Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier: /qeNI8OksDeqAQQBdUsBZirpg0plw6ey1XGF1aS/KAE=
Subject key identifier: 9D:43:BE:17:47:3E:92:A1:20:39:15:21:F2:61:B0:25:2F:94:DD:52
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A1AABA5F74E7B1CA625AAA1D5249EA9C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number: 0F98
Signing time: Thu 05 Nov 2026 08:01:42 +0000
Manifest this update: Thu 05 Nov 2026 08:01:42 +0000
Manifest next update: Fri 06 Nov 2026 08:01:42 +0000
Files and hashes: 1: 1SSyQfD3O61r-0_FItqO3lw_MmA.roa (hash: RJ3ZJVTKNWpK9z9PjQZWQb60GRcUi85TrZFBl50s/Uk=)
2: 6q9b7__sRMAQ5H8wPNM1-5Wj1MY.roa (hash: uJr3m+RiKwnu4afLEWC3I0AkuNJJG/6oHjgue62qkmQ=)
3: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (hash: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=)
4: NhKIuR4OHdWiG8iLKoNcTUDlNf4.roa (hash: Ud86cYDDc2XR7qnnT5IZpUuQFid4fW0m2q3yiK3R9Lw=)
5: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: BEf9MTwCdVqHyPOf3JWnOJSz2U16fBz9L4CW4xgH2+8=)
6: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (hash: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=)
7: WaZa3O1op2Py8EHD9_ozXMS93qM.roa (hash: 8FtaOWgJoh3KpqD4c4HC6dKZYcGZBruTB4MZGeeqiVQ=)
8: tPs5y50TL-Gaj8ccNAGqlv7gruY.roa (hash: yIDSmikGAGxtPGWmqnkdb5gGbPGe9+DVmGSD7UkZfDg=)
9: x-gsFUsDHGitGQKCRuc3VM0kNoM.roa (hash: zEe9p5KemNkACCMNdCrYtOf0QH3Rb5Ycu0XNQjS02kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:5f:74:e7:b1:ca:62:5a:aa:1d:52:49:ea:9c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Nov 5 08:01:42 2026 GMT
Not After : Nov 6 08:01:42 2026 GMT
Subject: CN=9d43be17473e92a120391521f261b0252f94dd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:02:c9:6b:46:36:73:5a:95:2c:a3:a8:c2:
8e:56:2c:ab:41:80:e8:9b:e6:b6:28:c4:30:8c:00:
6d:ed:89:a1:ae:2d:d6:19:a6:ff:50:a3:14:3d:1d:
c7:bf:b6:ce:30:8b:2e:a1:82:71:8e:d7:98:8b:62:
1f:e5:cb:9c:64:72:ec:ce:c6:30:e7:0b:29:d8:ea:
4e:bd:89:4c:e9:8a:d3:c5:6b:4e:52:00:76:f7:61:
66:1c:33:4c:15:0c:98:c5:0f:de:cb:57:9c:c3:9d:
12:12:9e:5a:d3:af:86:1f:ca:aa:5b:e0:6f:7a:7a:
23:28:34:9c:c9:2d:31:e9:b5:b7:c1:67:b3:00:6a:
b1:3a:af:cb:82:74:3e:d2:d1:11:f3:9d:47:ea:42:
6a:cb:03:1b:37:03:88:26:3a:77:10:2a:bc:41:f2:
ea:5d:fa:ab:54:15:c1:d4:ac:8b:95:31:62:84:fd:
21:ad:5d:e5:25:79:58:22:dd:46:a2:62:21:ad:60:
53:52:3a:d8:9c:c8:95:26:37:bd:a7:d3:74:e0:a6:
8c:c7:8b:61:9c:6d:b5:e5:fc:e8:dd:1f:aa:bf:2f:
ba:15:95:f7:a5:9a:25:fd:59:33:b4:7a:bc:2d:f1:
60:51:60:5b:10:54:0a:7a:d1:42:22:7d:d0:b0:76:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:BE:17:47:3E:92:A1:20:39:15:21:F2:61:B0:25:2F:94:DD:52
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:5d:89:51:be:ae:ec:84:fc:23:2c:2e:21:47:9a:4a:8f:
9a:5c:df:4b:66:98:af:28:31:01:03:13:71:80:bf:11:3a:a1:
f5:42:0f:ab:06:42:4c:ea:dd:ff:77:d1:52:01:d4:2a:e8:3c:
ee:13:6f:ef:b3:88:bd:03:5f:43:2e:81:a1:31:79:4e:11:89:
ab:d0:17:1b:ec:ad:f0:b0:75:79:6d:1b:89:3c:9a:3d:fc:0d:
f7:89:63:24:c7:14:c6:97:3d:6a:07:2f:5c:2f:1b:36:0f:65:
f8:66:3e:9c:89:ed:d9:20:d1:a3:73:62:36:fd:c4:10:84:a9:
b2:2a:6a:cb:79:53:29:e6:69:75:2b:31:9d:4c:3b:99:d4:4d:
d5:db:2b:18:a6:b4:ce:8f:2d:30:ff:86:ab:5c:f0:a3:95:89:
1c:8b:27:7d:8b:74:35:c5:b2:68:88:76:da:40:34:45:b6:bd:
ea:31:b4:aa:fc:ff:8a:f8:aa:5e:31:2a:8c:b2:35:cb:77:66:
9b:1f:d6:4a:85:d3:3c:17:51:b8:b4:e7:d2:db:d8:27:fa:5f:
da:86:4e:cf:11:6c:90:7e:90:7a:f0:2c:49:c7:5b:86:61:d8:
80:e8:80:30:ac:a5:5f:e3:bd:3f:e9:b0:e1:67:81:29:a9:35:
46:ec:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:48:45 2026 by rpki-client