Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: cMUIRCep/rbFdSxyC9FeFPAJ8/l4+DrFgRlWe51+Z9Y=
Subject key identifier: E0:1D:5A:01:3F:7D:4E:3E:D3:AC:0A:9D:63:21:FA:15:98:2B:86:2C
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019D3866815540A6DB7F7DB99D1A86B0CA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 09DA
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: GvRDmEh9ctBYyl1tHh77dKkElRy+oh7HnPvLGPC9VLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:81:55:40:a6:db:7f:7d:b9:9d:1a:86:b0:ca:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=e01d5a013f7d4e3ed3ac0a9d6321fa15982b862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:36:22:88:56:36:e5:aa:42:e5:8c:2e:b5:
4a:33:1f:97:b5:01:82:5d:b2:c5:9f:bf:35:42:6b:
e3:8b:07:7a:fc:04:a7:f7:2d:ad:54:30:ae:4d:fb:
c8:b3:e4:2d:7c:2f:3d:78:1d:ba:80:f1:fa:5d:bd:
f5:48:11:a0:c3:91:2c:3b:94:0e:19:08:12:05:d6:
c7:4f:9a:5e:ef:b9:4f:9a:12:39:a9:d0:79:82:ee:
da:22:1a:fb:81:b4:41:b4:a5:17:b9:a2:4b:36:ad:
6d:be:f4:aa:6e:b8:30:be:48:3d:de:86:8b:65:dd:
ac:62:8f:4a:51:4e:13:2c:74:e2:b3:60:56:7d:4a:
72:c9:48:e6:57:69:96:bb:89:33:d9:96:26:9b:f7:
0e:75:79:6c:56:60:21:63:92:00:61:07:bd:d9:1a:
78:cd:14:42:2e:32:55:2d:64:86:b8:9e:80:f1:3a:
fb:bd:d2:06:d8:f9:40:72:11:2d:f2:eb:08:27:cd:
19:db:e5:29:52:cb:d5:40:26:94:e1:6f:c0:d2:14:
53:f2:6f:7d:94:43:c4:da:de:83:ad:83:e8:62:04:
f9:73:b1:cc:c8:79:11:81:15:38:8d:64:ef:a9:03:
5a:d3:b0:c3:c5:81:f4:89:5c:2a:0c:46:34:85:a2:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:5A:01:3F:7D:4E:3E:D3:AC:0A:9D:63:21:FA:15:98:2B:86:2C
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:c6:c8:31:d9:4b:cd:95:db:89:67:61:33:1a:9e:57:8e:
a7:55:8f:f6:24:82:e2:19:29:05:5b:b4:44:24:12:43:f2:b8:
86:70:6d:64:d1:fb:81:ef:3b:de:13:ef:55:c2:7f:75:3d:e7:
c1:d1:ca:af:fb:0d:df:95:d3:01:68:8b:2c:37:d8:1d:2f:4f:
3e:5b:af:00:e8:6a:37:24:a1:b4:81:8d:36:64:b8:bd:1d:87:
e4:cf:f4:26:8c:d4:b6:c0:ee:fe:3a:b4:e0:08:30:b9:d9:1d:
80:6c:6b:35:f3:15:82:1b:79:9b:37:9d:7f:1e:1f:ca:e9:b7:
6a:9c:d2:48:de:e6:7f:ef:ad:2a:5f:22:2e:56:3f:a5:2c:ca:
c4:bc:61:d0:1e:01:2b:f5:19:fb:c6:9e:bc:50:4d:c2:f5:22:
27:19:65:21:17:0d:f8:b2:de:20:a6:b5:e5:b7:93:28:33:f6:
39:05:3b:f0:c5:c9:e0:4d:86:de:08:68:80:9e:cb:fa:08:11:
e3:9d:b2:a6:07:9c:40:19:32:d3:03:78:17:f2:c5:bf:99:ec:
3b:62:07:fd:94:2a:ff:ab:05:23:3e:f5:8a:92:cf:f8:60:0e:
e3:ff:26:53:79:30:0c:18:b0:d4:a0:f8:0a:83:83:64:32:55:
c5:62:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:04 2026 by rpki-client