Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: zoUzHvywwhOUxrTUzvcp8CCqRfOPbHVwnjQlkMqXXFA=
Subject key identifier: C9:F0:EA:1D:AA:35:B2:86:BE:68:C8:85:A0:A8:7C:F2:B8:03:A0:14
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 01A1803DFC0CC2D352C3800F1B556ADF7643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 03E2
Signing time: Wed 28 Oct 2026 02:01:48 +0000
Manifest this update: Wed 28 Oct 2026 02:01:48 +0000
Manifest next update: Thu 29 Oct 2026 02:01:48 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: ZgF2LTLUwR3yLJHuNkBtfiWNHGpUV/mk2qllxxKELwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:fc:0c:c2:d3:52:c3:80:0f:1b:55:6a:df:76:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Oct 28 02:01:48 2026 GMT
Not After : Oct 29 02:01:48 2026 GMT
Subject: CN=c9f0ea1daa35b286be68c885a0a87cf2b803a014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:a2:85:59:f7:bf:3e:fe:b9:07:19:b8:2f:
2b:8c:d4:2e:e7:68:ec:6d:5c:27:95:23:58:6d:4d:
1a:f2:02:eb:34:cf:9e:72:bb:5c:b8:0f:a7:bb:07:
4b:1b:e6:8c:f0:aa:ff:1d:47:a9:51:fb:ae:7d:6b:
af:5a:83:7a:cd:8d:1c:af:b5:18:95:ac:c0:19:da:
1e:f9:b5:a1:07:58:56:63:ef:e9:4b:03:66:ad:74:
d9:89:fb:92:e6:89:c8:21:54:42:f6:b0:ef:ae:fe:
37:14:dd:00:ee:6f:5f:8b:a8:6c:87:21:3e:09:00:
38:12:2a:23:90:5b:1f:36:71:b0:f5:57:2c:e9:91:
bd:4d:b3:24:c2:60:cc:73:c7:98:63:60:38:52:8b:
da:c6:f2:84:65:93:a1:bf:83:01:8f:94:ff:11:84:
30:5c:04:44:09:c7:00:16:ad:6a:0b:d9:bc:63:3c:
0a:31:db:fd:51:9f:04:a0:7c:78:33:d4:67:c4:2b:
03:24:cf:57:77:9d:75:b5:c5:8a:d5:0f:18:b5:bc:
21:59:8a:44:81:37:9c:01:ad:79:3e:7b:93:89:69:
46:61:2b:a9:cc:9c:88:1e:a5:5b:42:09:51:99:ca:
a6:3d:ac:a4:bc:03:3b:ad:21:21:8d:10:5a:8f:9d:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:EA:1D:AA:35:B2:86:BE:68:C8:85:A0:A8:7C:F2:B8:03:A0:14
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8d:19:06:0f:8c:95:d4:1f:85:30:2d:65:12:9d:8e:cc:6c:
18:b7:ba:cf:b6:cd:09:8a:38:2a:bc:54:b8:26:7a:84:ee:ed:
cb:74:aa:57:30:06:02:07:b3:94:75:23:0e:0a:35:65:5d:d8:
d2:63:ec:3c:ec:3e:df:7f:45:ed:37:c6:33:8f:cc:bb:39:d3:
31:2b:2b:4a:fa:ed:96:81:b6:10:6d:1c:15:c9:cb:35:4b:13:
4b:8c:54:1c:7c:81:5d:4c:77:9f:86:ef:0b:f3:e6:11:50:e0:
f1:45:17:f7:10:7c:5b:9a:36:ea:e7:55:d7:84:b5:7b:9f:c6:
5e:59:0f:f2:89:23:37:33:c6:2e:b2:82:6f:6e:43:67:56:f7:
69:c3:b4:c9:3b:57:d8:be:d6:2f:eb:ba:28:a9:f5:33:a3:cb:
08:e5:c8:c1:07:6d:f6:63:be:9a:aa:4e:e0:14:85:3e:0c:12:
12:02:0a:8f:d0:cc:e1:9e:54:c4:c7:7f:9a:1b:78:37:a9:91:
13:43:8d:0a:30:ca:cf:e7:6d:31:52:e5:e7:e3:be:0e:e7:52:
46:5f:9f:69:80:ca:14:de:84:90:61:7a:52:4d:33:8a:ee:95:
2c:54:e1:ad:3b:ac:98:1d:8c:cf:75:1d:fe:66:86:20:69:53:
56:29:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:48:00 2026 by rpki-client