Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: gGFHHWwDXpewCQp/RJIIf6C9IHTto4XTW2U9yqWKwUo=
Subject key identifier: 06:C7:3D:59:D0:DD:04:CC:AF:B7:8F:D3:98:88:53:74:22:DF:14:99
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019E1F10C4CFCFD7F3787B099D4464964950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0222
Signing time: Wed 13 May 2026 02:00:53 +0000
Manifest this update: Wed 13 May 2026 02:00:53 +0000
Manifest next update: Thu 14 May 2026 02:00:53 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: 8IhKzuTV6aGEJrrd6JYybfM1Kll+3+ZOwQtlSg2uwfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:c4:cf:cf:d7:f3:78:7b:09:9d:44:64:96:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: May 13 02:00:53 2026 GMT
Not After : May 14 02:00:53 2026 GMT
Subject: CN=06c73d59d0dd04ccafb78fd39888537422df1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:2c:2e:ea:3f:33:88:b3:84:53:ac:0b:5f:
4f:c5:a9:9f:86:f5:6b:16:78:d9:e8:59:32:d9:20:
11:9c:73:24:ad:ce:37:2d:65:41:94:20:67:c8:a8:
ab:93:6d:d0:06:27:9a:9c:07:36:8e:65:f2:49:62:
c8:67:2f:33:84:4c:e9:5a:fc:d7:9c:8f:48:6b:69:
00:18:88:0b:06:b1:12:df:c6:85:cf:d3:29:59:76:
c6:7f:3a:96:96:bd:ac:98:e6:7b:fc:23:c8:a5:7a:
1d:e3:7f:71:38:3e:c2:cd:18:9b:29:19:f0:0d:28:
ae:b0:3f:51:d7:43:bf:03:49:2e:16:06:f1:22:48:
2b:0e:7d:1e:59:c2:b3:29:ba:b3:2e:a5:ea:b6:95:
8a:3f:9f:66:4d:93:61:0f:43:f9:5c:9b:c9:6f:df:
2d:2c:31:02:db:a4:1a:d8:46:be:72:c8:31:8b:df:
4c:a4:dc:77:08:42:73:82:93:d7:d1:ae:42:2e:d3:
34:dc:fa:db:37:96:1f:30:c9:17:74:49:32:2a:03:
72:de:87:e2:75:19:f0:79:f7:e3:2a:5f:96:5d:c6:
89:ba:4d:40:8e:64:f2:d6:90:b4:eb:66:6b:3d:95:
34:24:89:b9:78:a9:11:9a:67:c5:c5:9a:d2:2d:67:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:3D:59:D0:DD:04:CC:AF:B7:8F:D3:98:88:53:74:22:DF:14:99
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:25:c9:4f:4e:a8:53:7d:4b:f8:7c:54:82:6d:4b:ee:47:ff:
20:cd:2c:42:8a:f3:98:f9:d1:e3:fa:ec:18:0a:97:9a:ac:1b:
f6:b1:82:a1:63:c2:b8:8b:7b:a9:2e:9a:83:ce:72:99:f6:45:
89:0a:dc:b5:26:d7:b5:f9:64:c1:7c:02:b0:60:ea:e1:d5:d8:
eb:09:ae:af:60:8a:7f:d1:a1:68:7a:23:92:44:5b:b1:10:e8:
af:2a:1a:20:eb:e9:c1:36:3d:76:57:5e:1b:3b:af:87:df:97:
85:88:19:8e:84:9d:a7:0e:17:09:20:96:83:8b:f6:15:88:e5:
70:bd:a4:95:4a:f1:4e:23:d0:44:16:eb:13:e2:be:e8:68:15:
f2:fa:20:b3:85:e7:22:c9:af:a5:c5:22:1a:d6:94:4d:96:ef:
5c:c3:51:57:ac:88:7c:f8:31:19:0e:d2:85:47:be:7c:f0:57:
4e:5f:2c:04:0e:2f:ef:77:1b:0e:b3:12:6c:bb:da:4e:0b:a0:
c6:f4:b2:5d:57:36:39:b6:f1:dd:49:5a:fe:16:fc:0b:1b:b9:
70:03:da:3b:b0:98:ea:44:fe:5f:b1:04:8c:28:f3:b4:b9:9c:
99:cc:f8:b5:75:84:9a:e3:73:a5:4e:24:12:dd:39:8a:f8:4f:
eb:6e:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:54 2026 by rpki-client