Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: 8UXTpzxihCQQmXJ61inul5ohj3hjlwWnTf41Ja10FjU=
Subject key identifier: 37:73:24:DC:4E:C2:B1:20:E5:CA:31:3F:45:9C:37:6F:9A:A0:61:43
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 01A0D2377D70B490582074206C3B4763FEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0A3F
Signing time: Thu 24 Sep 2026 07:00:46 +0000
Manifest this update: Thu 24 Sep 2026 07:00:46 +0000
Manifest next update: Fri 25 Sep 2026 07:00:46 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: cF7oO6uYLGCTmJCDUjIx4XCicHHfw/VcG7hno0u40rY=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:7d:70:b4:90:58:20:74:20:6c:3b:47:63:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Sep 24 07:00:46 2026 GMT
Not After : Sep 25 07:00:46 2026 GMT
Subject: CN=377324dc4ec2b120e5ca313f459c376f9aa06143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:fc:31:00:0f:fc:23:e5:3a:a1:f1:6d:c7:
c1:a7:42:19:ba:ea:93:b0:1a:3f:73:7b:d9:94:a6:
1a:b8:4d:1d:e2:cd:fc:c1:a4:c4:d1:0c:5b:d3:ba:
0c:e7:b2:81:16:57:3d:0c:b9:f8:78:1e:40:ef:5e:
9c:ab:dd:d2:56:a9:64:68:83:6f:ac:a5:1f:e7:64:
9f:4d:5c:2a:8e:b0:b3:a2:f4:ad:a2:ca:ed:6d:6b:
77:f1:db:a0:66:64:19:98:9f:0e:f1:0c:95:21:51:
74:ba:82:2d:66:93:f1:d6:16:43:dd:0d:37:65:2e:
aa:b5:13:09:1a:ba:b0:f8:0a:21:41:67:1c:af:1d:
7d:72:05:1d:87:f2:93:c5:f3:58:16:02:0a:ba:39:
56:9e:7c:65:9a:f0:7d:f4:0c:38:14:49:4b:01:77:
3c:1e:bc:df:d5:d3:19:34:32:84:98:7b:14:7c:1f:
7b:23:ef:08:0d:13:5e:64:63:bf:bf:61:f6:74:53:
f8:d0:e4:f3:73:19:2f:f0:0d:b4:e9:1b:a4:3a:62:
1d:81:8a:52:36:85:ec:bf:f8:83:2a:cd:30:34:1f:
0e:f0:b6:5e:7f:a9:c5:34:bb:4e:df:00:de:7d:15:
c0:03:c5:c3:28:8d:8f:8f:c6:6c:9c:3e:dc:d9:11:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:24:DC:4E:C2:B1:20:E5:CA:31:3F:45:9C:37:6F:9A:A0:61:43
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:52:0a:b6:6d:8e:f1:7c:12:41:77:2c:c2:30:03:2f:b2:
26:1e:bd:6f:25:de:89:a8:51:94:66:ff:13:40:4f:8f:77:ab:
7a:77:db:44:c2:f5:ba:2c:c9:2b:12:56:c8:ee:73:8a:ed:0e:
28:26:d9:04:87:1a:07:10:51:38:2a:7f:ea:f3:aa:ae:6e:e0:
ea:4c:5b:ea:8f:d5:75:97:a8:9c:b5:bc:01:81:cc:5d:98:c4:
fd:82:c2:40:06:3a:8b:94:08:5f:9a:97:04:29:24:1c:63:ae:
8a:09:01:e9:68:33:18:0d:9d:2b:a2:45:b3:72:63:37:6b:b9:
15:40:5b:05:3c:d1:90:fb:71:93:a3:3b:99:d7:4f:98:71:cf:
a6:92:7a:31:f6:9d:a2:15:98:b8:a8:06:8f:33:82:f8:ee:66:
e8:07:21:32:31:db:94:39:bf:03:12:07:73:f5:46:9a:97:80:
80:97:dc:66:37:d7:66:18:8a:4d:1e:4e:ee:64:a3:1d:91:79:
d7:2d:e1:c8:05:9c:59:1a:4b:ad:cc:81:b2:4d:0a:e8:e4:7b:
15:45:26:70:c4:5c:8c:76:a3:a9:55:b2:84:63:78:69:53:cf:
08:f4:66:ba:26:e0:7d:0b:37:4e:3f:ab:18:cc:7c:39:ed:98:
e1:bb:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:25 2026 by rpki-client