Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: i8iHfG5/uGLeChNDOD8g64w8HLV/EXKztxmGZ5Mn7n8=
Subject key identifier: BF:6F:F1:61:29:95:69:28:D2:BF:70:0B:F2:36:58:BF:0F:CB:B9:CB
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019EB98F5228D8F419DDB0B9535031FD1C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0272
Signing time: Fri 12 Jun 2026 02:00:37 +0000
Manifest this update: Fri 12 Jun 2026 02:00:37 +0000
Manifest next update: Sat 13 Jun 2026 02:00:37 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: IUOuK+JrY7bU3l79PUItzWlQycp6X66MQvRdocbMcp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:52:28:d8:f4:19:dd:b0:b9:53:50:31:fd:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Jun 12 02:00:37 2026 GMT
Not After : Jun 13 02:00:37 2026 GMT
Subject: CN=bf6ff16129956928d2bf700bf23658bf0fcbb9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:82:7d:69:2b:62:85:f5:fe:7a:96:ce:a7:
79:66:ec:83:0d:3e:f8:3d:ff:b5:ea:1d:85:e4:59:
4f:76:7b:d1:34:10:9f:ac:be:65:1e:74:fb:47:ad:
37:8e:a6:15:28:bb:b1:ff:60:2d:80:6a:da:cd:99:
67:85:ea:7d:28:0b:20:ed:e6:d6:27:40:fb:cb:3c:
b6:5b:e7:f4:ea:a1:b2:7e:ab:70:e2:ac:b4:9b:e6:
37:5b:c9:ab:80:a7:bb:cf:ec:25:c1:8a:12:84:cc:
06:34:0d:4d:ee:f0:1a:7f:b3:83:23:fd:fa:87:da:
79:05:31:6e:62:93:b8:d8:88:56:ce:89:61:4f:69:
db:0d:5a:84:29:e2:70:ce:cd:18:d6:13:9c:db:5b:
4b:fe:fc:a2:63:0c:9b:98:88:91:7a:9b:4d:77:85:
c8:28:96:9b:33:8a:94:da:cb:64:d2:be:69:36:5e:
40:5c:07:9f:73:4d:83:2c:7a:b5:c5:ea:6b:77:47:
31:0a:17:d4:5d:85:98:93:75:72:d1:15:cd:36:53:
35:62:59:b1:cf:75:bb:eb:3f:a2:f6:35:2a:88:99:
fc:df:25:69:b2:b0:21:d3:a2:1c:11:01:31:79:b5:
3e:97:6a:29:9a:6d:a1:b7:f8:bf:79:5c:f7:64:0e:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:F1:61:29:95:69:28:D2:BF:70:0B:F2:36:58:BF:0F:CB:B9:CB
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:41:97:9a:b4:24:61:ec:69:73:a7:d1:1c:3a:54:5c:46:ce:
14:e2:f4:dc:4f:74:86:ee:b1:99:75:8c:9d:c2:f2:b3:57:19:
0b:89:ce:b2:67:8d:03:aa:6d:fc:db:97:f9:e3:59:d0:e4:4c:
10:6a:4e:af:cb:74:9d:6f:7c:16:52:95:37:b4:a3:58:5c:95:
e9:ca:51:e2:5b:cc:bb:95:f7:12:a9:6e:0d:4d:8e:7d:ac:39:
8d:56:1d:06:d1:db:2a:c7:85:a7:38:97:93:62:93:6c:32:44:
1d:a4:a2:d9:86:bb:9f:56:e2:6f:9e:5d:a1:31:20:40:1d:21:
5a:6c:fc:16:24:6b:f2:5e:5d:b5:14:4f:2c:94:77:c4:fe:bd:
28:58:f0:78:26:00:1e:30:82:ae:2a:87:a4:46:cc:f3:38:2d:
2c:9f:44:cb:05:cb:f1:3a:d5:4a:89:27:ef:2e:85:e7:09:57:
0c:06:b8:aa:ab:da:b5:a1:7e:82:20:37:1e:72:90:11:37:19:
95:38:26:e4:22:b8:da:75:83:70:8b:50:ff:5f:1b:c0:62:63:
cc:ec:b1:76:a8:cc:dc:5a:3a:ff:d5:0b:d8:39:55:75:8b:37:
04:87:82:be:74:60:48:e9:f2:ad:e6:61:3c:4f:51:3d:1e:c1:
9d:2a:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:17 2026 by rpki-client