Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: 5QRMmYz1VdonWXSc9LZm+EgCVugKALVwKluotOcv+uA=
Subject key identifier: B5:7E:E5:B0:94:D1:A4:2A:1D:E8:01:40:EA:4B:E0:39:FF:94:BC:4D
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 01A17BF2468B34E6F0036D0AA222AD8E2C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1ACD
Signing time: Tue 27 Oct 2026 06:00:37 +0000
Manifest this update: Tue 27 Oct 2026 06:00:37 +0000
Manifest next update: Wed 28 Oct 2026 06:00:37 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: 1tqAmLos6UPAbQ1rMsIoagayJtAi5UV6To+fwt/andE=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:46:8b:34:e6:f0:03:6d:0a:a2:22:ad:8e:2c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Oct 27 06:00:37 2026 GMT
Not After : Oct 28 06:00:37 2026 GMT
Subject: CN=b57ee5b094d1a42a1de80140ea4be039ff94bc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:68:dd:21:93:c5:73:3e:17:24:ee:1d:81:
17:a6:4c:1b:39:68:86:73:d1:c5:32:b2:ea:0d:d1:
e0:4a:e9:d2:55:79:4c:4a:5e:77:d8:42:2d:2c:88:
fd:58:b7:63:49:8a:d2:47:47:ef:9b:4c:64:9a:65:
fb:8f:60:15:a7:23:cb:78:39:4f:74:da:e6:87:f9:
52:c7:c8:3e:bb:aa:64:17:fd:73:f4:73:9c:0e:f8:
0d:46:04:8b:13:85:c7:68:d0:2c:07:0c:17:24:17:
8d:9a:19:53:a8:9c:33:fc:b3:03:ea:93:70:d2:fd:
d5:12:31:00:67:3e:d1:8c:1d:cc:51:19:c1:6f:e9:
aa:72:d9:ac:50:82:34:7d:f5:0f:0c:3e:07:0b:b9:
e6:14:c9:6e:26:2a:db:3c:76:37:b7:17:44:f0:8e:
83:57:ec:1b:af:21:58:ed:d7:26:4a:aa:bc:de:00:
43:10:54:6b:ba:f6:9f:9e:70:c8:45:bd:6a:e9:27:
31:67:1e:bb:4c:da:2a:56:1a:38:15:73:4a:01:2a:
48:17:b2:dd:60:b2:41:e7:61:69:12:65:de:0f:42:
7a:35:7a:0f:f3:92:6a:5f:79:f8:01:3a:1c:d9:0e:
c1:42:00:23:dc:ee:8c:b5:4b:58:9d:52:43:8d:2e:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:E5:B0:94:D1:A4:2A:1D:E8:01:40:EA:4B:E0:39:FF:94:BC:4D
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6e:71:e0:0b:6d:37:32:d2:26:66:26:0a:b5:e8:7e:3b:dd:
24:77:ea:f0:13:98:c3:98:2a:e1:87:b9:f2:18:d3:10:ec:f5:
f9:ee:56:f5:85:d6:ec:73:ac:4a:67:d7:a7:42:f2:03:11:f2:
59:8f:93:35:be:48:d8:b0:d9:23:6a:84:0d:39:a7:cc:84:ef:
81:65:e5:ef:cd:93:f6:71:3f:86:13:53:75:a6:d9:a5:9c:19:
ff:55:69:f4:39:3f:38:4f:0a:70:84:e0:4d:c4:55:9e:ee:20:
2c:23:33:37:58:1b:be:d9:28:4a:90:86:36:cb:a5:99:0f:96:
45:35:95:00:00:02:3a:96:1a:c4:72:73:26:77:39:e4:1d:b4:
66:68:0b:c1:29:51:81:de:ec:f0:e0:0f:99:7b:ad:72:fd:1c:
18:13:d7:7b:6d:77:23:e5:15:50:f6:f1:5c:48:14:07:1e:08:
5e:54:1b:bf:c5:15:ec:ad:93:46:83:d5:11:5b:60:71:8f:35:
f5:20:f7:9b:d7:57:cc:52:fd:e5:95:dd:10:ce:6f:01:a8:46:
76:fd:63:2d:42:7f:41:f6:35:27:07:15:f8:71:31:8b:ba:94:
0e:c0:06:79:07:02:62:d6:bc:26:f1:82:38:bc:c0:92:01:bb:
7e:7e:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:22:45 2026 by rpki-client