Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: e2KL1ONGgppebVTaGmy2TQAjYhfRfq00dc4oPa6STek=
Subject key identifier: 61:9A:07:C6:BB:C3:34:30:BC:FA:D2:6B:70:64:91:07:C5:61:10:42
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019DA41C812E221CEBAB041B121C058BBE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0D78
Signing time: Sun 19 Apr 2026 05:00:24 +0000
Manifest this update: Sun 19 Apr 2026 05:00:24 +0000
Manifest next update: Mon 20 Apr 2026 05:00:24 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 5g1swI8SqyqhndQn2HJUZ-2l-lI.roa (hash: GBs/TAy8kUg/eyFVU/5qG1VqNcpJX0KNDjRsTJG4Kcs=)
3: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: RCKxgPNXa2LfHVC2yaodAVp1vliDFFqe6Nsg7h4dxAg=)
5: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
6: bhIBklZheMq-9tZpH7RtF8qmQRk.roa (hash: N9DLacCSl3KtCFUJLw6tdIHFf2BMAbo1XMXGyOGBM5Q=)
7: cpp14lYte57TF7_rOo5C_RYckG4.roa (hash: b/cjdeFMFYdAqGy2c2qn5r13JjD0oTuLC+SpSP2D99Y=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: ymWClNNTNIEna9tb8fGbQQqYz78.roa (hash: ymeUWDuxiyE39DPrcubXZYDRp9D4NZYlmaQUgjvzXkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:81:2e:22:1c:eb:ab:04:1b:12:1c:05:8b:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Apr 19 05:00:24 2026 GMT
Not After : Apr 20 05:00:24 2026 GMT
Subject: CN=619a07c6bbc33430bcfad26b70649107c5611042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:7d:ab:5b:f2:83:7d:df:de:4b:44:bd:ab:
bd:47:67:e5:ed:1a:90:da:88:f8:99:4f:2e:c1:eb:
98:42:0a:6b:80:3b:5c:19:ce:54:f3:d4:ac:16:16:
95:da:f3:97:41:c7:5d:a9:86:68:e8:44:93:6e:a0:
7e:82:46:02:79:61:07:89:a2:7a:40:6a:ee:17:ed:
61:5c:b6:ed:f7:3d:47:e6:2a:bd:61:a3:46:4e:4a:
6e:5a:38:82:6a:5c:6d:a4:b7:76:a8:c8:d4:d0:42:
7f:ad:10:74:22:28:03:f6:99:62:ae:99:ad:06:1f:
9e:bd:19:b5:7e:8c:c4:0c:2d:04:54:f0:09:14:dc:
04:e3:21:46:37:d2:64:e8:ab:e2:5b:04:0c:46:4d:
0e:c4:b4:bf:67:9a:a4:31:d9:23:3a:2d:70:88:8e:
4c:08:3d:24:2d:84:05:8b:40:b7:46:23:ab:13:82:
16:ab:40:6d:51:2d:ae:44:e7:ac:bd:3e:20:d3:98:
29:78:0f:01:5c:01:53:00:f6:9f:53:99:cc:8b:69:
ff:8d:71:77:69:37:34:f9:4a:df:f7:ad:1c:7c:d5:
bf:52:7f:87:25:6a:ef:06:3f:bc:5d:b6:62:9e:40:
78:eb:e4:67:28:6d:94:5b:0e:58:f8:5e:46:f9:a5:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:07:C6:BB:C3:34:30:BC:FA:D2:6B:70:64:91:07:C5:61:10:42
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e0:e8:4e:ce:67:f4:71:df:99:90:24:f5:34:de:5c:27:45:
57:fc:93:bc:8d:18:42:ad:1b:8e:82:12:db:7f:37:8a:b3:6b:
4b:80:35:d4:1a:5f:b2:b2:bf:53:3d:55:7b:a9:58:11:cf:08:
77:a0:3b:d7:c8:18:6b:e0:ac:cd:92:0f:e4:ba:0e:36:a9:ab:
ef:f8:24:4a:10:be:bc:fb:62:b7:c3:ee:54:82:d8:d2:61:2e:
04:53:08:9a:af:de:62:6a:95:9a:e0:77:69:fb:ed:00:a2:4b:
77:aa:e0:b6:25:fb:22:5a:14:e2:b5:ef:27:7a:c7:54:50:e1:
6e:57:5d:e2:ac:e4:0f:25:a4:c6:86:32:4f:69:c2:f5:0a:bb:
2d:b6:2f:d3:7f:17:d4:71:68:9e:3c:e9:9f:b9:84:22:ff:9b:
e3:da:76:68:2f:35:78:b3:70:b8:ec:84:c9:2c:e0:e0:14:2d:
8c:7d:bc:89:67:7e:02:b1:b9:6c:ff:fa:ba:87:04:af:34:c4:
26:21:f2:68:7d:30:46:7f:43:cf:ed:da:ff:e3:95:5a:61:a7:
d4:58:34:6f:b4:50:98:88:da:83:2c:2b:1f:81:e5:ed:bb:20:
9e:23:4e:58:72:4d:30:1f:16:6b:83:c8:a1:ef:43:ff:1f:13:
b9:03:23:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHIEuIhzrqwQbEhwFi74UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjYwNDE5MDUwMDI0WhcNMjYwNDIwMDUwMDI0WjAzMTEwLwYDVQQD
Eyg2MTlhMDdjNmJiYzMzNDMwYmNmYWQyNmI3MDY0OTEwN2M1NjExMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArON9q1vyg33f3ktEvau9R2fl7RqQ
2oj4mU8uweuYQgprgDtcGc5U89SsFhaV2vOXQcddqYZo6ESTbqB+gkYCeWEHiaJ6
QGruF+1hXLbt9z1H5iq9YaNGTkpuWjiCalxtpLd2qMjU0EJ/rRB0IigD9plirpmt
Bh+evRm1fozEDC0EVPAJFNwE4yFGN9Jk6KviWwQMRk0OxLS/Z5qkMdkjOi1wiI5M
CD0kLYQFi0C3RiOrE4IWq0BtUS2uROesvT4g05gpeA8BXAFTAPafU5nMi2n/jXF3
aTc0+Urf960cfNW/Un+HJWrvBj+8XbZinkB46+RnKG2UWw5Y+F5G+aUlKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGaB8a7wzQwvPrSa3BkkQfFYRBCMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABODoTs5n
9HHfmZAk9TTeXCdFV/yTvI0YQq0bjoIS2383irNrS4A11BpfsrK/Uz1Ve6lYEc8I
d6A718gYa+CszZIP5LoONqmr7/gkShC+vPtit8PuVILY0mEuBFMImq/eYmqVmuB3
afvtAKJLd6rgtiX7IloU4rXvJ3rHVFDhbldd4qzkDyWkxoYyT2nC9Qq7LbYv038X
1HFonjzpn7mEIv+b49p2aC81eLNwuOyEySzg4BQtjH28iWd+ArG5bP/6uocErzTE
JiHyaH0wRn9Dz+3a/+OVWmGn1Fg0b7RQmIjagywrH4Hl7bsgniNOWHJNMB8Wa4PI
oe9D/x8TuQMjOQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:19 2026 by rpki-client