Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: Urtq9zQS7B+9EsmFu0gj/xNLot6ARZmqk2Qseq5aD7U=
Subject key identifier: 26:1F:47:84:4E:28:62:10:B9:2E:18:EA:0F:77:81:26:CC:A6:C5:47
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019F92ED8D7B1BE5412752F08A0A7EB3F5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0B12
Signing time: Fri 24 Jul 2026 07:01:09 +0000
Manifest this update: Fri 24 Jul 2026 07:01:09 +0000
Manifest next update: Sat 25 Jul 2026 07:01:09 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: Q54EzYN78JmH5wsP9jO085VNdEPzeJc1cxMIq1Nyxhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:8d:7b:1b:e5:41:27:52:f0:8a:0a:7e:b3:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Jul 24 07:01:09 2026 GMT
Not After : Jul 25 07:01:09 2026 GMT
Subject: CN=261f47844e286210b92e18ea0f778126cca6c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:ba:b1:6c:99:c4:1d:a3:18:21:24:da:a5:
da:b7:25:32:93:a3:93:1d:ae:38:29:5b:bb:99:ef:
a2:46:dc:45:9f:dc:64:d8:ec:de:8d:25:51:d6:17:
5f:a3:c1:8f:40:2b:40:77:2f:d2:69:71:72:f6:75:
bf:57:80:cc:f9:d5:f5:25:93:37:54:4b:cb:0e:1e:
95:c1:8c:4f:ab:b7:93:67:59:e2:2e:d4:4b:8d:1f:
16:91:3d:65:22:09:84:54:f5:d0:cb:71:53:1b:e9:
1f:5a:3c:fa:ae:f8:0d:c8:74:46:77:0c:08:84:18:
e4:0f:18:c1:db:b7:a7:4d:40:f3:da:d9:7a:8f:d3:
d0:9b:50:f2:28:d7:4f:89:13:e5:a7:91:1b:1d:4d:
a2:f2:8c:1d:a3:80:ec:8a:46:e3:83:96:12:7a:e4:
ed:41:93:4b:18:54:74:a8:0a:c4:af:53:59:5b:3e:
44:e1:7f:91:94:62:37:cc:3f:14:26:43:ef:d8:86:
c7:8c:3f:52:b0:76:bf:0c:e2:82:04:4c:48:17:8d:
ee:7e:ae:da:05:b1:d3:8f:24:bd:7f:62:54:82:76:
ec:98:d7:67:fb:22:e5:fc:3a:6c:33:73:14:a4:7a:
e3:a6:08:24:4a:1d:b4:d4:55:6a:3d:03:21:19:f7:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:47:84:4E:28:62:10:B9:2E:18:EA:0F:77:81:26:CC:A6:C5:47
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:82:21:14:28:f0:68:f1:3d:e7:3c:18:d0:d7:0e:ad:fd:a6:
5a:e2:96:ab:78:79:3c:54:f9:53:eb:4c:c5:55:b4:bb:cc:19:
b1:94:7d:ff:b3:12:26:0e:dd:4b:67:ed:4b:35:e3:19:8a:76:
e9:db:d1:fb:32:40:38:3d:5e:bb:f3:dd:7c:5c:8b:90:4f:1c:
9a:ba:52:00:f8:6a:e4:03:d3:83:d4:c3:26:0c:4f:ec:2b:12:
a2:02:6b:98:20:4e:28:6e:ec:cc:92:6c:6e:fb:07:24:77:e7:
27:33:ad:1c:cd:36:34:1f:ec:ef:07:c1:43:2a:1c:e1:88:4b:
05:54:29:cb:23:24:41:73:b4:2f:08:ed:19:f3:3e:91:9e:17:
6d:8a:09:56:b3:71:b9:8a:b5:5c:a3:f7:1a:27:c6:af:5d:51:
df:96:d9:d2:58:9f:6c:17:fa:cb:81:9e:ca:54:6b:1f:38:8f:
20:d5:84:e2:6a:68:94:bd:c8:21:d7:f2:f9:0d:35:f6:64:3f:
bb:55:b0:d2:a6:18:ff:93:00:8b:37:0a:6f:9d:5d:19:d1:b6:
77:8b:37:b1:54:2e:3a:64:e2:25:cf:25:8b:1b:da:53:8c:23:
f1:5e:bb:a0:a4:92:44:f6:a8:17:50:da:a5:bd:70:66:14:21:
b5:b5:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:06 2026 by rpki-client