Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: TjKG2WpUxSuXVzv+l0VzzxVsri9f7/UywvB2kM4Du+o=
Subject key identifier: FD:F9:46:29:FD:DA:C5:93:58:89:59:0E:D7:BC:4D:16:50:FF:EC:FD
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 01A0D07F7E699AF28C70A2D716357BDFB316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0387
Signing time: Wed 23 Sep 2026 23:00:11 +0000
Manifest this update: Wed 23 Sep 2026 23:00:11 +0000
Manifest next update: Thu 24 Sep 2026 23:00:11 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: /KyVOg/rtQpfPLInNHxU6I+radDjt7EjT21FHxNokNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7e:69:9a:f2:8c:70:a2:d7:16:35:7b:df:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Sep 23 23:00:11 2026 GMT
Not After : Sep 24 23:00:11 2026 GMT
Subject: CN=fdf94629fddac5935889590ed7bc4d1650ffecfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:2b:e1:0d:f6:8c:aa:94:80:b6:64:79:e2:
a9:29:77:51:ba:90:64:71:68:ad:c8:31:27:23:81:
84:c3:b5:17:73:27:b2:35:c7:73:cd:67:b4:3c:1d:
64:34:84:25:87:bb:18:4b:0b:19:9c:f4:6d:e5:ec:
8c:90:ad:fd:95:c5:de:88:52:85:ca:a8:1c:87:a2:
e8:db:52:81:5a:03:70:45:27:15:14:ce:48:a0:0c:
f9:60:db:31:8c:a1:63:3b:31:d2:20:d5:5c:9f:75:
65:5d:5a:41:ad:76:28:c6:08:67:4f:36:6c:b6:74:
da:39:e0:77:0b:a4:05:ad:33:d8:47:63:8a:a3:ef:
57:ae:55:a9:70:07:1a:55:04:1b:1c:bc:2d:cf:8b:
bc:e8:cd:c3:d6:9b:fa:25:f2:1d:51:b9:70:ef:c8:
7b:1d:4e:72:68:da:df:d1:c3:7f:0e:be:6e:77:1c:
0d:cf:fc:a7:d9:33:9b:c5:28:eb:55:77:a0:46:1b:
4e:d3:25:1c:13:49:fa:44:53:cc:b4:27:b8:12:48:
8e:04:93:f3:ef:b6:d5:67:5a:37:1c:93:63:c4:a7:
ee:04:b4:0f:20:0e:1c:a0:8b:99:eb:f9:cc:4e:28:
11:29:0b:57:85:3e:a0:01:7f:36:92:f3:4f:d0:b8:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F9:46:29:FD:DA:C5:93:58:89:59:0E:D7:BC:4D:16:50:FF:EC:FD
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9f:3a:b3:3f:9e:29:8e:97:8b:5f:14:0c:65:d1:df:4d:ab:
f0:57:e2:18:bf:5b:51:90:6b:ff:0a:ae:0c:57:0a:e9:83:6e:
fe:e1:6d:8f:72:2d:47:d5:39:c2:17:d0:f5:be:02:6f:51:32:
2e:06:4b:a7:27:62:35:75:e1:cd:38:34:d5:87:b1:b9:25:13:
bd:23:dc:6b:ed:f8:15:52:4f:35:0b:4d:0f:ec:a1:ed:4a:ba:
c6:0f:c6:c1:9a:d1:af:30:5b:e1:51:48:d9:33:1b:78:0d:63:
fe:97:a9:0d:86:9a:38:ad:1c:b8:80:f7:0f:5a:61:30:25:34:
5a:97:a2:42:8f:95:45:9a:0b:5c:99:d1:e8:f1:1b:a2:ac:a5:
d5:a1:df:e4:55:00:78:a7:b7:3b:4d:9b:81:2b:22:ed:aa:b0:
4a:9b:7d:1c:f2:1d:0c:59:95:26:2a:fb:48:02:46:d7:0e:85:
92:25:1d:f4:c9:97:5b:98:33:d9:31:be:24:ef:06:05:31:16:
ed:2e:3b:bf:02:eb:bf:d1:b0:7e:0a:41:65:1c:41:02:eb:2e:
ac:f2:5a:55:56:42:61:66:be:9b:54:d6:d5:75:0c:4d:de:a1:
e0:16:4d:44:c2:a1:90:ad:8d:b1:9b:75:b5:6b:28:c4:fb:ea:
ac:f3:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:27:34 2026 by rpki-client