Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: zP0p3wcypg3KC/2pLwLVXUCEFe0OjZuQgLQM9NESvNQ=
Subject key identifier: FD:6F:98:2E:EE:FA:D9:59:32:52:FF:7F:5A:F7:FF:78:BC:A5:D4:C1
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 01A11B63E6E73C1AA13C2C09824B5A113FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1A9B
Signing time: Thu 08 Oct 2026 12:01:34 +0000
Manifest this update: Thu 08 Oct 2026 12:01:34 +0000
Manifest next update: Fri 09 Oct 2026 12:01:34 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: Ae6icTq5N8Oi5M8vguRFezaHDt4sQJOcARpzK3pWipo=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:e6:e7:3c:1a:a1:3c:2c:09:82:4b:5a:11:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Oct 8 12:01:34 2026 GMT
Not After : Oct 9 12:01:34 2026 GMT
Subject: CN=fd6f982eeefad9593252ff7f5af7ff78bca5d4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:f4:5f:a8:0b:b7:65:c2:3e:c8:39:17:74:
19:0a:f4:06:14:71:6e:08:7a:45:b3:f0:b1:22:98:
8a:b6:b3:9b:46:a3:a9:4b:8c:e6:52:5d:83:46:f5:
83:d5:f0:c9:09:6b:9f:26:27:4e:51:e8:c8:aa:15:
3a:26:ef:bc:ab:9d:bf:b9:95:e5:11:69:d2:1a:a0:
64:62:47:61:6b:94:a1:26:ef:fc:7b:a2:b4:08:25:
dd:82:85:6e:8e:14:1a:56:46:0c:07:24:b2:d0:8b:
0b:5b:4c:b9:62:5e:43:c6:8f:20:34:f0:92:1c:3c:
d9:a7:38:55:3e:d5:2b:89:c6:65:e4:ab:2c:71:ef:
7f:a5:9e:8d:88:50:fa:6c:01:13:bf:44:f5:e5:20:
82:69:f9:7a:99:56:69:b1:00:1f:24:84:34:9f:83:
9d:03:64:9c:bb:20:48:d0:e5:6a:32:b3:72:17:14:
7f:a0:25:24:9a:08:4d:bd:0c:b1:28:ca:b4:1a:50:
72:71:78:18:d1:24:2c:2e:8f:2e:0f:7e:4a:20:d3:
1f:f5:e3:30:b5:f4:1f:81:9c:8e:b8:83:f7:29:f5:
3e:c8:e8:a1:e7:2b:d2:ce:7d:41:4d:90:fd:30:64:
13:9e:a7:7e:be:27:bd:7e:76:32:76:3b:6d:fb:2c:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:98:2E:EE:FA:D9:59:32:52:FF:7F:5A:F7:FF:78:BC:A5:D4:C1
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:18:66:69:d1:85:39:d7:fb:fc:f2:5a:b3:3b:6a:84:47:
ea:d2:17:57:da:a1:86:b9:1f:1b:f7:c3:04:da:1f:5b:ba:13:
98:b6:c2:1d:ee:c8:85:3d:49:14:e1:a2:68:20:35:29:5a:71:
5c:72:50:2c:80:58:fe:f5:d3:cc:d3:7b:b8:8a:87:cb:56:e2:
24:1d:07:18:e3:3b:58:47:dc:d0:f0:d4:c3:0f:7e:33:1d:91:
b8:77:41:b4:3d:40:21:f6:cb:8f:1c:07:84:75:96:ed:ec:19:
94:70:d8:18:9c:08:82:a4:81:d4:7d:b0:46:61:9c:44:26:7b:
bd:9a:51:82:6f:33:87:68:04:1e:97:73:c2:be:52:0b:6e:49:
74:77:d4:5b:87:dc:5b:37:3e:07:3e:15:f2:7f:5b:ce:58:77:
fa:10:7e:ac:87:e6:13:ad:db:82:c0:13:22:03:18:ce:75:a0:
ad:c3:ce:a6:20:e1:a3:96:74:2c:37:b3:3e:7a:76:91:8d:2a:
6a:be:52:c1:d9:51:1f:7b:ef:15:0c:a0:f3:fd:1e:1d:8b:b8:
d2:96:f2:42:f2:9e:d8:31:52:b6:8a:5b:d0:c3:e2:56:a2:ba:
50:8f:d1:5b:27:4b:00:f1:de:da:2a:a8:4e:1a:13:15:04:ee:
86:23:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:25:13 2026 by rpki-client