Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: mS3K+qhOjcnQOkuAmcxagqbLf8xKQ9Sz9eD7loYe57I=
Subject key identifier: B9:81:09:61:FD:EC:58:DB:CC:51:46:B3:13:32:93:F5:E9:97:36:F6
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019E2A7024AF1705E089B0C944D6B2E72F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0FE3
Signing time: Fri 15 May 2026 07:00:52 +0000
Manifest this update: Fri 15 May 2026 07:00:52 +0000
Manifest next update: Sat 16 May 2026 07:00:52 +0000
Files and hashes: 1: AOW7VFoYlHG3-sxANF5TLuzaheQ.roa (hash: hpcDkITFLx/A7At/MkFfv6s25x+NQbgrbFZE7lx1pGc=)
2: KNNuaQBFjVM4qdMaB7UWNnS6AWI.roa (hash: Q/rToyq2iR8m6rWdvFLxXk7Bzl+HpGn1ikTUqvJguUY=)
3: dMfKUJHSuWnseGbTE-GdRIw07W4.roa (hash: y2qy1o8S5/XUqYwrCQSN4S8pMHsU2FgYcmzRMM/ZUGk=)
4: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: DOtjbAzJ8XHb475B8fPRKmAFKx2kLRlj+eDmblMY3iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:24:af:17:05:e0:89:b0:c9:44:d6:b2:e7:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: May 15 07:00:52 2026 GMT
Not After : May 16 07:00:52 2026 GMT
Subject: CN=b9810961fdec58dbcc5146b3133293f5e99736f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:38:c8:6d:0f:bd:12:a0:95:4a:5e:f7:ff:
78:dd:58:9b:ab:66:25:73:3a:02:b3:48:4a:17:12:
a7:28:b7:f7:48:39:41:08:06:e6:6c:17:90:f0:ba:
79:8f:da:6d:e5:64:61:1c:95:cb:ea:c4:46:e9:c9:
38:00:8e:07:59:3a:48:c5:fa:01:da:9d:31:90:15:
ac:18:50:53:a6:84:be:fb:d5:74:ef:5b:4b:fb:34:
3c:65:4d:ad:fb:97:7d:de:a6:fc:e9:45:f9:22:dc:
b1:32:2f:67:2e:65:77:dd:b4:27:56:d3:f0:c0:36:
7e:1f:40:e5:9f:28:07:07:02:37:4e:87:f3:d9:76:
3a:34:ce:b2:2c:c2:21:19:5f:40:08:77:e1:78:55:
76:51:53:61:9b:71:0c:32:df:9e:2f:3f:c5:91:5a:
b5:69:03:08:08:25:27:33:4c:88:71:2e:77:90:ce:
f5:6d:d6:2c:97:d7:54:5e:fc:8b:fc:55:e7:c6:57:
00:14:8f:89:51:50:2e:79:cb:18:c3:50:7e:40:9e:
96:41:b0:1c:22:98:12:83:64:29:8d:5d:bc:a7:e0:
6f:02:ac:f1:c0:25:d2:f1:08:95:22:f9:34:86:ec:
fe:9e:17:70:88:e9:4d:dd:3e:67:06:ee:d4:73:da:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:09:61:FD:EC:58:DB:CC:51:46:B3:13:32:93:F5:E9:97:36:F6
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:4f:92:2a:79:21:a0:72:fa:d9:bc:8a:f1:73:68:f4:b6:
41:41:0e:b7:90:d2:0c:2e:6d:7c:2a:1e:cd:6b:03:31:3e:f5:
47:8e:60:98:6d:3e:87:16:8e:1d:9c:f8:4b:5b:e0:2a:41:60:
fc:8c:e4:84:b6:99:f2:f0:e1:de:ed:f2:73:ef:63:87:e1:02:
16:e7:71:cd:d3:06:83:12:17:77:24:a5:22:c2:12:94:eb:f7:
e3:b1:4c:f1:3f:13:d3:34:55:27:de:f3:82:8d:19:e2:ad:30:
90:da:2a:d6:91:d5:2f:9a:70:02:b7:0f:41:0d:7d:03:55:41:
38:ee:c4:fe:bc:1b:d6:c2:94:4b:80:31:3c:be:4d:d2:c1:cd:
f9:e4:2f:f2:86:f2:e3:51:7e:0f:c7:0a:b1:89:c5:cb:4e:f7:
ae:cf:36:2d:39:1d:94:ea:cb:15:fb:44:81:f9:cb:e1:b2:b9:
ec:23:5a:de:28:c6:09:23:ce:4d:99:18:30:38:15:b2:e9:b8:
50:6b:d8:d8:b1:32:72:97:91:63:f1:3c:c1:25:22:d6:2a:bf:
43:b3:47:0d:dd:97:4f:b2:a1:ec:f8:93:02:ad:7b:08:6f:9f:
99:dd:e6:c6:27:c5:3f:0a:94:34:36:65:fa:f8:b5:c1:60:38:
81:03:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:11:53 2026 by rpki-client