Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: E5SEJACYAc1TTX8cu24DixrC725ipC+ikN04SnmqU1o=
Subject key identifier: E5:F9:17:35:8E:A9:54:59:21:5A:14:AC:47:C3:47:3D:D1:71:D7:C6
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 01A147600EE3907FFA5A6F0E6430D7AD304E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0BF4
Signing time: Sat 17 Oct 2026 01:00:39 +0000
Manifest this update: Sat 17 Oct 2026 01:00:39 +0000
Manifest next update: Sun 18 Oct 2026 01:00:39 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: Bu+NqibemxSpX//uKxSePdD9Xh0YGp+xwyvzfMnJH/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:0e:e3:90:7f:fa:5a:6f:0e:64:30:d7:ad:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Oct 17 01:00:39 2026 GMT
Not After : Oct 18 01:00:39 2026 GMT
Subject: CN=e5f917358ea95459215a14ac47c3473dd171d7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:ff:93:1b:a2:3b:b0:8a:c4:fa:8f:15:cf:
e6:c6:45:ef:9f:39:5a:95:9a:53:ea:6c:76:b3:e0:
7e:53:5b:eb:09:14:82:72:e0:77:20:8f:56:60:1f:
58:1e:64:c5:d8:32:69:e5:eb:cd:df:cc:0f:48:c6:
1a:d6:e9:7e:ac:b6:3a:17:b8:40:e0:7f:65:d5:a4:
c1:4c:c6:2c:0a:5c:dc:af:36:97:90:34:28:e8:60:
fe:e4:02:e7:29:61:8c:42:1e:87:05:48:3e:34:67:
88:8f:fb:54:1c:c4:12:1a:27:86:ef:30:8c:7f:bd:
79:ef:9d:25:5d:7b:4f:7b:8c:45:cb:42:fd:9a:38:
94:95:55:d3:f2:12:2b:d6:71:57:88:c1:8a:76:53:
f3:aa:01:8c:6b:76:2a:97:1b:73:92:52:3a:1e:94:
9d:17:55:16:ce:fc:da:43:f9:f2:58:44:ca:5b:ca:
a6:eb:b8:ed:cb:a1:54:78:20:91:cf:1f:e4:5d:4c:
78:d4:a9:ad:ae:d2:7b:f8:5d:8a:24:7b:36:b6:89:
d4:54:27:85:7d:7c:2c:be:f1:d2:f9:5a:b8:b2:80:
5e:52:60:a2:33:59:c5:52:71:29:ca:56:06:c3:6b:
83:28:ec:f1:8e:18:6c:70:2a:5d:d2:9f:8b:1c:0b:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:17:35:8E:A9:54:59:21:5A:14:AC:47:C3:47:3D:D1:71:D7:C6
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f4:a9:d2:58:3c:99:c8:64:cf:3c:05:71:a5:c0:07:24:7f:
46:e1:36:8d:9f:5a:7a:ee:0b:6e:f5:70:20:5d:be:e1:ae:4e:
33:3f:a2:1e:60:35:65:09:2a:bb:70:5e:67:e4:ab:30:ed:8c:
b5:38:ed:66:66:db:e5:b2:bc:53:2c:f8:de:1f:4c:b2:1b:0f:
b5:f7:f3:61:ef:c6:0d:9a:9f:62:ab:f5:9d:4a:ed:eb:0e:ec:
bb:b8:a9:00:9f:61:fe:d4:3c:5b:d9:56:ba:c0:17:6c:36:6d:
94:ad:76:b9:67:50:11:33:b8:e9:50:e0:68:5b:dd:51:53:33:
47:c6:0d:b5:24:38:cd:ee:cd:07:a4:a1:90:26:de:f7:03:f2:
19:18:8a:3e:b5:b7:5d:9a:a5:df:00:c8:a8:32:22:5a:18:84:
b4:25:2a:e5:df:10:43:06:3f:56:48:ab:70:39:57:80:dc:65:
c3:fe:3c:d6:a3:56:fa:dd:94:e9:7a:6c:05:a3:4d:58:8b:f7:
09:91:63:43:17:91:5f:ab:97:f7:6e:95:5b:a8:f1:32:c1:18:
87:25:3a:fc:f5:1e:a0:5a:a0:9b:68:a6:5b:38:6b:97:9f:81:
3d:74:78:57:61:ae:ad:b4:f1:3c:0d:70:32:73:fe:e4:85:82:
4a:cc:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:49:13 2026 by rpki-client