Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: cAATL9zQki2JpdXgRFqBzgOqVa6cWSpeFNeuPAlo8vQ=
Subject key identifier: F2:B2:15:E4:FD:FF:6B:B4:1F:FA:09:9A:40:58:F7:B5:E6:BB:30:67
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 01A088D51495E93847F0E62121398A2D966E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0A19
Signing time: Thu 10 Sep 2026 01:01:00 +0000
Manifest this update: Thu 10 Sep 2026 01:01:00 +0000
Manifest next update: Fri 11 Sep 2026 01:01:00 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: DJZ5oBCn1td4OAYJO6lsIBSlO/blodjV78hpNowp6oE=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:14:95:e9:38:47:f0:e6:21:21:39:8a:2d:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Sep 10 01:01:00 2026 GMT
Not After : Sep 11 01:01:00 2026 GMT
Subject: CN=f2b215e4fdff6bb41ffa099a4058f7b5e6bb3067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:5c:a6:a8:fc:75:7a:47:e1:08:99:e2:18:
a3:dc:24:3f:d1:53:d9:73:b6:f7:65:1b:a3:2f:3c:
d2:80:25:5f:84:c6:07:b3:a0:42:b2:77:9a:3c:50:
40:3e:82:3d:92:cc:91:ca:71:bd:d0:b9:30:75:4f:
f1:a5:bf:53:99:af:dd:6a:dd:f3:64:9d:a2:c3:81:
75:46:c9:f3:44:0e:39:da:f9:ef:6e:b9:0d:87:57:
a7:3d:67:57:57:13:ce:d2:3e:c3:2c:75:02:f9:62:
fb:4d:23:83:b8:53:b9:52:d0:27:78:26:41:dc:2a:
38:ec:96:86:56:37:3c:d1:b8:bf:01:cb:f2:2e:c0:
8f:53:1d:68:5c:19:c5:50:10:01:2a:0e:0d:b3:5a:
ee:a2:29:9f:67:b5:70:fb:f5:52:a8:8d:b4:f6:ec:
34:80:19:8d:bc:bd:bf:8a:10:f3:71:8d:d3:77:06:
f1:81:a0:06:8b:64:a2:d9:8d:e4:65:82:6b:10:bc:
e4:6e:05:da:c7:70:0d:d1:4e:40:8c:2c:bb:85:44:
45:30:4d:46:29:53:72:17:d2:3c:3e:65:a1:fe:36:
cc:42:d9:75:e3:55:41:e0:0b:f5:c1:44:7e:73:e3:
c4:1b:d6:54:69:1a:75:af:a9:ae:28:f6:7a:8c:b7:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B2:15:E4:FD:FF:6B:B4:1F:FA:09:9A:40:58:F7:B5:E6:BB:30:67
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b4:73:aa:fc:86:5f:fe:33:9a:f0:f2:d4:9d:4f:6c:7c:5e:
fc:87:bf:6b:1d:8d:19:ca:76:54:a5:51:8d:5f:f5:14:af:86:
10:6c:77:4e:5d:72:e8:86:5e:02:27:9d:d5:ea:a1:cc:53:10:
5b:ab:44:17:ae:42:57:78:ad:fa:98:6b:48:4b:83:2d:07:c0:
ac:d1:10:0c:8f:a6:8f:f9:cc:ba:66:21:92:6f:5e:0f:a5:52:
e2:73:4c:75:09:1b:6b:f5:40:d2:94:0a:2f:dc:f6:9f:b2:c8:
1e:58:b3:4a:2d:b1:18:c5:92:de:a4:aa:00:dc:18:b0:11:de:
9a:2a:0d:84:b9:ed:6a:e9:61:0e:b6:2b:29:dc:4b:32:0f:5a:
83:d5:9e:7b:73:69:56:1a:17:43:61:09:eb:0f:05:2c:0a:18:
b2:d1:18:16:77:1f:7a:d6:32:0e:30:b3:d8:c0:91:fa:9d:5f:
90:50:18:ad:3e:a0:e4:bb:03:07:bd:dd:c9:8d:2c:05:80:cc:
83:93:0a:22:85:a5:b5:52:ac:ed:2f:28:21:fd:e1:3a:49:3c:
1a:f7:b4:da:78:0a:62:bb:f5:9b:78:53:de:e0:b1:40:53:30:
44:3b:f5:30:e6:dd:d9:7e:6c:7a:bb:3d:3e:8a:fb:5b:af:2c:
fc:12:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:02:45 2026 by rpki-client