Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: HyGTffdsTdqV3Lw+WEIoVIYAZz5r6ZjpZhutnmT2hdE=
Subject key identifier: C5:26:E4:E0:12:52:8C:10:D7:A7:26:5E:3C:25:8B:AF:C3:1F:23:E9
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 01A179CD2400DCF83372D73DBC9E403885D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 0D3C
Signing time: Mon 26 Oct 2026 20:00:49 +0000
Manifest this update: Mon 26 Oct 2026 20:00:49 +0000
Manifest next update: Tue 27 Oct 2026 20:00:49 +0000
Files and hashes: 1: KggeSoYJuTH0OsCrW287o_IBVIU.roa (hash: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: smU/6drBVgbrqQxEp+Br6FRJ7G6WvcEtZmSadnQuVeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:24:00:dc:f8:33:72:d7:3d:bc:9e:40:38:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Oct 26 20:00:49 2026 GMT
Not After : Oct 27 20:00:49 2026 GMT
Subject: CN=c526e4e012528c10d7a7265e3c258bafc31f23e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:aa:ff:ce:32:39:11:a3:64:a6:b1:38:5b:
94:9f:1b:09:74:53:59:e6:85:51:53:1c:48:5d:c0:
51:bc:ea:b7:5e:d9:7d:25:cf:8a:1f:87:8f:91:ec:
04:0a:01:c9:35:b0:41:b0:73:aa:1d:99:80:cd:52:
3f:a0:00:ac:99:03:27:3f:19:8d:5c:71:73:a7:5d:
bb:f3:04:9c:12:b2:3d:db:90:ec:51:b7:ed:70:5e:
c1:f3:b7:81:b6:ff:12:ef:4f:a8:66:bc:ae:35:b9:
1d:2e:96:9f:2d:bb:0a:58:45:6f:e1:42:4c:61:ae:
df:3e:cf:1f:e3:b6:89:17:1d:70:f1:5b:f8:b5:5e:
96:b6:c4:55:e1:5d:3e:a7:cc:62:5a:c6:99:7b:ad:
cf:d7:d7:a6:36:7c:32:79:7e:53:87:72:81:dc:7c:
38:72:7e:f0:26:f3:ee:db:c4:dc:fe:f6:ed:35:14:
7f:5d:47:d4:8d:52:0b:91:43:b9:8e:72:0a:a1:4c:
12:57:b9:78:8f:3e:58:24:5c:ac:11:fa:ed:7d:de:
dc:c3:9f:a5:84:00:49:0b:c3:4b:53:04:c3:c8:f3:
ea:ea:f7:fa:bd:4e:ee:9b:1b:b1:28:ff:99:c4:00:
71:63:f9:1f:fe:e1:a5:9a:ee:0c:ae:4b:e1:2c:58:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:E4:E0:12:52:8C:10:D7:A7:26:5E:3C:25:8B:AF:C3:1F:23:E9
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a8:20:f4:53:d7:8e:ad:4e:67:e0:6f:93:6f:49:19:89:b4:
21:20:39:e3:bf:02:d3:41:26:f7:b0:97:e3:ea:f3:fa:0c:88:
81:75:57:95:9c:fd:33:0a:1c:94:fd:f3:9b:4f:dd:8f:1a:84:
5e:91:b1:11:1b:31:ed:0e:a6:64:05:51:93:8b:3f:cf:6a:d5:
6f:70:e2:d7:1f:77:ec:9a:80:2b:9a:06:16:a7:2f:2a:74:21:
9f:8a:b1:fe:12:ca:5c:e6:b2:e3:7d:99:ae:f9:da:68:26:63:
86:a0:27:3f:b0:71:f7:96:38:8f:f9:bf:eb:0e:d8:7a:57:e5:
82:c9:39:db:6f:c4:d6:51:39:b8:8c:fb:ed:d2:3c:f5:98:8f:
0c:91:d3:c5:c5:cf:92:a9:32:44:6f:14:27:00:e0:eb:a0:da:
15:fb:dd:de:a3:bf:a6:43:37:24:2d:6e:6f:2a:9e:a2:65:cf:
04:fe:36:1c:ad:b8:e3:d1:d0:d9:54:8b:5f:61:ea:bb:16:d4:
ef:1c:be:77:dd:bd:9f:0b:68:94:43:92:d5:11:52:bd:a9:6d:
8c:c8:1c:b5:4f:7d:2a:14:27:0c:3f:49:33:a4:bc:44:5c:61:
6e:e0:2d:24:78:ba:27:59:5c:0a:b5:31:6c:5f:cd:02:fb:20:
4c:7d:3f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zSQA3Pgzctc9vJ5AOIXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWJhMTY1M2ZjYTdjODAxNzIzY2E0NmZmNDQyZTZiYWMx
ZTkxYTAwHhcNMjYxMDI2MjAwMDQ5WhcNMjYxMDI3MjAwMDQ5WjAzMTEwLwYDVQQD
EyhjNTI2ZTRlMDEyNTI4YzEwZDdhNzI2NWUzYzI1OGJhZmMzMWYyM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXyq/84yORGjZKaxOFuUnxsJdFNZ
5oVRUxxIXcBRvOq3Xtl9Jc+KH4ePkewECgHJNbBBsHOqHZmAzVI/oACsmQMnPxmN
XHFzp1278wScErI925DsUbftcF7B87eBtv8S70+oZryuNbkdLpafLbsKWEVv4UJM
Ya7fPs8f47aJFx1w8Vv4tV6WtsRV4V0+p8xiWsaZe63P19emNnwyeX5Th3KB3Hw4
cn7wJvPu28Tc/vbtNRR/XUfUjVILkUO5jnIKoUwSV7l4jz5YJFysEfrtfd7cw5+l
hABJC8NLUwTDyPPq6vf6vU7umxuxKP+ZxABxY/kf/uGlmu4MrkvhLFiUkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUm5OASUowQ16cmXjwli6/DHyPpMB8GA1UdIwQY
MBaAFJ4boWU/ynyAFyPKRv9ELmusHpGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmh1aFpUX0tmSUFYSThwR18wUXVhNndla2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zODk0MjQtYWFiYS00NDkxLTlmYmEt
ZmNiNDNkNGY2NzE0LzEvbmh1aFpUX0tmSUFYSThwR18wUXVhNndla2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zODk0MjQtYWFiYS00NDkxLTlmYmEtZmNiNDNkNGY2NzE0
LzEvbmh1aFpUX0tmSUFYSThwR18wUXVhNndla2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6gg9FPX
jq1OZ+Bvk29JGYm0ISA5478C00Em97CX4+rz+gyIgXVXlZz9MwoclP3zm0/djxqE
XpGxERsx7Q6mZAVRk4s/z2rVb3Di1x937JqAK5oGFqcvKnQhn4qx/hLKXOay432Z
rvnaaCZjhqAnP7Bx95Y4j/m/6w7Yelflgsk522/E1lE5uIz77dI89ZiPDJHTxcXP
kqkyRG8UJwDg66DaFfvd3qO/pkM3JC1ubyqeomXPBP42HK2449HQ2VSLX2HquxbU
7xy+d929nwtolEOS1RFSvaltjMgctU99KhQnDD9JM6S8RFxhbuAtJHi6J1lcCrUx
bF/NAvsgTH0/lw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:48:20 2026 by rpki-client