37:
c4:ce:9b:22:c5:37:47:ef:61:11:d1:22:2c:f5:db:
83:2e:73:6e:fa:4f:67:80:53:77:1b:0c:69:45:87:
c7:37:94:5f:e9:77:38:ba:89:0c:7a:9b:f6:25:9a:
38:4d:98:d7:26:fc:dd:ad:d9:05:be:71:ce:b4:d2:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:8E:A7:64:79:8C:4A:98:94:3B:10:D8:FF:59:D8:D8:85:A4:F3
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:31:17:d9:13:71:cd:45:f9:88:9e:58:19:4e:2a:70:cc:
d3:4b:69:f4:7a:0e:2e:29:15:04:26:39:5d:82:83:2e:be:3b:
b3:6e:b7:92:01:ec:ea:b1:72:e3:3a:f0:c1:2c:77:57:ed:27:
78:91:1d:18:c4:7d:b6:fa:a6:c7:04:96:34:fb:11:54:a4:f4:
52:54:d2:04:58:d7:42:d1:f0:3b:15:98:97:ae:a0:65:3a:38:
7e:8d:80:e3:0b:e9:23:16:56:9e:fc:a9:10:8f:51:2b:67:ca:
64:ef:85:79:f7:95:ef:79:db:eb:27:d1:34:d3:ea:c4:c5:92:
2a:e6:8e:5e:c2:7f:6f:83:97:75:d0:82:43:22:95:cd:fe:75:
e1:5a:d4:06:77:8a:e3:0f:00:ca:a5:c5:d6:c7:43:03:a1:c5:
88:37:73:be:98:40:95:b1:88:c9:03:cd:a9:1a:f3:2a:b8:fb:
46:6d:98:27:0c:f8:84:b6:47:ed:e5:2a:fd:1c:9d:9c:57:b1:
e2:ea:59:b9:0e:34:54:cc:6b:bc:eb:52:8d:15:e9:d9:7d:ed:
80:b4:46:3d:04:0c:3e:a2:21:a4:20:4f:72:01:b6:aa:0c:80:
3c:33:2a:23:66:40:79:8c:e0:9b:4a:60:e0:39:da:36:22:f6:
d0:14:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:32:51 2026 by rpki-client