Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: G6oigh0k9O5XzutVE9PYnQfhPRnz6/YPVME4fqO9tfE=
Subject key identifier: DC:44:5E:79:7D:AA:A3:B2:09:94:8F:95:F7:4D:9F:85:26:2C:EE:7C
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019D27E059A462DEEDA4BF9E33AFC4611547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 01A2
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: wuoUqEZrN1HF6jWmy7NkFdpnpcvHRyoWrOGi9x4r1rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:59:a4:62:de:ed:a4:bf:9e:33:af:c4:61:15:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=dc445e797daaa3b209948f95f74d9f85262cee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:63:65:7f:04:ff:dc:f4:fb:12:7a:35:50:
3d:f8:d3:c1:c4:a4:58:16:73:19:76:9a:51:8a:09:
22:3c:dd:8f:5e:65:f3:76:17:42:8f:96:57:bf:59:
85:a8:dc:c2:bc:7a:e8:b6:63:35:b0:ed:e4:f5:fc:
46:cb:ca:83:45:be:6b:23:ff:1c:d6:36:8b:5d:4c:
04:3a:2f:9a:3d:18:02:22:3f:9b:ba:13:66:0f:09:
3a:d7:2b:41:70:5e:b3:5e:77:92:ea:3c:95:e3:d8:
2d:a1:a2:98:cf:87:9b:03:c0:39:fe:24:a3:40:3b:
50:97:b3:1e:6d:99:a4:bd:fe:04:5b:c7:cf:71:6e:
13:5b:7a:da:9e:40:88:43:04:7a:10:18:e1:66:e7:
4d:3f:8b:4a:8b:1a:9e:9c:6a:af:6f:5c:ae:f8:35:
57:32:cb:1b:95:f8:91:9c:96:26:a9:e3:3b:1d:36:
ef:fa:aa:25:f9:e0:1b:36:12:74:75:b2:1b:0d:99:
b3:0c:e8:f4:39:a9:4e:fc:3e:90:06:3a:ed:1c:21:
d0:40:7e:d9:85:19:f4:d0:87:d3:52:d5:15:ce:65:
f1:d7:8f:6d:b2:dc:86:01:02:44:e4:8c:02:07:49:
1c:ee:0b:67:30:00:3b:a8:11:f1:81:03:9a:e2:b2:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:44:5E:79:7D:AA:A3:B2:09:94:8F:95:F7:4D:9F:85:26:2C:EE:7C
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9c:8d:aa:ff:4d:a3:9b:e1:d1:9c:c4:fb:c8:12:a4:28:10:
ce:a9:6f:2b:de:64:fa:6e:23:54:c8:f2:ed:14:4e:cf:51:a5:
45:89:4b:76:ee:b2:9e:95:d6:40:fa:3a:65:62:45:ed:06:08:
6e:73:69:aa:a8:17:fa:47:ef:7a:3b:5c:09:ee:e3:7d:70:cb:
86:c0:25:2f:49:bd:f7:88:79:d9:d6:bf:d4:e0:4c:99:c2:b5:
2d:bc:38:91:93:cd:b7:9a:e0:8f:45:e8:a8:cb:a5:8e:3d:fd:
99:48:07:92:cd:8f:aa:d6:f9:51:b5:2c:41:98:ce:6b:9c:e2:
b7:6d:66:29:87:65:02:b2:06:e1:a5:71:7b:e5:7d:72:08:d7:
20:03:29:da:fa:50:15:5f:f9:9a:c4:fa:24:7a:4d:09:b3:e9:
6f:d5:d2:69:6a:16:ba:c1:7d:18:79:fa:c5:0d:ad:9a:be:25:
72:dc:47:8b:00:9b:ff:87:0f:96:ed:80:80:ea:06:33:fd:92:
ce:ea:5c:10:f8:32:2b:a6:f7:85:4e:69:00:91:91:94:17:f3:
be:fe:f0:7f:35:51:11:09:5e:89:62:81:81:c9:8d:ef:e7:bd:
3b:b0:87:27:6e:71:bc:2f:22:2e:5b:16:3b:1e:df:07:e3:05:
7c:ac:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:01 2026 by rpki-client