Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: hUiwxH+Kliai3AD11ZR/Y6HMYKJ0jbk9fg1q5yJm4bg=
Subject key identifier: 61:02:17:1C:44:AB:05:11:CB:5A:8F:73:CE:10:23:EC:D2:4A:27:39
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 01A08C4427806208DF4DCA08FA36936A5ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 0CC1
Signing time: Thu 10 Sep 2026 17:01:11 +0000
Manifest this update: Thu 10 Sep 2026 17:01:11 +0000
Manifest next update: Fri 11 Sep 2026 17:01:11 +0000
Files and hashes: 1: KggeSoYJuTH0OsCrW287o_IBVIU.roa (hash: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: 6t7q0em+QZSNFdJsS7IY77RXcIrwjGh8GPKtWDw2rKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:27:80:62:08:df:4d:ca:08:fa:36:93:6a:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Sep 10 17:01:11 2026 GMT
Not After : Sep 11 17:01:11 2026 GMT
Subject: CN=6102171c44ab0511cb5a8f73ce1023ecd24a2739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:d3:a0:e3:a0:55:d4:7f:3a:93:1d:65:1f:
81:3e:c1:c5:ac:60:f7:3c:b5:07:a4:a9:67:2e:55:
92:98:25:e2:13:ed:7a:57:c9:40:38:57:56:6f:c0:
b7:95:84:02:59:f2:4b:44:1d:74:bc:27:14:dd:db:
39:5c:cd:c4:ce:39:08:ad:a0:87:ec:89:09:59:9b:
20:02:c3:27:5e:e0:81:d6:b0:d0:94:2b:d7:4d:33:
4e:43:2b:5c:f5:03:d8:dd:ef:02:3e:55:5f:8b:b2:
20:59:0a:f4:b1:04:5a:7d:a1:de:e0:bc:07:86:74:
be:5c:b5:75:76:51:98:51:81:0b:3f:8c:89:5a:56:
5f:d6:e4:c0:2a:70:13:0c:6c:c4:d2:cc:e5:72:71:
36:6f:37:33:4a:dc:0f:5b:8c:9c:5b:33:c5:bf:e7:
04:5a:0c:14:b4:a0:b0:17:27:27:99:a3:af:9a:08:
47:c6:23:a0:9e:a4:d0:7a:d1:b7:6f:22:01:10:8a:
d8:59:ab:96:f9:e0:40:a2:d8:fc:6d:f0:45:30:b7:
68:ae:b5:36:a0:b3:fc:5d:1e:e0:05:84:65:dc:a1:
f2:89:5b:7b:e5:a0:db:27:3f:b8:0e:c5:c5:a1:2f:
c8:b2:73:7c:ab:c5:14:65:98:ef:b2:e8:0d:50:fd:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:17:1C:44:AB:05:11:CB:5A:8F:73:CE:10:23:EC:D2:4A:27:39
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0a:4b:c3:03:ec:bf:45:d2:af:e8:04:44:42:81:a6:ed:47:
c9:67:ea:8f:ae:95:e6:66:f5:3d:cd:f3:2b:61:db:4e:0b:0d:
de:02:b4:19:2f:0b:6c:de:27:9d:0d:53:81:14:7c:a3:ec:1e:
ae:5b:f3:fd:b3:a8:0c:f9:e5:c7:ae:59:79:2f:86:95:2d:45:
85:ee:62:e3:c9:4e:ef:12:a7:79:1b:ed:b5:b7:4b:64:5a:10:
48:d0:9f:05:b6:43:8e:ed:f4:5c:0f:15:76:7c:1a:1c:bc:72:
c4:b3:08:63:e4:a6:6c:8b:28:ab:35:49:f1:80:19:27:c0:62:
dd:c2:3a:2a:10:8a:07:6e:c9:fc:1b:6e:a6:08:b1:8c:e8:ba:
74:ea:c1:6f:c7:be:bd:be:d7:8d:c3:55:9f:a5:16:e3:cd:20:
ee:30:fc:53:96:f7:ab:a9:23:c8:56:75:50:44:fa:84:73:76:
47:34:13:4b:e8:2b:e6:1f:15:3d:65:00:1a:df:f8:4b:2d:29:
e3:9d:a8:60:1d:5c:88:bb:67:6a:16:fa:5e:cb:fc:28:cd:c8:
dc:4e:ce:b4:3d:6d:61:0a:d7:ee:23:46:00:48:4c:60:13:ec:
c0:fd:06:05:0e:05:ae:d8:f8:a2:9e:67:22:e0:0c:d9:70:50:
6f:d6:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:05:27 2026 by rpki-client