Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: eN+7V36gPWWDSgLywP/YqtaAVXDrjhz6CM3Dd7HX+is=
Subject key identifier: 29:4A:3F:36:09:E3:59:39:68:17:A5:52:F3:91:12:94:E6:A0:1C:78
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019D9D76453B34BEBCF0E1710D96F26B7263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0F9A
Signing time: Fri 17 Apr 2026 22:01:06 +0000
Manifest this update: Fri 17 Apr 2026 22:01:06 +0000
Manifest next update: Sat 18 Apr 2026 22:01:06 +0000
Files and hashes: 1: AOW7VFoYlHG3-sxANF5TLuzaheQ.roa (hash: hpcDkITFLx/A7At/MkFfv6s25x+NQbgrbFZE7lx1pGc=)
2: KNNuaQBFjVM4qdMaB7UWNnS6AWI.roa (hash: Q/rToyq2iR8m6rWdvFLxXk7Bzl+HpGn1ikTUqvJguUY=)
3: dMfKUJHSuWnseGbTE-GdRIw07W4.roa (hash: y2qy1o8S5/XUqYwrCQSN4S8pMHsU2FgYcmzRMM/ZUGk=)
4: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: GpK93luaUJuXvec56N/N0cAsZpmEYMLdesVyb7VK56Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:45:3b:34:be:bc:f0:e1:71:0d:96:f2:6b:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Apr 17 22:01:06 2026 GMT
Not After : Apr 18 22:01:06 2026 GMT
Subject: CN=294a3f3609e359396817a552f3911294e6a01c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:c8:c8:4c:18:27:c6:60:b6:ca:98:52:44:
f4:f7:4b:48:d7:65:6e:b0:cc:9a:f8:4f:86:f1:a3:
72:6c:d9:14:8e:22:96:6d:e3:57:4d:7d:87:a2:44:
fd:cf:86:07:f8:4a:31:08:37:4b:d9:e2:e0:ab:ff:
ca:92:2b:36:2b:ea:b6:da:c2:c2:71:18:ee:75:a4:
f9:79:15:04:86:3d:c2:69:3a:1a:b3:b1:56:32:9d:
51:66:ab:b8:cf:58:82:4f:43:4a:e7:ce:dd:c7:7d:
8b:dd:d4:71:e5:fd:e6:d9:6f:fb:74:25:72:26:d5:
8e:34:cb:1e:4f:3d:91:b2:67:a9:e5:40:9c:9f:e1:
77:1a:59:c1:ca:0b:7e:35:2a:9d:16:1e:fe:6e:8a:
77:96:a7:5c:c1:21:0b:09:34:d5:70:28:c7:3f:14:
2f:13:de:07:e6:06:19:15:da:cc:4b:35:1a:6a:36:
22:82:bc:5f:1a:2e:b2:13:e3:fe:f6:07:12:71:94:
80:9c:3f:81:71:3d:25:86:b5:2b:b8:a5:e9:a6:6e:
61:d3:fe:34:6e:c5:17:eb:f6:98:6f:8d:f6:bf:60:
b5:e5:5f:d2:5f:d2:c0:89:8e:eb:8a:f4:89:fd:9d:
ba:60:94:4e:92:42:36:6a:2c:a7:99:39:c7:40:cd:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:3F:36:09:E3:59:39:68:17:A5:52:F3:91:12:94:E6:A0:1C:78
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:5c:3a:ea:0d:03:13:63:3e:1d:41:8e:dd:b2:95:3e:0a:
b1:0f:ed:8f:a9:82:90:16:90:67:9c:6a:ee:5e:08:27:13:4d:
ea:c4:3f:59:b3:c3:7b:02:e4:01:e8:a8:23:ae:dc:27:1e:2e:
0e:42:7d:e5:90:fa:8d:c8:1c:6b:c4:59:9f:c7:3e:08:d0:9a:
a7:d7:74:fa:11:e6:7d:ed:50:0c:bc:24:0e:a0:5f:b3:3b:ef:
d0:b3:15:c6:0a:aa:54:8a:78:d7:58:15:02:7b:2d:fc:75:da:
08:33:77:bf:75:5f:09:47:4e:46:e5:a7:db:3d:95:79:1c:28:
1a:10:64:6a:2d:2c:06:0e:b3:67:63:78:f0:45:71:9e:f0:be:
d5:1c:5f:3e:16:c9:45:78:05:ae:17:87:4d:54:6e:6f:db:71:
ad:80:a5:03:74:20:f3:39:6f:35:ed:9a:c8:9d:38:85:fa:e7:
9b:32:e8:8c:d4:1e:84:73:09:b4:75:73:22:32:48:9b:95:2f:
8f:31:ec:ef:f7:cd:e9:76:56:d0:2f:a7:89:8a:62:5e:ef:9f:
ff:69:04:8a:de:37:71:f2:f2:f4:ba:b2:32:f1:f5:2a:73:42:
76:09:db:89:9e:fa:94:e5:46:0f:9e:49:62:f9:2c:8a:8c:b7:
6f:00:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:01 2026 by rpki-client