Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
File: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft (raw, json)
Hash identifier: q71kz27hjgd6yWNfMjTzaNRnokwsYi9GInGAjLECEXs=
Subject key identifier: F3:6B:E8:31:B4:87:6E:65:FD:2E:85:F6:82:9E:B3:D3:D6:7F:E8:FE
Authority key identifier: 9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
Certificate issuer: /CN=9e1aca341635166f802f98a97e00280ccee64ce2
Certificate serial: 019F19430F9A88941F34ED3F320F9D5719AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
Manifest number: 0AD3
Signing time: Tue 30 Jun 2026 16:00:53 +0000
Manifest this update: Tue 30 Jun 2026 16:00:53 +0000
Manifest next update: Wed 01 Jul 2026 16:00:53 +0000
Files and hashes: 1: 325RzaiD-WW3-TdaxjCytde03ak.roa (hash: R/JjV4i4hHD1/fvj4o1wHYYq99CJM0edmtkuAKvuJqs=)
2: 82s-nYTmBZJr-4fqLwd3PCrFh0I.roa (hash: YlSqO94OWgx7cGLsPW3z42LAts7qhG5qUbnsMjSFa5o=)
3: clePs2CKwCXamkNLiyTo8mEyp8s.roa (hash: Qm2UooTQfH7Ur1K7SaEI74Yjk4dvrlynMaCOBrBkokw=)
4: nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl (hash: p+MsL2u6fjTRvRenWy5KzI2ayO5Q7DW/l41D1VByp7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:0f:9a:88:94:1f:34:ed:3f:32:0f:9d:57:19:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1aca341635166f802f98a97e00280ccee64ce2
Validity
Not Before: Jun 30 16:00:53 2026 GMT
Not After : Jul 1 16:00:53 2026 GMT
Subject: CN=f36be831b4876e65fd2e85f6829eb3d3d67fe8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:6e:03:4c:4f:fa:25:a7:fd:20:8c:59:b7:
20:0f:5b:82:61:dd:71:dc:1f:03:8c:06:01:28:40:
70:fc:05:47:0e:f6:1e:14:bc:77:8f:b1:2f:16:67:
04:0a:44:75:80:da:f4:89:63:e8:88:ba:6d:75:c1:
01:22:db:90:99:22:4b:8a:1b:e6:32:36:0c:ad:4f:
dc:c9:14:af:3b:28:9a:17:0b:b2:83:f6:87:8a:0d:
74:09:e4:1b:ec:d2:83:bf:34:6b:cf:d8:db:37:da:
d7:5f:63:ee:15:bf:0b:11:1a:32:31:a9:8f:e8:33:
1f:4b:ca:ce:5c:72:2f:15:75:f7:d4:df:1b:fe:66:
a6:de:84:00:45:36:e6:7f:51:d0:85:d8:8d:6d:15:
f9:33:0f:15:1a:9c:53:9b:9f:64:5f:88:98:80:e9:
7f:fb:f0:8c:26:01:9d:ee:39:10:85:89:6d:29:00:
8e:de:99:ac:6a:0c:4b:50:ae:df:b1:7c:91:bf:2b:
37:ab:e5:30:73:63:ad:f8:6a:24:c2:72:d8:3e:94:
26:3e:91:59:3b:ab:68:9b:ef:d1:93:ae:3a:5b:e4:
ce:3c:fc:b8:33:1e:88:d9:8d:b5:b0:c2:e5:5e:35:
81:68:8e:73:5f:92:a0:d2:07:34:a4:c4:02:c1:c3:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6B:E8:31:B4:87:6E:65:FD:2E:85:F6:82:9E:B3:D3:D6:7F:E8:FE
X509v3 Authority Key Identifier:
keyid:9E:1A:CA:34:16:35:16:6F:80:2F:98:A9:7E:00:28:0C:CE:E6:4C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/79fbc0-3351-4fff-b9d5-75561cbf104d/1/nhrKNBY1Fm-AL5ipfgAoDM7mTOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:ba:97:93:6b:d0:cc:93:e4:f3:5f:5b:96:95:7b:de:27:
15:a5:25:0e:50:91:30:e9:e6:06:d3:ae:ea:a2:37:54:39:24:
ea:69:f3:3d:03:2b:3c:e8:e1:1d:ba:d6:9f:33:19:97:4f:77:
49:e5:3a:ce:2a:19:d6:06:aa:c8:cb:73:e3:eb:5c:d5:b5:7a:
18:6a:70:6f:98:4c:e6:ae:23:5d:94:59:8c:83:60:52:07:d2:
2e:85:b2:82:fc:4b:e8:f6:7f:0c:80:31:ed:be:3f:bb:78:35:
a8:30:7f:63:3c:8e:86:bd:4c:df:42:47:30:c4:92:0d:c9:02:
b7:c6:dc:52:30:82:45:3f:62:3d:21:7b:02:23:ab:2d:30:aa:
bc:e3:92:ba:26:a7:9c:1c:ac:48:1e:11:1e:07:d3:e7:6b:f7:
c4:df:a5:ec:82:b0:c8:b7:fe:43:07:64:47:c0:7c:4a:64:74:
ac:19:73:93:66:13:8a:99:d3:d1:99:e9:e9:42:46:d8:32:15:
1e:3b:c1:00:42:97:b9:56:3e:53:c3:92:66:21:2e:9c:d0:bc:
83:c1:43:a8:d3:e9:ab:99:f2:45:f9:c7:08:70:f8:c1:0d:68:
ab:23:e1:59:55:e2:26:0f:5d:cc:7a:79:f9:e5:eb:d6:52:6b:
7c:d7:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:24 2026 by rpki-client