Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier: xxv4Vihi2+37k2k8XGGLcXTtB511qS+p+dGD3ejpMPs=
Subject key identifier: 8D:F6:33:7B:64:43:CB:B6:D4:5B:B4:AC:A6:D8:33:30:7C:1D:E6:5F
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 019CAED9CBD1AD7EC498DCDF9202AF170100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number: 0E2D
Signing time: Mon 02 Mar 2026 14:00:34 +0000
Manifest this update: Mon 02 Mar 2026 14:00:34 +0000
Manifest next update: Tue 03 Mar 2026 14:00:34 +0000
Files and hashes: 1: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (hash: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU=)
2: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: fHpQBRFqQ0fS74wO4o3yAA87+v6PCnZCY6NF7smuYO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:cb:d1:ad:7e:c4:98:dc:df:92:02:af:17:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Mar 2 14:00:34 2026 GMT
Not After : Mar 3 14:00:34 2026 GMT
Subject: CN=8df6337b6443cbb6d45bb4aca6d833307c1de65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:a7:1e:0f:c9:73:8e:11:40:94:79:a4:3b:
1f:1f:e2:e7:60:71:df:3f:52:3d:42:3f:8d:98:14:
80:ff:37:2f:05:7c:84:1f:cc:da:a4:f5:11:52:31:
e2:18:82:df:67:f6:e7:e4:aa:79:6f:d6:e4:41:4b:
89:eb:7e:33:e9:8f:f0:f1:89:e9:bc:2c:56:b3:19:
ed:e1:fd:74:c3:2a:4a:ee:bb:6f:d7:ea:17:92:75:
55:64:24:d1:29:cd:a1:7f:3e:51:c0:d8:9e:fd:8b:
4c:02:ce:50:d1:6f:ef:79:a9:3c:0f:1b:13:ff:22:
91:ee:a0:ec:4b:b4:be:04:aa:8b:96:b1:bd:db:7e:
59:4b:c0:44:7b:fb:77:98:da:b6:fc:81:34:80:a7:
6f:07:f4:bb:b5:f5:1b:b9:33:4c:e4:27:fb:89:ad:
05:45:0d:1c:7d:cb:96:3f:9a:4a:64:cf:82:e4:91:
95:18:16:4a:1e:7b:80:f5:9b:83:23:3e:22:70:45:
86:ba:97:41:68:fa:a0:6f:32:86:00:20:fb:24:e8:
65:12:76:4a:08:6a:0e:0c:f5:66:c2:80:f7:3d:dc:
de:bf:80:54:c2:6c:06:54:1c:43:fe:5c:1e:1c:c8:
3e:84:69:ab:ea:b4:7e:41:19:17:43:ea:c2:86:95:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:33:7B:64:43:CB:B6:D4:5B:B4:AC:A6:D8:33:30:7C:1D:E6:5F
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:14:0c:c9:bb:cc:9e:9f:e5:c6:61:d2:fe:f2:1c:77:6c:37:
b8:79:00:21:73:20:21:8f:76:fd:1e:4b:b6:27:f1:ce:3a:05:
ca:6e:04:ec:8c:ab:69:69:b2:41:9c:9f:7a:88:62:80:8b:93:
b8:f4:37:bd:2d:8d:b7:12:82:20:e3:84:0a:6d:34:89:dc:a1:
a9:45:7d:a4:ee:95:d6:4e:65:b8:9a:be:29:93:02:36:16:36:
b9:68:8a:76:a5:b4:14:c3:08:38:34:91:d0:81:c0:ca:cf:25:
48:e1:0b:9e:98:a2:74:f9:af:44:fe:36:02:e8:b8:93:70:fd:
cb:b5:53:a0:8a:6b:be:3e:fd:63:f3:c7:3a:de:24:89:af:e8:
46:69:21:39:8a:d2:3a:f2:79:94:a4:11:19:52:ce:3a:de:fb:
f5:c9:08:ea:3d:01:0b:1c:56:6f:f7:ad:19:10:46:db:2d:84:
1f:c7:b4:5b:17:1a:c8:37:c2:18:d4:e5:28:07:bf:1c:e9:ce:
b9:ef:6c:72:41:57:50:9f:80:fb:b1:ed:61:68:2e:f1:1d:00:
80:bc:ca:91:bd:bf:49:ac:73:f9:72:7f:5d:9f:6e:bd:c2:92:
ac:d5:d4:f9:97:e9:08:9b:ad:6b:1f:93:3b:3b:ae:19:23:1f:
f5:53:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:54 2026 by rpki-client