Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: 6VItRJ2i6K7lVqx+Wb8Tw7zK1iTiJu9rdNLjG6ZzCoI=
Subject key identifier: 3C:0E:A1:20:ED:45:B8:C6:3D:D3:65:A6:09:FD:29:C4:42:E9:97:46
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 01A0736032343C0C42A932ED6C45DC225115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1A44
Signing time: Sat 05 Sep 2026 21:01:19 +0000
Manifest this update: Sat 05 Sep 2026 21:01:19 +0000
Manifest next update: Sun 06 Sep 2026 21:01:19 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: uQPEFTD2ORTLNNPdwcfXQVcKJpM3vrNhomMhjjPHeBc=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:60:32:34:3c:0c:42:a9:32:ed:6c:45:dc:22:51:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Sep 5 21:01:19 2026 GMT
Not After : Sep 6 21:01:19 2026 GMT
Subject: CN=3c0ea120ed45b8c63dd365a609fd29c442e99746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:60:38:9e:d6:97:00:1a:61:00:06:24:57:
02:81:12:3b:18:66:42:0d:1a:ba:54:4a:12:91:84:
45:3e:e1:f2:3e:64:a5:30:53:da:ee:be:65:4d:f3:
2e:6c:ee:83:7a:6a:14:d2:93:60:28:36:f7:4c:b8:
2a:e4:66:b1:1d:ab:ec:e5:15:73:64:d0:5e:3e:25:
79:fe:8e:06:df:d3:d3:1a:e6:ed:ef:dc:54:47:11:
c9:79:1a:19:44:e4:fe:cd:34:4a:a7:74:a6:fb:a2:
1c:56:5f:06:eb:55:af:13:43:35:5b:fd:de:ef:98:
36:16:e1:2a:97:1d:67:1a:11:06:70:04:09:cd:5b:
72:38:59:5d:c0:b1:2d:53:95:89:e6:b3:66:4d:50:
11:c0:d2:54:ef:b8:d0:bc:80:5f:49:56:a2:8e:c0:
d0:5e:69:ca:1f:50:2a:2a:f8:5b:c8:6e:fa:16:02:
75:e4:68:b0:5a:6f:3e:97:d0:4a:b6:c8:12:de:1a:
a9:e8:22:5d:04:02:35:b3:2b:ab:19:80:0e:57:cb:
32:38:e5:d0:d4:81:62:51:2b:de:65:4d:c0:3a:06:
74:82:37:e2:8f:eb:92:db:77:a7:79:ec:fc:e6:fe:
9e:5a:58:94:b1:e0:b0:13:f1:a5:9e:27:a4:10:93:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:A1:20:ED:45:B8:C6:3D:D3:65:A6:09:FD:29:C4:42:E9:97:46
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:c9:ac:a3:a0:86:e7:17:fb:e0:89:71:d9:f4:50:ed:6a:
35:c9:a7:41:4e:d0:44:b7:22:2d:d1:34:37:4d:2a:fd:4c:ba:
c1:12:fc:01:50:dd:bd:2d:55:a3:4d:2e:ad:a3:39:7f:69:7b:
36:f6:4d:1c:7a:fa:02:c8:f1:31:83:22:90:86:3b:3e:c7:a4:
1a:3f:08:a4:a6:92:2e:0a:09:e3:6c:51:18:cf:e0:95:cc:59:
22:3a:03:4c:e3:cb:44:84:b7:28:3c:72:9f:9e:3f:63:30:15:
26:d3:43:29:b1:24:73:85:b9:61:ad:1f:b7:0e:0a:d0:98:40:
47:25:d8:c2:28:f6:f0:99:ad:20:7b:b1:62:ff:27:0b:94:fe:
fb:d7:31:60:8a:bd:bc:f5:07:1a:59:7e:bf:17:ee:1f:84:b5:
24:f8:0c:ef:7e:00:e8:79:11:7b:94:51:29:db:ae:dd:bb:37:
50:91:1d:15:4f:ea:46:16:9e:36:62:ba:64:14:05:f6:be:77:
0f:c7:12:bc:ab:54:6a:c5:8c:5d:03:24:d5:7a:1f:56:56:1d:
6a:c8:31:d4:c6:2d:76:52:ff:6c:c9:e0:0c:70:ca:fe:81:01:
49:87:fc:51:15:b6:c5:03:4e:2d:f3:06:08:9e:e7:d0:40:7b:
2e:1d:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 07:00:28 2026 by rpki-client