Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: 2H2JPiMr82NxeD2koAYLeB+yu3o2aefwE7f8oPiPOyo=
Subject key identifier: CC:3F:B4:10:FC:88:6D:F3:6D:1B:37:50:E3:56:D8:4C:24:DA:9B:62
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 01A17A71EDD2A3B9E81B9DBFF1387FF77701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 03DF
Signing time: Mon 26 Oct 2026 23:00:49 +0000
Manifest this update: Mon 26 Oct 2026 23:00:49 +0000
Manifest next update: Tue 27 Oct 2026 23:00:49 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: gzJmaC7OWFXUyZmpVkg2jYw/kGht46MCeO8XdcxolQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:ed:d2:a3:b9:e8:1b:9d:bf:f1:38:7f:f7:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Oct 26 23:00:49 2026 GMT
Not After : Oct 27 23:00:49 2026 GMT
Subject: CN=cc3fb410fc886df36d1b3750e356d84c24da9b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:64:24:c8:65:93:19:f3:7f:86:54:ca:c7:
67:ac:4e:6a:ed:68:01:14:05:7e:c1:79:65:95:df:
01:78:15:ca:18:87:e1:58:f4:3f:05:f0:6c:b7:37:
15:3d:3a:59:22:cc:9b:53:78:e3:f6:eb:92:82:63:
9e:ec:1e:e4:40:c6:15:12:b0:58:e3:be:1a:7c:4c:
ff:b5:5f:89:e7:d7:a1:4d:50:b5:d7:3c:04:49:a2:
6e:e7:63:3b:f7:a1:30:34:6d:33:0b:f9:41:38:a5:
70:e5:42:39:94:38:cf:44:ac:66:d5:83:cd:16:73:
a8:67:67:41:bb:7d:d7:b5:cc:e8:81:94:6e:f5:5f:
51:8e:cc:33:02:30:ea:34:eb:cd:8d:82:3a:09:ed:
dc:15:f6:1c:9e:a5:40:5d:c6:5b:9d:a3:ef:e2:67:
15:c2:d8:b4:d1:61:17:12:c7:10:75:4c:71:ac:45:
e3:0a:dd:4c:51:4e:a9:14:ab:67:ca:7a:5f:44:3b:
3d:ed:0b:17:30:55:be:32:aa:80:19:1f:47:3e:e0:
3f:1d:38:ae:7d:77:ca:36:d6:f5:c0:be:9b:ed:3e:
61:81:e3:b7:2e:06:cf:40:f7:59:07:36:af:7d:6d:
4b:93:3c:3f:9f:15:81:24:c1:26:bc:3f:c8:17:21:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3F:B4:10:FC:88:6D:F3:6D:1B:37:50:E3:56:D8:4C:24:DA:9B:62
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0c:d6:aa:94:71:40:cf:31:a0:f2:e2:25:b2:4b:61:c7:8f:
54:e9:2f:19:4a:84:ac:01:a9:8d:ad:b9:33:bf:b0:6b:9e:2d:
9e:75:18:b9:57:b5:c2:8f:9c:7d:ed:44:55:aa:5d:61:68:a1:
f7:4f:37:0f:3c:66:36:01:aa:f5:a6:da:dd:c5:f5:9e:97:fb:
f6:31:75:22:38:95:93:01:09:0b:15:13:40:fd:fd:c5:56:d3:
63:87:95:62:c7:72:1b:e5:72:e6:7f:2f:0d:63:05:31:ca:88:
ad:18:41:a5:29:ee:76:56:c0:1f:a4:32:65:74:5f:a6:9f:83:
d2:e6:e7:ed:cc:8f:e8:34:f5:10:72:fa:93:7f:94:49:29:7c:
11:24:67:ad:92:88:a9:0e:25:ae:9a:dc:dc:e0:0b:c9:d2:3b:
2c:7e:ed:42:39:41:78:ea:ae:3f:aa:8e:1b:8e:76:34:07:43:
93:c2:30:13:06:1f:25:02:f0:e5:07:11:30:c9:bb:65:d7:2b:
be:92:a7:50:a7:11:98:8f:9e:18:ba:01:e3:6c:da:3c:c7:c3:
14:74:6e:71:44:50:dd:0b:70:4b:09:38:5e:66:d9:61:18:23:
19:91:15:5e:24:cf:e0:6d:4e:57:e5:4e:3c:3a:8e:aa:23:56:
8a:76:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:59 2026 by rpki-client