Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: R61Ftvc3UTvK5sh8mjiCl+lRFrq1YCzTZMFWZnX2n5A=
Subject key identifier: E4:57:88:84:5D:0A:30:22:27:CC:15:56:7A:15:39:58:74:79:C8:FB
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019FA14E5342FE754D32336C15CC12259D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 02EA
Signing time: Mon 27 Jul 2026 02:01:32 +0000
Manifest this update: Mon 27 Jul 2026 02:01:32 +0000
Manifest next update: Tue 28 Jul 2026 02:01:32 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: Qmf+jO9D/wdFl1+w+oR+tgFR/sDe61IhxCnuAv8RrcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:53:42:fe:75:4d:32:33:6c:15:cc:12:25:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Jul 27 02:01:32 2026 GMT
Not After : Jul 28 02:01:32 2026 GMT
Subject: CN=e45788845d0a302227cc15567a1539587479c8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8e:63:0f:8f:f3:12:24:c0:3d:23:d9:a4:ec:
92:e3:0a:bf:4c:50:5c:25:22:6a:de:e4:e2:7d:df:
f1:79:0f:71:31:7e:35:c6:ab:b3:10:6b:7a:9f:d1:
87:32:59:a2:78:c2:19:af:83:5e:61:9c:1e:4e:67:
1d:01:ab:cb:c6:1f:3f:fb:58:12:78:63:a1:e2:89:
b3:f2:48:ce:8c:48:20:66:cc:59:19:d6:eb:aa:4b:
aa:b9:c1:43:69:f3:35:00:03:56:ea:fa:03:97:d8:
fd:3d:95:08:97:ae:27:76:74:b2:89:f4:33:87:34:
60:a0:bc:db:2b:9f:06:b2:54:48:be:22:e5:a9:cf:
54:07:57:02:0f:6b:90:4e:24:1e:e4:97:13:d6:a8:
0d:ad:3c:86:2e:98:29:21:45:b9:81:cf:55:e0:39:
1f:b3:fc:a1:db:37:12:ad:92:bf:5d:51:a0:bf:b3:
1e:c4:4a:00:78:e1:3d:80:0d:b7:98:71:b9:45:06:
a2:b3:70:3c:0f:ed:73:51:03:47:45:a1:3b:e0:1b:
98:48:7f:20:2a:cc:c0:6a:c9:53:58:93:db:88:e9:
46:75:99:21:7b:4d:cb:35:1b:44:9f:d7:c6:04:88:
ed:16:f1:b2:91:33:49:ae:95:a4:ac:c0:0b:82:1e:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:88:84:5D:0A:30:22:27:CC:15:56:7A:15:39:58:74:79:C8:FB
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:07:66:df:94:6a:f7:bb:fd:f6:d8:ab:f3:8b:69:cd:d9:
1f:a5:2d:47:1a:75:c9:a4:b1:5c:0a:31:c3:34:bb:31:23:f6:
97:d3:97:7f:d3:a1:6e:de:82:d1:2b:51:50:ba:98:65:cb:c4:
3e:87:59:c0:5d:df:93:d5:ed:c4:ed:81:70:23:2e:8c:c5:05:
8c:fa:e7:4a:a9:18:e5:24:8d:47:d0:86:91:a0:0e:3b:eb:d1:
35:d5:6f:89:3a:d3:00:38:39:73:df:1a:c2:b4:67:4b:99:16:
a0:f1:df:70:9e:cb:d1:0a:57:fa:5b:2c:57:29:dc:a3:6c:d7:
db:e0:e0:ec:bf:5e:15:70:da:8f:44:a6:dd:c7:a5:59:27:17:
74:26:3e:2a:50:58:b8:ef:49:c2:66:c2:ae:70:ae:6b:8e:31:
ac:1f:d7:9e:df:fd:2c:0b:67:ad:6d:80:6b:1e:60:52:6a:de:
2e:9c:1b:6a:ea:a0:8b:c8:7d:b8:bd:44:a8:73:f7:a2:b6:26:
bf:89:ba:a2:24:91:ed:70:d8:57:3d:21:6e:a8:41:a2:2c:9e:
03:ca:56:ce:63:98:42:c1:c0:26:fc:fc:13:97:7c:01:cc:99:
4c:66:87:fe:2c:b9:a9:92:e3:a4:7e:a8:23:0c:81:ad:bf:88:
54:54:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:34 2026 by rpki-client