Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: Ewh1MhJaayIr/GOyI8sbi2SomgLf+jng+xKsbqFvvVM=
Subject key identifier: 15:0F:99:95:6D:C7:1D:F9:6B:45:ED:E6:D7:34:FB:48:7D:A7:34:C3
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019D375279EC01D78C4A15F9331877A1B475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 01AA
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: jKc94lMSTINFGMhobvWkoBggIbc9i7lfC44A9WijiTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:79:ec:01:d7:8c:4a:15:f9:33:18:77:a1:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=150f99956dc71df96b45ede6d734fb487da734c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:c9:6e:00:1c:7d:2b:23:dc:95:f4:25:51:
97:96:a6:9d:31:c8:b1:0f:f2:18:73:2f:a7:69:12:
17:68:34:26:72:b5:e0:97:49:64:fa:60:c2:42:f6:
64:56:44:2b:94:ab:1e:20:e3:cd:2f:2a:f7:19:30:
2c:c3:86:b9:7a:2e:49:69:69:af:c0:92:78:ed:f7:
7e:cb:e4:6f:57:34:9c:16:9a:b2:a1:21:df:6f:9c:
5f:89:8b:51:27:73:6d:a6:36:87:51:56:11:a1:94:
a1:5c:5b:a7:26:7a:e5:a6:d9:cf:2b:75:41:69:38:
6f:b6:de:20:0d:e4:b9:11:32:35:b4:1e:ee:5b:18:
09:14:9d:07:c8:9f:c5:4e:0e:38:ab:4d:11:c8:80:
47:b6:65:d0:bc:ca:08:2f:3d:11:96:8b:33:2a:e5:
46:b4:fa:c2:f8:5c:64:ec:f2:ef:5e:c7:50:5d:c6:
f4:da:6f:b1:16:ad:c9:f0:77:01:b6:8a:b1:23:11:
a4:19:c2:b2:e4:b3:3c:09:76:23:25:15:77:c3:2f:
35:f3:ee:ea:17:b4:54:d8:61:e0:6e:0b:67:c7:de:
f2:b3:db:f5:f8:67:d2:40:20:6e:e0:bf:14:26:ce:
68:c0:2e:1a:8f:a0:ed:73:5e:9a:24:92:2e:ab:aa:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:99:95:6D:C7:1D:F9:6B:45:ED:E6:D7:34:FB:48:7D:A7:34:C3
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:0b:c2:10:88:cb:6c:8e:45:a5:08:0a:f7:53:56:69:b5:
f0:8c:52:72:89:20:b9:fe:99:08:55:6d:46:de:68:1b:46:04:
f0:ed:36:f3:13:d8:70:ff:c7:5c:09:05:57:92:bd:47:ca:30:
63:f4:06:21:02:2e:de:25:1f:2f:0e:d7:0a:42:e4:88:6c:fd:
5d:56:5a:25:ad:88:0a:be:19:42:4e:72:00:e3:7b:b1:8c:b2:
8f:a4:36:0b:5a:4d:67:9c:d0:22:b6:e1:af:40:1e:77:41:a4:
c4:e2:4a:63:57:d1:2e:e8:02:63:e4:19:ec:59:81:cf:6c:86:
7f:6c:09:ba:ba:6d:f2:81:d6:fc:b5:a6:f2:f9:f7:c9:7b:46:
d4:50:4a:a9:2e:39:c7:d5:69:9c:3d:f2:62:16:09:f7:54:61:
73:c2:72:c6:48:a5:af:c0:d7:91:c5:a5:bd:ce:7f:4d:70:f0:
a2:71:73:c0:47:12:5e:60:36:27:6b:ec:c2:f5:75:bf:23:98:
9e:39:28:72:5f:a8:d7:ee:9e:33:ba:ea:3b:8c:9b:25:d2:43:
7b:34:21:5e:57:fd:f2:b5:d5:ca:46:00:0f:70:8e:bb:c2:e6:
f1:6d:5d:03:e1:4c:7b:30:44:9d:39:f9:0a:39:60:06:d5:ca:
b1:9d:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:34 2026 by rpki-client