Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: 3dAZewG/TroxKEKOwLIhyXkGcycSliZau9LA8q8prOs=
Subject key identifier: 67:F0:9E:34:50:2A:4E:31:46:03:09:C4:E1:00:17:E9:04:D9:DD:C3
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019CAA21DB4368F181D0971E563DBFDDC93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0CF4
Signing time: Sun 01 Mar 2026 16:01:11 +0000
Manifest this update: Sun 01 Mar 2026 16:01:11 +0000
Manifest next update: Mon 02 Mar 2026 16:01:11 +0000
Files and hashes: 1: 12E7VeXq_D-3p_glQq89nV-GlW8.roa (hash: fxJgtaFjRfPtrdzF/jo+1E8mtTiWZsqqrpEIh1IHM+8=)
2: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
3: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 1RsNL6EQs5q/wCzoG36j5bOCsoRMeR2BM6OmqV8AFgM=)
5: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
6: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:db:43:68:f1:81:d0:97:1e:56:3d:bf:dd:c9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 1 16:01:11 2026 GMT
Not After : Mar 2 16:01:11 2026 GMT
Subject: CN=67f09e34502a4e31460309c4e10017e904d9ddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:9b:9d:e4:57:c3:7e:8b:8c:08:12:4c:2d:
53:a2:48:ee:f5:b8:85:c1:7c:30:6e:13:e5:80:d5:
53:f5:89:73:3f:31:f2:89:21:54:e7:df:a9:b9:ed:
a9:d3:5f:7c:2b:2a:16:16:63:a7:c4:d0:2c:47:5f:
c9:08:74:89:23:2b:d1:87:c8:27:19:c2:a8:40:2c:
6a:99:a9:2e:6c:5b:e5:6f:87:00:1e:60:95:59:6f:
c6:27:fd:cc:a0:cb:e6:55:85:cb:d3:b4:78:b8:1a:
0c:e1:8f:c7:34:5a:71:57:4c:b4:ec:91:8f:72:e3:
c7:f5:88:7e:53:b8:0e:0c:2c:3b:9c:e3:42:35:6f:
d2:2e:21:7e:d5:e7:0d:c4:d4:dc:69:31:77:27:28:
25:d3:cc:c2:c4:b1:51:6b:3c:45:de:c9:3b:f4:15:
16:09:fa:42:a9:94:96:fa:d5:8c:63:a3:cb:1e:de:
98:2d:14:e7:1e:fe:7a:64:89:9d:bf:d8:4e:74:fb:
2b:78:cb:6f:7e:31:02:4f:44:d0:53:90:4e:6c:c5:
cc:fd:86:2f:f8:c5:74:bb:7c:e2:8f:da:64:61:ea:
a4:8a:c9:43:20:a3:22:18:45:68:f1:57:dc:14:99:
7a:be:85:48:01:4f:2e:2b:88:a0:51:b2:f2:d1:9a:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F0:9E:34:50:2A:4E:31:46:03:09:C4:E1:00:17:E9:04:D9:DD:C3
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c6:d5:2c:0c:90:3e:ec:d1:ba:79:a1:31:27:04:97:10:b4:
7a:f9:ac:c1:0f:cd:a0:86:6e:51:29:ac:0f:7a:54:d4:01:ee:
ec:02:d0:65:e9:a8:5d:0d:14:90:d8:f6:0b:9b:8f:d4:bc:4b:
57:38:e0:f1:7b:61:ce:65:eb:d6:bb:26:d6:6a:d3:91:1c:9c:
e2:aa:32:26:3f:83:50:71:df:74:20:b1:9c:78:06:55:f7:3b:
85:ed:db:ac:bc:e7:a7:40:a4:1e:1d:1f:f5:18:f3:4f:8e:d7:
6f:93:e9:1f:da:87:ec:e2:c3:0d:7f:74:cd:9b:6b:d0:08:03:
78:07:06:e4:82:1c:11:b7:53:75:57:43:61:69:4e:fc:47:8e:
9d:ba:b8:f8:26:36:f8:e5:78:a9:a7:fc:bc:59:18:fa:9a:df:
97:96:a3:b1:08:83:70:33:22:40:70:7e:84:05:ae:79:0a:a9:
33:9d:53:51:c9:a2:cf:f0:30:5c:15:28:10:18:2f:09:96:3d:
97:43:b1:bb:77:60:65:e1:bd:e8:ed:58:8c:9e:a8:fe:af:31:
91:e1:7b:36:ee:4d:e9:8a:86:56:a8:0d:d8:00:12:af:dd:6f:
f7:89:2e:ef:1d:92:4b:d3:95:03:12:dd:4b:0c:b6:b5:e0:f3:
3d:96:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:24 2026 by rpki-client