Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: EYzZTupwQbnjPpzCxlVkhEyr1rc3VffGkuR+3nKuS8w=
Subject key identifier: 81:A3:20:B4:DC:EF:2F:79:0E:D3:D8:E6:89:0B:E5:C4:82:C6:85:26
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019F91DB223CA2B32C805C98E0207B73C7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 02E2
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: 8skUMQvDPI9aLIOsq0OepO+cdIIczdDst68xhlJfs5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:22:3c:a2:b3:2c:80:5c:98:e0:20:7b:73:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=81a320b4dcef2f790ed3d8e6890be5c482c68526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:23:41:cc:43:c0:6d:25:6a:96:23:5c:ca:
75:20:37:fa:1c:92:a5:94:7b:36:91:e4:19:f7:3b:
c2:a0:ec:ef:b7:17:53:dc:ff:ff:d2:1a:05:c4:94:
9a:3b:4d:7f:a8:00:7f:72:58:92:b5:15:51:84:de:
f5:a9:4b:df:fd:70:7c:79:99:05:9a:7c:b5:a3:98:
ef:bf:34:07:4b:f6:0f:df:82:fd:7f:2c:a2:11:aa:
ef:e0:9c:ca:ee:93:c7:12:e3:21:47:89:e0:66:ee:
dc:d7:c2:54:4f:3f:28:bf:2a:5d:28:23:80:82:95:
d0:d8:72:48:17:7f:6e:bf:0b:a8:a8:e8:40:0d:a8:
9d:3a:b8:6c:7d:59:4f:54:92:9e:41:f5:64:14:da:
24:57:80:80:35:6d:fa:37:e6:55:9c:4f:de:d8:7f:
41:f7:74:bc:eb:1d:b3:e0:c7:6b:27:76:b3:e3:01:
6e:54:2b:1b:50:7c:df:51:b7:2f:ec:a9:52:40:ee:
c4:32:c8:0e:8f:10:40:f5:d2:58:a3:76:86:81:55:
ad:52:11:d8:55:ff:54:a9:9c:df:06:f2:18:46:98:
b9:97:78:bd:6b:0c:69:ac:23:d8:6f:3b:d7:87:5e:
1f:46:ec:18:d8:b0:2f:74:cf:ca:74:bb:1d:f4:03:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:20:B4:DC:EF:2F:79:0E:D3:D8:E6:89:0B:E5:C4:82:C6:85:26
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9d:4f:15:ec:3c:ea:a2:2c:04:59:63:f3:00:63:a1:a4:09:
eb:88:77:6a:f0:fc:79:2e:c6:fc:8d:32:ca:de:ba:78:d2:34:
dd:e6:bd:07:b0:37:c5:3f:9e:4d:2c:00:3f:9b:95:cf:fe:99:
b2:fd:a9:76:8b:66:ce:bb:2a:db:d2:63:1d:60:b9:0d:cf:cf:
b2:4c:3f:7b:37:03:eb:7b:71:85:4c:62:d2:5b:1e:a6:45:29:
1b:46:7c:4a:f9:20:bc:68:58:3c:46:82:c1:a0:bc:5b:54:ce:
7e:97:1b:80:0c:e2:f3:c7:1e:fc:f4:d2:5f:f7:eb:24:a5:40:
86:54:d5:af:9d:54:a2:66:db:04:fd:f3:c2:5c:b7:c2:6e:84:
34:0b:08:40:22:57:d9:b0:3c:f0:63:d4:42:e2:db:29:9b:e6:
c2:f6:ed:5f:95:cb:41:d3:b1:75:c7:ef:a7:5b:72:15:68:35:
13:29:fa:b9:08:f0:a9:c7:11:8a:cc:ac:ec:77:e2:16:1d:72:
50:b8:1f:5f:c8:9f:c4:17:e4:4c:90:bd:17:aa:33:87:44:67:
46:d5:7d:26:d5:4f:ff:d3:c1:2d:c3:c1:73:6d:61:d7:e5:a2:
67:47:98:95:d6:46:c6:fc:38:8c:73:95:94:c5:0e:b2:cd:8e:
b9:15:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:58 2026 by rpki-client