Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: 1SQ6yxhXshjVaokYsCKUwow9/a9Uk5/xXdabIp/ZQhM=
Subject key identifier: 49:3D:5F:A3:41:4A:4D:2D:C3:93:42:20:F4:6C:E1:68:DD:52:6C:20
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 01A1DEA7AE34AF9374B932B4780DBB8B18F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0ACA
Signing time: Sun 15 Nov 2026 10:01:33 +0000
Manifest this update: Sun 15 Nov 2026 10:01:33 +0000
Manifest next update: Mon 16 Nov 2026 10:01:33 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: 2G9gnpxYiwAIfmFpZH12GIcYngkMe/krOdH93uOcKfs=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:ae:34:af:93:74:b9:32:b4:78:0d:bb:8b:18:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Nov 15 10:01:33 2026 GMT
Not After : Nov 16 10:01:33 2026 GMT
Subject: CN=493d5fa3414a4d2dc3934220f46ce168dd526c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:b4:bf:1a:49:6d:3c:6a:7b:3e:7f:48:82:
02:d2:e7:ce:2c:98:62:bf:d7:cd:89:6b:e6:3b:da:
af:f1:18:3d:6e:94:3d:d1:26:7f:c1:19:74:a7:7a:
19:fa:a0:65:11:3e:7c:60:91:ec:4b:6e:86:c6:28:
9c:85:01:99:7d:1c:4e:52:82:97:7d:49:6b:3b:c5:
ae:f4:61:b8:52:ae:29:fb:b8:aa:ed:8f:22:c9:1a:
4e:41:9d:f0:82:69:8f:81:cf:27:42:bd:e5:4c:6b:
52:9d:82:cb:4a:f5:8f:1d:b3:f2:90:8e:1b:60:86:
7c:60:9b:91:3e:cf:10:6a:ca:ca:03:ad:4c:fe:5f:
25:97:a0:de:c7:bd:03:65:33:c6:63:9e:09:da:70:
2c:e6:51:8d:95:b6:f0:4a:1f:0a:01:c8:75:e7:bf:
13:01:ce:c1:5c:05:c7:ab:7c:e3:ee:a4:74:6d:cb:
4f:4e:aa:36:96:34:ba:70:c3:50:7a:ca:08:e7:e0:
b1:03:61:90:a8:51:9a:0a:70:b1:4d:7d:62:85:95:
77:44:d3:86:0b:43:fb:e2:9b:2d:07:3d:16:6f:ae:
26:68:28:07:b1:df:8d:1e:6d:a4:63:ef:ec:6a:84:
9c:3a:c6:8a:99:4f:74:b1:b6:6c:7e:54:17:ef:ad:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3D:5F:A3:41:4A:4D:2D:C3:93:42:20:F4:6C:E1:68:DD:52:6C:20
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b0:e3:ce:34:1a:01:db:64:35:0d:c6:cf:a6:5f:ec:9e:e2:
b2:b2:b0:6d:e7:fc:60:d5:b2:2d:e2:ac:6b:4c:f9:0f:ff:41:
a3:85:58:39:66:8a:f4:6c:3b:95:f0:40:72:a1:ae:39:81:b3:
27:90:07:51:98:15:b6:1a:f9:1b:1b:d1:64:80:18:24:4f:40:
f4:bc:4b:f0:16:2c:34:5b:8f:f0:dc:ee:36:78:3e:aa:e9:18:
d4:6e:8f:a0:db:a6:47:88:31:4d:02:01:5c:1e:d1:74:9f:bb:
4f:7b:5c:b7:40:5a:bc:76:cb:9a:92:ef:c5:80:1f:ce:d2:9b:
93:28:f7:81:3f:2a:ac:14:2e:ce:70:c2:7d:21:62:22:a6:c9:
86:11:52:84:87:cc:5f:bb:21:7c:84:79:2b:25:3a:4f:82:71:
21:37:f1:5b:06:8e:c4:4f:1c:c2:40:9a:30:d9:35:3b:7c:5e:
be:36:6a:99:7c:75:b8:55:f4:d1:d8:e9:44:82:f6:17:9c:f0:
e5:e9:7e:65:38:25:96:04:fd:20:46:e5:16:e3:f1:29:2f:23:
7e:82:51:2f:bd:bf:91:00:99:30:da:1e:83:15:5e:fb:24:8b:
40:6b:2d:46:06:51:8f:98:25:72:6a:56:f5:60:9f:cd:14:02:
b5:9c:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:55:45 2026 by rpki-client