Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: yjz5zGaNd2F+z7qSmGHMs809TnHU4BzdS+GAm7tyX94=
Subject key identifier: F3:CE:8C:71:1F:C3:87:5F:AB:89:91:68:C5:54:E5:D9:45:0D:D7:87
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 019FAB9ACFAB8ED3BCC359996771AC4A0958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0FB9
Signing time: Wed 29 Jul 2026 02:01:17 +0000
Manifest this update: Wed 29 Jul 2026 02:01:17 +0000
Manifest next update: Thu 30 Jul 2026 02:01:17 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: fIAnqD0gb6mZNyP0TawWmjLr8pvEGnNuLXOZjhdwXL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:cf:ab:8e:d3:bc:c3:59:99:67:71:ac:4a:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Jul 29 02:01:17 2026 GMT
Not After : Jul 30 02:01:17 2026 GMT
Subject: CN=f3ce8c711fc3875fab899168c554e5d9450dd787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:43:ae:b0:df:ae:31:f0:46:39:aa:fe:fb:
31:83:74:a5:47:4e:b9:52:4f:c2:08:57:42:32:68:
cf:d6:0f:28:d7:a7:07:86:82:81:ca:33:b3:5d:ea:
28:76:bd:04:4b:57:73:8b:c9:10:e4:27:ea:0f:1f:
bc:01:c5:e4:00:5b:19:eb:fc:a5:74:24:11:5e:e7:
03:6d:48:7b:8c:7c:c0:4b:e7:5e:3c:9e:80:87:17:
a0:e8:c3:20:9a:1c:6f:36:a4:64:74:c9:cd:72:d6:
76:20:5c:5a:d1:a0:f8:ed:9b:4a:c0:76:ac:e6:7a:
07:44:67:23:5d:dd:e6:0f:44:bb:c2:bc:fc:cf:95:
df:72:07:56:a9:d3:05:e2:9c:7c:b8:28:47:d8:e4:
45:19:e8:7e:ee:e0:07:4f:fc:4e:78:dd:c1:5b:09:
88:0d:04:05:49:b6:21:0a:d6:20:cc:9c:64:93:c4:
5e:d0:14:44:67:ed:5f:c2:23:9d:58:ef:19:29:64:
1d:c8:58:96:d0:e5:bd:62:ba:ed:a8:02:08:eb:5d:
69:ff:5d:02:c9:94:02:96:a9:53:0f:30:a6:7e:2e:
46:e0:b7:e7:59:97:63:9e:c2:54:b0:98:71:21:d6:
15:63:1c:14:06:a3:bc:ea:de:0b:c9:90:68:d8:fe:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:8C:71:1F:C3:87:5F:AB:89:91:68:C5:54:E5:D9:45:0D:D7:87
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:db:d2:60:d7:98:a0:98:56:63:a8:f8:b5:a1:b9:44:3f:
ee:8d:2d:26:74:56:34:bb:f9:c7:5c:28:f2:a3:fd:51:5d:a8:
6e:eb:22:e1:2c:05:f1:b4:45:50:a0:78:80:67:92:03:73:b5:
96:99:bb:cf:f4:7d:63:82:2d:bd:21:a4:2e:5d:83:53:ed:99:
f6:e6:0e:ca:55:8e:92:47:fe:21:ee:9a:3a:c2:c5:0e:54:9b:
f3:a8:ad:c2:eb:b6:d7:0f:27:79:a5:cd:9e:ab:80:d7:61:53:
20:5e:78:87:37:46:ce:65:bc:f6:2e:fb:46:5d:8f:c2:25:d2:
0e:ee:a7:d9:e1:8a:6a:f0:52:cd:e9:51:ff:4e:0f:cd:63:cd:
26:12:20:84:f8:a9:1b:ef:d3:22:85:75:d1:55:49:fc:7f:99:
59:13:49:91:32:04:d4:4d:8c:76:41:ca:3e:c7:d4:a4:50:02:
33:40:c0:2d:fe:a0:21:d7:e7:ae:8f:72:2f:40:0e:d5:02:ed:
42:06:4b:2c:82:fe:44:da:1d:c9:eb:b0:ab:da:c7:91:ba:19:
0f:bb:15:9b:2c:0e:cd:b8:38:40:4e:64:73:b7:00:4f:a1:1f:
55:54:dc:f1:d7:93:75:fb:9e:e5:76:27:cb:ce:e8:33:d4:d5:
82:37:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:04 2026 by rpki-client