Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: EO/36kxhkZNo9k+7KaGBDZp+dZwZY/Kop/DUyvIpRqY=
Subject key identifier: B5:B4:C6:BF:25:88:5D:98:FF:AB:03:00:01:EB:84:C6:9B:25:5F:9A
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 01A08AFA6C075FABF1C43D7D4A4A677ACC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0363
Signing time: Thu 10 Sep 2026 11:01:02 +0000
Manifest this update: Thu 10 Sep 2026 11:01:02 +0000
Manifest next update: Fri 11 Sep 2026 11:01:02 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: 2gS+8o0XsVT7TGt2zu5TtLb5NJwMLmVQf0bGnTF67vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:6c:07:5f:ab:f1:c4:3d:7d:4a:4a:67:7a:cc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Sep 10 11:01:02 2026 GMT
Not After : Sep 11 11:01:02 2026 GMT
Subject: CN=b5b4c6bf25885d98ffab030001eb84c69b255f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:b0:87:99:cc:7a:62:88:ab:df:0d:01:12:
4c:bc:5a:08:d7:06:9e:bf:cb:7b:c4:a9:58:e4:f1:
af:fd:0e:3d:81:1c:fd:e8:43:e1:47:93:f5:0f:b8:
90:bd:e5:80:be:27:75:b8:0c:31:d3:c0:6e:b1:31:
f4:37:c1:1e:45:6d:4b:9c:7d:16:a8:d7:a2:ab:fe:
94:0c:45:56:0e:d1:02:71:2c:f9:56:8a:c0:79:4a:
33:f3:52:a3:af:97:b4:9d:65:ac:94:16:2a:df:88:
db:43:27:7a:2a:79:aa:aa:82:eb:3c:a0:4f:13:5e:
b8:3f:a2:71:76:6c:47:ad:3e:94:6e:4f:72:66:83:
ef:0c:5f:92:b9:04:e6:47:9d:7f:65:4a:05:b1:1e:
6e:6a:7d:d9:f7:eb:c1:f8:dd:da:7a:dd:aa:9c:5e:
4e:61:df:ac:86:a7:13:c5:2b:ed:40:58:42:8e:af:
95:f3:11:06:e9:b6:40:9a:ca:13:f9:b9:7a:34:92:
97:23:51:42:2d:20:c4:d7:17:47:07:cc:ec:d4:fb:
8c:10:a7:c0:64:71:ec:e3:d8:0e:8e:a0:06:6a:26:
82:bd:a0:e6:01:89:a6:71:27:50:cc:13:e0:79:33:
64:fd:03:7a:da:99:0e:99:0a:dc:9d:ba:ae:8c:27:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:C6:BF:25:88:5D:98:FF:AB:03:00:01:EB:84:C6:9B:25:5F:9A
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:87:bb:94:38:9a:83:75:8d:73:87:4b:90:87:a5:67:85:31:
2d:27:28:57:8e:97:fe:67:47:8a:d0:4a:58:23:98:72:84:9a:
26:a5:86:bd:41:41:ae:ab:c5:cf:42:7b:f3:d6:05:95:66:d7:
2b:79:4b:0c:bc:29:4b:76:6f:9e:d5:90:4f:34:21:d9:ae:58:
97:43:a3:3e:1a:3c:00:27:7c:e8:d5:83:00:66:0c:08:00:38:
89:b7:2c:09:9d:28:ad:8d:08:80:c7:27:3b:24:ba:98:d1:bb:
40:32:cb:2c:ec:f2:0b:7a:35:39:89:15:16:ff:0b:cb:3b:1b:
1b:40:9a:d5:25:2e:1b:45:b3:58:18:0d:7e:1b:a0:e9:a8:a7:
1d:0d:31:91:fe:ca:35:b7:c0:77:30:b8:bb:58:d5:f7:e0:a6:
e1:f1:e3:2d:73:c0:83:a3:80:d3:c2:a6:4f:da:e3:fa:35:f6:
37:62:46:38:ae:d1:fe:6f:97:b8:9a:57:bf:e0:df:7d:55:c7:
9b:02:53:64:03:82:c1:0f:0d:d5:b7:83:61:bc:4d:e9:4b:9d:
2b:b0:72:cc:6b:0b:2b:0b:e5:a1:2c:6e:80:9e:10:b2:23:bd:
13:8a:4f:cb:dc:c8:44:ac:3d:32:b7:b1:18:aa:71:ec:cf:69:
fa:aa:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:24:04 2026 by rpki-client