Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: tYM4HNIVNwbfDM5IEmGZY9vBBEkP8T+cgzxDS5Mfk4A=
Subject key identifier: C3:C0:85:7D:06:76:34:86:21:3B:99:8F:20:3D:C0:57:54:5A:06:71
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 01A1DFF0D033DA7895BD8D0BF98F7F20A26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0C43
Signing time: Sun 15 Nov 2026 16:01:03 +0000
Manifest this update: Sun 15 Nov 2026 16:01:03 +0000
Manifest next update: Mon 16 Nov 2026 16:01:03 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: D0N07UofSrQIPdTmNrH9I/OA+bglms/xqLdumr8RAQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:d0:33:da:78:95:bd:8d:0b:f9:8f:7f:20:a2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Nov 15 16:01:03 2026 GMT
Not After : Nov 16 16:01:03 2026 GMT
Subject: CN=c3c0857d06763486213b998f203dc057545a0671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:11:ef:63:45:09:da:83:e6:a7:08:01:3e:
b4:5a:c3:ef:52:e3:d4:f0:3e:64:c3:5d:ee:88:ea:
e0:03:ee:a6:26:72:33:ac:4e:58:c4:ec:89:50:86:
10:ea:d1:d4:6d:13:01:88:eb:cb:0d:4f:f3:97:b5:
75:6e:19:94:55:e8:bd:db:ee:c3:96:44:da:c5:64:
a7:87:3d:94:ff:1f:1a:cb:05:41:52:09:df:fd:9b:
76:3f:20:a2:dc:19:8f:6a:d7:74:b5:55:60:1e:40:
8e:5e:6f:2d:1a:6d:70:31:31:70:18:17:bc:32:97:
36:47:2f:02:a4:18:ce:76:2c:ae:c9:31:99:4a:57:
0e:f2:a9:4c:15:39:1d:d1:3e:06:5e:e4:c1:ba:e5:
bf:0b:4e:25:a8:f2:61:59:1b:83:11:6e:96:be:c7:
9c:a9:97:db:56:38:0e:1d:25:fc:66:e9:33:45:4b:
7a:e8:a0:f6:2b:56:93:65:89:d3:ea:09:82:c0:49:
60:ac:6c:96:43:20:bf:0f:e4:e9:b9:64:6f:e0:ae:
05:56:dc:dd:b9:16:c3:19:21:55:19:e8:5b:4a:d8:
81:2e:e3:5e:2d:c9:b6:48:6a:6d:97:85:20:28:7a:
70:fe:98:99:00:83:ec:f4:96:3e:3e:1f:ee:54:e0:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:85:7D:06:76:34:86:21:3B:99:8F:20:3D:C0:57:54:5A:06:71
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:39:d0:2a:22:a1:aa:84:93:17:93:29:df:10:2a:69:c6:87:
e6:d2:31:c3:ca:1c:f4:ca:de:83:44:e8:c2:1e:a5:b9:1e:f7:
5f:5b:5d:e6:a1:4c:75:12:96:8b:dd:e0:5c:9b:3f:4c:53:dc:
f7:26:8d:72:27:03:cb:d8:b0:01:2b:1e:6e:b4:8a:b7:fa:94:
15:48:22:ad:1d:aa:09:84:1a:b0:da:29:21:d2:88:f0:b0:76:
f2:dc:53:f2:d0:72:9d:2f:31:ee:dc:dc:8a:ef:93:a1:47:a6:
05:3b:d9:ee:3d:8b:da:f7:2b:04:bb:b8:02:39:4b:79:bb:05:
82:91:65:f3:a8:74:f7:53:7c:fe:9b:7e:a4:79:aa:79:8e:95:
d1:22:fd:0e:f7:a1:8f:c3:22:ee:03:46:9d:43:7c:c0:bc:90:
6c:a8:c6:27:b5:07:e1:bf:5f:c1:4f:87:c2:b3:c9:d0:af:9b:
6a:0e:13:94:e5:62:6e:22:8f:af:c0:e8:ba:a2:36:62:f5:7c:
ab:fb:dc:bc:91:de:c3:6c:a7:3f:3d:e2:02:01:8a:1c:13:d5:
a1:e7:15:8b:b7:0e:97:bc:ec:0f:f9:e5:18:be:fa:04:5f:8b:
ba:57:1b:91:e2:06:c9:80:67:f0:8e:f8:85:18:9b:f7:23:cf:
a7:9b:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:19:31 2026 by rpki-client