Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: rY3+uHwR90hFsQSWeYB4jFe1OODMRqpT2OaDf4rCh/E=
Subject key identifier: 58:27:1D:80:3A:22:F7:F6:02:FC:57:DA:AE:8E:12:04:5E:9C:A5:B9
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 01A002F007989EE382D0D31B0C14AEF6A9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0B4C
Signing time: Sat 15 Aug 2026 01:01:19 +0000
Manifest this update: Sat 15 Aug 2026 01:01:19 +0000
Manifest next update: Sun 16 Aug 2026 01:01:19 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: KedV7muODvCBSaYniPplc8Gnrqmx3M4ocwpIObvyCLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:07:98:9e:e3:82:d0:d3:1b:0c:14:ae:f6:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Aug 15 01:01:19 2026 GMT
Not After : Aug 16 01:01:19 2026 GMT
Subject: CN=58271d803a22f7f602fc57daae8e12045e9ca5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:df:7b:23:ba:57:6b:be:13:d9:00:08:a5:
67:48:3c:8d:32:72:10:4c:54:4f:0f:e9:dd:9d:62:
38:cb:48:45:88:65:d9:5f:e7:d5:50:ab:bd:c2:db:
1a:52:cb:e8:30:4d:46:fb:e8:8a:65:82:c0:5c:b6:
db:a5:fc:b3:92:a4:7c:53:d4:9c:6a:df:c4:e3:e7:
bd:aa:15:d3:67:31:e2:74:74:b9:32:a7:07:5d:f6:
bf:96:8e:ae:c7:cb:82:d0:05:12:c6:98:eb:48:ae:
65:96:77:39:53:ce:a1:12:57:3e:3e:52:d5:26:9a:
fc:3a:05:42:b6:f4:aa:d6:f2:19:0d:51:be:8f:a8:
88:bb:e5:81:d9:d9:8d:76:64:79:e4:e4:55:94:ab:
2b:c2:2d:a3:56:bb:8a:0e:0c:0b:ba:5a:0e:10:f4:
86:d8:de:0f:72:3a:15:03:5a:43:8e:03:69:f5:08:
f1:3c:9b:8e:56:09:25:ac:f8:c1:b4:8c:e4:79:d7:
07:67:f3:d5:b8:49:2f:6e:db:f5:30:93:45:4b:95:
de:f5:40:55:b6:c8:c3:11:70:04:4a:5a:4e:6a:0b:
11:0c:a9:32:26:aa:76:9e:d2:1e:32:90:3b:d2:da:
56:ac:e6:63:ef:a4:06:6b:a9:e7:85:16:81:88:3b:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:1D:80:3A:22:F7:F6:02:FC:57:DA:AE:8E:12:04:5E:9C:A5:B9
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:80:25:6c:f4:df:25:ba:c9:ca:d1:58:fa:c4:84:4b:91:6a:
65:df:36:ce:bc:4d:52:49:76:af:15:5f:9b:4d:0e:21:74:e1:
0a:1c:6b:10:f1:2c:a0:2a:49:53:0b:d8:ef:f2:6f:02:91:c8:
5d:bc:37:48:e7:74:a3:a5:d0:8a:fc:1d:5a:ad:25:19:a6:72:
dc:40:cf:48:12:f4:5a:76:38:cd:c1:e0:ad:fd:0a:83:d8:a5:
6e:fb:9f:91:2f:a6:40:40:f5:06:fe:ae:69:2b:7e:2f:3c:39:
e9:c4:f1:c5:45:77:23:57:7b:15:48:94:30:15:ff:aa:b7:9b:
03:46:74:f0:7a:ef:14:60:e8:1d:5a:6c:19:71:14:ce:fa:14:
52:49:1a:de:d6:a6:b6:56:58:60:43:c0:7d:1a:72:81:e0:43:
d7:e9:10:66:d8:88:8c:b9:2f:2e:79:9d:ae:27:c6:63:30:8e:
27:42:3e:ae:4f:a5:be:50:2d:aa:f9:33:8d:6c:fd:9d:ea:ad:
3b:dd:34:07:76:41:cf:25:7d:f0:88:7c:fb:40:32:82:ee:6e:
60:81:bd:c1:6f:b2:28:c5:9c:5f:3e:f0:04:62:a3:0e:f7:70:
8e:73:df:de:d4:1f:a8:f1:50:5b:c2:d4:45:c7:a5:23:92:39:
2c:fc:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:52 2026 by rpki-client