Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: jaIaOkYUSBi8Lj4F1BXeT1AkUQqvAorMxzlRyiuSSP4=
Subject key identifier: 9B:51:76:66:46:6B:11:E0:95:BD:32:DB:34:CF:90:7F:4D:E5:34:8E
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019E1E357B4FEA892D179BE3A2CF0443180D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0A51
Signing time: Tue 12 May 2026 22:01:21 +0000
Manifest this update: Tue 12 May 2026 22:01:21 +0000
Manifest next update: Wed 13 May 2026 22:01:21 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: TlnXesrvj+vB9LD/iXoJSxvOcIsiuKXlA3yk55wypwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:7b:4f:ea:89:2d:17:9b:e3:a2:cf:04:43:18:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: May 12 22:01:21 2026 GMT
Not After : May 13 22:01:21 2026 GMT
Subject: CN=9b517666466b11e095bd32db34cf907f4de5348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:47:b7:d2:b3:d8:56:3b:51:70:13:2d:d0:
f6:3e:bc:00:d5:d5:71:b8:c7:9e:aa:95:e7:6d:9f:
63:f5:d8:69:af:8e:6c:ed:47:bc:4d:24:ee:e0:6a:
44:12:95:e4:1c:65:79:95:b9:6f:c6:04:32:a2:98:
3e:7e:50:a8:25:19:81:de:23:2b:5d:bb:84:be:67:
d3:9c:18:6d:5b:56:6a:4a:75:25:70:63:0c:31:a8:
f7:19:da:31:d1:67:d7:71:ce:cf:a3:44:cb:3b:8f:
fe:ec:2e:e6:68:66:0b:a7:a1:44:50:66:f1:2d:81:
1d:42:b4:d1:5c:47:92:cd:c6:b6:f0:66:d4:2d:04:
9f:03:1c:de:c6:b8:e3:cd:ff:c3:96:04:19:ee:bc:
da:01:4d:f8:ad:d9:9a:36:10:18:60:d9:5e:0f:9d:
ea:93:2d:ea:e8:89:61:5f:0c:98:46:92:69:7d:ad:
8f:36:40:72:5a:7e:80:1b:a0:d0:21:44:67:a7:6e:
b1:56:d1:1f:06:40:56:00:9e:20:01:72:77:c6:04:
8a:64:49:5a:ff:68:eb:5d:e6:12:be:d1:7a:fa:98:
e1:96:08:35:6e:9c:71:59:67:aa:79:78:92:0a:2a:
1b:47:83:00:45:3e:65:96:a1:47:83:d5:de:16:89:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:76:66:46:6B:11:E0:95:BD:32:DB:34:CF:90:7F:4D:E5:34:8E
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:71:fd:4a:47:57:47:e9:74:f7:57:e9:9e:2a:f1:c2:85:
62:7b:6d:31:83:5b:b5:f5:47:1a:81:af:b8:54:ca:3d:a7:bf:
7d:36:ba:1d:28:94:65:da:4f:61:3c:0b:75:59:35:f1:9a:5d:
ab:35:a8:e6:94:cd:ab:71:46:f5:34:d3:2b:a2:c2:80:0f:b8:
c7:85:90:70:e9:5f:17:88:52:0c:a0:e8:36:a4:dd:1d:ac:ff:
e9:46:2e:22:55:39:e0:c8:82:b8:9a:8c:90:65:a2:8c:2d:06:
88:4d:61:d7:f8:42:8b:2c:f9:d3:d2:18:cd:28:a9:9a:62:ac:
ba:47:9b:c1:bd:aa:a3:b7:60:b8:65:bf:1f:37:a6:79:ad:12:
8d:22:d5:1a:70:b3:9f:07:47:f0:58:2a:42:ed:d0:42:f7:14:
c0:30:7f:3d:17:73:e7:e3:00:07:c4:75:de:a9:e1:35:4d:de:
f7:59:42:83:e5:c7:74:15:da:98:46:74:a9:83:a3:10:f2:b2:
c8:47:ae:b6:6a:97:84:c4:68:a9:3d:dd:ba:7e:d6:48:df:6a:
8a:2b:b7:ca:1f:9a:27:41:ab:1f:d2:59:d9:2e:91:75:45:72:
7b:d1:4a:4b:b5:f3:25:2f:3d:5d:f8:50:ce:92:b7:c4:e5:4d:
d3:e2:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:54 2026 by rpki-client