Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: UnDCk+dwxO7n6momVk9Qxc0TWw/uqXGPlzUQ5wTBU0Y=
Subject key identifier: 24:DE:B9:CE:2A:CF:43:4D:71:C5:C9:67:B9:A4:6C:3C:86:26:F7:45
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019D371C00CC3C1E0C6FF4BFBE0D668F6F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0F65
Signing time: Sun 29 Mar 2026 01:01:15 +0000
Manifest this update: Sun 29 Mar 2026 01:01:15 +0000
Manifest next update: Mon 30 Mar 2026 01:01:15 +0000
Files and hashes: 1: AOW7VFoYlHG3-sxANF5TLuzaheQ.roa (hash: hpcDkITFLx/A7At/MkFfv6s25x+NQbgrbFZE7lx1pGc=)
2: KNNuaQBFjVM4qdMaB7UWNnS6AWI.roa (hash: Q/rToyq2iR8m6rWdvFLxXk7Bzl+HpGn1ikTUqvJguUY=)
3: dMfKUJHSuWnseGbTE-GdRIw07W4.roa (hash: y2qy1o8S5/XUqYwrCQSN4S8pMHsU2FgYcmzRMM/ZUGk=)
4: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: 1t4RFAsZb59XrtnUz9M70awlzreSDaTjNFFgzwC4+M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:00:cc:3c:1e:0c:6f:f4:bf:be:0d:66:8f:6f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Mar 29 01:01:15 2026 GMT
Not After : Mar 30 01:01:15 2026 GMT
Subject: CN=24deb9ce2acf434d71c5c967b9a46c3c8626f745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:2b:65:30:6a:81:80:71:4d:7d:e7:84:5e:
d4:2b:5b:64:1b:38:12:76:f8:77:f3:e1:b5:dd:66:
4d:f6:d5:30:63:ac:c0:fa:cc:3d:63:24:4b:15:32:
f1:6a:34:e1:c0:0b:fc:9e:c2:bd:68:96:78:ff:5f:
c7:5d:e4:b5:c7:6b:78:87:fc:dc:c0:a4:28:84:8c:
57:13:16:2b:e5:c0:19:82:22:3e:19:22:b9:68:38:
46:8a:3c:8c:a4:f9:b1:56:31:d3:8b:7a:00:b5:6f:
6a:b7:83:05:c4:d2:d0:ff:ba:1a:9c:c6:00:e8:09:
90:b7:af:fc:a9:93:52:b5:17:ee:67:0b:7c:52:7e:
e1:ea:22:14:60:94:86:1e:a2:65:33:08:08:5e:77:
96:66:6e:66:cc:76:67:b2:af:5e:af:31:d6:3a:d8:
b5:64:35:db:0c:de:b8:c7:1d:44:fd:80:f0:c5:6d:
b6:07:4e:b2:25:6a:ca:36:34:40:e5:7a:3b:40:be:
4c:3c:1f:1c:5d:ef:3a:d5:81:86:5b:24:fc:d0:06:
2f:2b:6a:bc:27:19:b3:b6:b3:a0:05:c1:b1:0a:be:
77:8f:65:6b:2a:ab:02:04:4e:48:bd:ca:f2:eb:8d:
f3:03:f6:5e:6a:11:cc:0d:74:b1:b3:f3:12:ad:fb:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DE:B9:CE:2A:CF:43:4D:71:C5:C9:67:B9:A4:6C:3C:86:26:F7:45
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:ee:ab:1c:7a:7d:a8:0a:0e:89:d8:d7:cf:2c:41:22:9d:
cf:42:be:02:bc:d8:df:d1:9a:9d:ca:38:ba:76:f9:9c:af:71:
76:69:2a:99:f9:a4:1a:63:0a:b6:44:ae:d7:a7:94:0f:dd:e2:
fe:6e:e5:81:f3:1d:1a:10:36:01:d7:cd:95:0b:d9:03:60:04:
66:52:4e:12:40:90:26:5c:a2:0a:56:14:48:f3:13:c1:a5:b1:
1f:d9:a9:e4:93:28:0a:0b:d1:d0:00:28:fc:b0:bd:00:04:48:
21:83:bc:e0:27:eb:fc:95:84:cf:c5:c5:07:e5:87:5e:e6:c4:
2d:a3:f2:0c:33:b5:cd:d4:15:aa:dd:ad:f7:56:51:04:65:7a:
42:46:76:f8:6e:bb:80:01:7c:8d:93:3d:d2:7b:5a:8d:23:13:
39:51:9a:2d:ed:92:8e:bb:66:54:03:bf:cf:57:56:6c:4a:39:
f4:60:4f:b3:5a:da:11:38:af:1e:be:d1:3f:96:bd:71:02:c2:
cb:e4:6a:36:5c:a7:90:99:79:4e:65:69:53:80:dd:7a:6c:f2:
ac:2f:3b:e9:ee:67:1b:63:08:d2:93:ee:a7:20:3e:ba:c4:1d:
e3:e9:07:53:31:46:8b:6f:c1:9a:42:9c:13:ca:f8:cf:3a:6f:
32:97:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:55 2026 by rpki-client