Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: bhyxciH5/mDd8c4KZho9d1BBxqUpZfmUisALCGgD2XY=
Subject key identifier: D1:F1:16:CE:48:1B:B0:25:62:04:D8:88:B3:47:4D:9F:C0:08:9E:2F
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 01A06FBA589A1D2A8A124E939CC0F280F773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 12BE
Signing time: Sat 05 Sep 2026 04:01:18 +0000
Manifest this update: Sat 05 Sep 2026 04:01:18 +0000
Manifest next update: Sun 06 Sep 2026 04:01:18 +0000
Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=)
2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: NtpiabSbnBvRPsbIkKK91c3V7cyYXuu4mBuzNFBuauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:58:9a:1d:2a:8a:12:4e:93:9c:c0:f2:80:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Sep 5 04:01:18 2026 GMT
Not After : Sep 6 04:01:18 2026 GMT
Subject: CN=d1f116ce481bb0256204d888b3474d9fc0089e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:e1:7a:7a:ab:4e:24:b2:e8:a1:78:43:17:
ff:86:32:ac:b7:9d:1b:91:36:80:53:34:4a:64:86:
5a:52:77:fb:9c:12:4c:b2:da:7e:36:f1:52:60:25:
53:a0:da:6d:8a:6d:cb:93:d1:1b:d7:dd:a2:18:c5:
e7:95:38:01:45:2d:d1:6f:11:97:65:5c:89:01:7e:
4f:20:c5:c3:ec:e5:c6:79:bd:4d:39:b6:5f:00:24:
05:af:a2:6c:e4:9b:8b:e0:9f:c2:41:a9:24:19:36:
96:4b:7a:5b:59:be:30:80:e6:57:43:96:a5:c7:df:
77:5a:0d:86:dd:0f:59:d1:2c:a3:1d:22:12:8b:eb:
a6:91:73:44:e6:f7:68:6d:92:cd:20:ae:3d:b0:aa:
1c:16:e0:4a:bc:b1:25:82:ca:cb:23:2b:b3:d4:6a:
96:43:3b:0b:7a:c8:03:6e:59:14:d8:b6:11:b5:fe:
93:19:3e:50:7f:e5:3b:0d:06:21:21:46:ab:a8:f7:
44:1c:17:fa:6b:bc:e7:35:66:bb:d4:42:51:53:e1:
dc:c6:7d:5d:44:ea:7f:21:d8:fd:fc:27:98:06:da:
61:db:c7:95:8a:4e:f8:55:ec:8d:d2:71:06:58:f9:
41:db:4b:ea:a1:2a:7b:56:00:bf:74:97:11:3f:93:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:16:CE:48:1B:B0:25:62:04:D8:88:B3:47:4D:9F:C0:08:9E:2F
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b0:a2:f8:0b:83:6c:d6:1f:99:76:ac:f3:b2:60:42:98:53:
3d:be:59:a0:29:ff:bc:6c:9e:0b:21:a3:78:7f:ce:f8:a9:40:
12:b0:3b:0c:dc:cc:09:0b:6a:88:a9:7e:5f:17:d2:4d:3e:17:
32:02:11:6a:95:10:cb:75:a2:10:24:d0:e5:c4:2b:12:07:0f:
b9:88:e3:40:4e:b9:cb:64:41:e3:ea:9b:e6:25:19:9f:59:e9:
e6:b7:08:6d:6f:2a:7e:8f:28:65:f1:d5:60:cf:2f:c8:14:b0:
c9:e2:da:6f:22:d8:d6:c8:ac:03:a1:1f:61:70:d0:0f:5f:4f:
27:4c:29:16:d8:04:10:93:31:a7:7a:8d:08:72:0f:2a:84:e7:
1b:71:40:42:df:fb:7e:f8:7d:9d:23:d8:1a:03:f9:da:93:80:
80:55:c6:63:54:55:6f:14:0c:23:4b:97:a7:d9:01:e4:d9:08:
87:06:60:6d:af:52:54:36:39:18:3e:11:6d:cf:09:0e:52:a3:
43:c4:c9:23:86:bb:e8:51:3f:22:ff:1f:4f:53:cd:6e:55:07:
f1:17:6d:71:9b:c0:7d:28:fd:17:62:09:e8:6d:68:c1:f6:a4:
b7:8c:09:86:bc:46:c9:e8:03:4b:e8:03:13:87:18:1f:85:82:
6d:72:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:24:58 2026 by rpki-client