Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: CVqah1KmkFZjcGPsvWQjXHvuzsKJS6yhKp/i9Mlc5Ok=
Subject key identifier: E6:C0:40:87:09:20:EC:F0:62:A5:D4:27:2E:8F:EA:82:DD:D0:C1:99
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 01A0D2378FB4BA54AF534A121F2202F97F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 12F1
Signing time: Thu 24 Sep 2026 07:00:51 +0000
Manifest this update: Thu 24 Sep 2026 07:00:51 +0000
Manifest next update: Fri 25 Sep 2026 07:00:51 +0000
Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=)
2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: 4FcMpsyWGjEjp1SQVi3B1ibr6H+kbsi3fwRsAyybw2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:8f:b4:ba:54:af:53:4a:12:1f:22:02:f9:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Sep 24 07:00:51 2026 GMT
Not After : Sep 25 07:00:51 2026 GMT
Subject: CN=e6c040870920ecf062a5d4272e8fea82ddd0c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:66:20:a4:6e:36:64:07:20:3c:c0:29:27:
49:36:6a:df:0b:c5:e7:b1:94:33:67:32:58:16:6f:
5e:42:c4:bd:9f:d5:10:ae:84:a1:b5:01:f9:5b:ed:
69:e6:54:6f:fe:b8:8a:c6:18:05:c2:34:34:1b:c1:
56:07:30:60:a4:d9:7d:24:20:10:d3:d9:a6:2b:76:
67:cd:8b:63:bb:9e:da:d2:1d:09:00:89:12:48:17:
ae:bb:0a:58:dd:0d:23:88:c7:5d:e1:5b:36:8b:0a:
d8:e3:5d:05:f9:09:3f:5a:1f:41:19:78:21:2d:7a:
75:06:49:17:0e:4c:85:e9:46:a5:c1:08:fb:c9:0b:
f3:a3:c7:0b:07:e7:ff:89:6f:a7:3a:3a:19:5f:3f:
e6:ae:15:b5:c3:d6:df:fb:49:e4:26:a4:5a:66:10:
2a:72:79:a8:cf:5f:1f:91:39:ff:38:a4:58:8d:f7:
0c:29:bd:98:04:62:d2:58:07:9f:d1:f9:38:5a:12:
39:e5:3e:05:57:5a:7d:f9:c7:47:71:99:75:6f:0c:
22:0b:0f:6c:69:65:fd:3e:b2:cd:41:d5:5e:e8:02:
d9:62:66:0e:3a:47:f2:6b:67:13:2a:38:34:18:02:
68:bd:c1:31:1f:57:f6:7f:3e:c2:07:35:08:cf:ed:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C0:40:87:09:20:EC:F0:62:A5:D4:27:2E:8F:EA:82:DD:D0:C1:99
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:0d:3e:bd:e1:2b:26:72:e4:43:a1:76:76:f5:f8:fc:c5:
f4:ad:d4:7b:f2:8d:1a:3d:75:4b:a6:de:60:65:48:fc:16:cb:
5e:6c:25:4a:9d:a4:70:c1:90:86:70:36:e2:34:20:7d:9d:32:
53:29:9d:3f:6c:92:1f:2e:a4:83:b0:ec:90:63:e8:55:a7:1e:
cd:ef:c1:51:57:72:94:06:95:74:1e:71:2d:f9:17:35:eb:67:
a8:50:c3:8b:b7:62:3c:65:7f:63:0c:7c:1c:cb:d4:d9:a9:ac:
ba:6b:ba:f3:8d:03:69:41:27:43:0b:2a:e1:3f:cc:17:67:17:
48:11:86:ae:4d:78:ee:e8:30:2b:8b:73:60:c9:a1:5b:7f:79:
46:9d:25:84:46:98:04:df:fe:a5:bb:cf:8e:d1:7b:b2:0b:c8:
91:7e:21:73:61:11:a6:6d:0b:98:1f:f5:0f:01:d8:f0:fc:ec:
91:b6:5d:df:f5:7e:11:4f:ae:e5:23:c1:a5:32:f8:2c:2e:d4:
4d:43:f0:a7:00:60:e2:14:cb:da:0c:9c:0d:44:74:e7:21:48:
db:84:c7:99:53:52:fd:f6:84:96:51:b3:10:84:7d:8a:97:e3:
c9:49:37:71:03:51:da:a6:63:35:ff:6b:13:1a:72:7a:8c:dd:
8b:71:ad:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:25 2026 by rpki-client