Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: h0biD21BM7Hcom7Hvs52F4JvrX86dYWCYreIvMOm0Y8=
Subject key identifier: 08:FD:B9:4D:9A:D8:62:3B:59:39:52:EF:EC:9E:42:AC:36:B5:80:CF
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 01A0D56FCC50DF3BCF74F734659FE8D1A528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0BB9
Signing time: Thu 24 Sep 2026 22:01:08 +0000
Manifest this update: Thu 24 Sep 2026 22:01:08 +0000
Manifest next update: Fri 25 Sep 2026 22:01:08 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: 9wLMfhus2f03rzQ7UQOluHtOpOUI5OJS8Sb2YoRHExM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:cc:50:df:3b:cf:74:f7:34:65:9f:e8:d1:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Sep 24 22:01:08 2026 GMT
Not After : Sep 25 22:01:08 2026 GMT
Subject: CN=08fdb94d9ad8623b593952efec9e42ac36b580cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:21:2a:b5:32:c9:81:50:b2:9a:be:d2:cb:
9d:83:22:46:4c:af:06:0b:12:c5:d0:6a:49:d3:07:
df:d2:c5:57:5d:d1:46:2a:91:25:eb:45:f9:80:26:
02:ff:cc:79:e6:64:98:85:4d:05:e6:79:fb:55:d6:
31:12:72:19:8b:cc:e8:88:75:2d:75:81:50:e2:70:
f5:44:aa:1d:01:b7:6a:9c:5e:cc:49:3a:dd:5a:a1:
88:bf:83:0a:e6:83:6f:86:bb:87:97:9f:e2:32:61:
bf:a9:a2:88:75:04:c3:af:b4:fb:d8:dc:52:ee:00:
59:e1:0b:56:58:ea:c8:09:ea:4e:61:44:0c:92:19:
e3:b1:38:d1:c2:a8:ae:f2:07:89:3b:07:37:20:d9:
58:74:9a:3a:bb:fb:1d:02:84:d3:ca:ce:92:00:53:
28:ff:91:79:ac:25:cc:91:45:ce:58:f4:25:1a:13:
c2:a5:5f:92:5d:68:4f:5c:26:8f:4b:8d:e3:e3:61:
f6:38:a9:e0:0b:48:c4:5f:8e:a3:6f:7f:6f:74:8e:
32:ca:7e:ec:4d:e1:e2:ef:0f:60:16:5e:95:ee:57:
a7:38:4e:10:67:05:a7:85:ea:b8:16:3a:f8:ce:ea:
27:39:d2:45:4e:93:91:a1:96:f5:1f:14:00:ec:47:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:B9:4D:9A:D8:62:3B:59:39:52:EF:EC:9E:42:AC:36:B5:80:CF
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:19:ec:85:d3:66:cd:6b:c6:72:c0:c7:ce:81:ac:d1:14:b8:
3d:40:7a:1a:f0:02:d1:28:3b:10:fd:10:fe:5c:b9:ba:6f:50:
65:55:a2:6a:4f:97:69:b2:46:54:a3:09:63:50:27:97:79:a3:
f9:7e:06:8e:8b:04:60:73:e0:0d:4b:6b:22:dd:f1:41:a6:0f:
b8:c5:b7:a8:5f:73:59:18:a3:13:dc:e8:3c:de:6d:78:57:3c:
0c:6a:d3:b9:bf:98:5e:6d:86:d2:2d:7d:94:10:7a:60:81:eb:
3f:f8:15:c2:ec:9e:19:e1:25:bb:eb:e2:87:bb:a3:2c:a6:f8:
37:ff:ee:f6:cf:e5:c6:19:51:82:a1:fd:8c:ed:f5:f9:07:d1:
f6:d7:11:68:77:a5:3b:2a:b9:96:55:16:d2:48:d7:be:67:13:
c7:f1:ea:40:0d:3d:78:84:8b:60:11:1d:b3:f2:98:7f:f4:82:
5a:3d:f3:89:2c:9b:92:c3:94:e3:ea:30:9f:2d:70:1e:1a:2d:
16:b2:15:a6:8c:5c:df:a0:9d:e8:3b:a2:4c:d4:20:04:00:03:
96:ec:84:5c:57:d4:ce:39:5b:50:ac:94:7d:df:1a:0a:d8:86:
b9:18:36:bb:b5:0c:94:f3:a1:f8:65:0c:8b:84:c2:1f:5e:34:
51:9c:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:14:36 2026 by rpki-client