Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: KLbZwMc9ktXhSYzRO1RH2qA67Bf7m77617dMPhArrIk=
Subject key identifier: 86:F3:5A:56:32:29:95:E2:E0:67:0F:5B:A8:F5:F3:ED:D0:3D:D4:24
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019CAE35FD2D76D6CF3A26EB63A4726ACEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0163
Signing time: Mon 02 Mar 2026 11:01:39 +0000
Manifest this update: Mon 02 Mar 2026 11:01:39 +0000
Manifest next update: Tue 03 Mar 2026 11:01:39 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: VkY2GlTlRFvkG/63tphm0JBWcWHca5wWVctlJGng8Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:fd:2d:76:d6:cf:3a:26:eb:63:a4:72:6a:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Mar 2 11:01:39 2026 GMT
Not After : Mar 3 11:01:39 2026 GMT
Subject: CN=86f35a56322995e2e0670f5ba8f5f3edd03dd424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:df:92:11:ae:2c:f0:3d:64:1e:68:be:ba:
24:cd:c0:2c:15:9d:32:67:8d:c9:28:16:e8:58:f4:
5c:25:00:df:ad:0a:26:35:5b:e2:09:f7:74:8a:c3:
f2:81:ba:a0:94:39:5e:36:13:6e:7c:27:5c:aa:eb:
22:25:7b:56:ad:72:1e:36:e9:73:a3:ce:ef:31:f2:
96:61:e4:3f:7a:75:d5:9f:f9:68:07:47:70:00:89:
64:74:bc:23:51:84:82:1b:b6:5e:c3:15:00:d5:c8:
2c:7b:10:f0:2f:af:6e:ca:2c:a4:17:07:39:ce:b7:
26:4c:7c:fc:98:e6:a3:bf:c6:58:6f:7e:80:e6:e0:
5a:51:e9:cd:e7:93:f5:0f:5c:44:ec:cd:58:9e:06:
2e:ed:8f:b8:c7:1f:87:b8:37:b7:5f:ff:a7:96:74:
20:69:72:d2:97:5f:44:24:9f:09:dc:12:9c:83:38:
9c:1a:14:ed:88:47:b4:75:28:a1:06:ac:c4:85:7e:
ae:a0:f8:2b:32:c8:e6:50:ff:e8:cf:41:44:bd:fe:
fd:d0:dd:81:8a:3b:55:82:d9:4b:76:41:5e:b2:35:
6f:c0:0e:57:61:3e:9c:a1:0a:71:bb:51:35:0e:62:
47:d7:26:92:d0:bb:80:a5:10:9e:c2:e4:ba:82:a4:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F3:5A:56:32:29:95:E2:E0:67:0F:5B:A8:F5:F3:ED:D0:3D:D4:24
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f8:98:4d:7c:c1:b7:a4:8e:57:55:57:3c:30:e4:ad:cc:18:
19:0d:21:ab:6d:e2:13:4c:57:fb:ff:b3:9c:26:1d:fa:f3:24:
b8:1c:91:23:40:d8:d8:67:2d:39:e9:54:15:11:76:3c:2a:f1:
e0:9b:41:30:d0:3d:b6:47:e3:cb:69:f5:54:fc:00:17:d8:6b:
86:08:c4:f4:17:41:c9:23:c8:d0:02:1b:ea:d1:a8:87:a7:7a:
c5:ef:08:53:f7:f6:c1:d8:ae:2b:46:9a:c3:e5:40:90:00:dc:
01:b0:7d:c9:e2:df:52:87:a5:3d:32:30:c1:55:0d:17:34:6d:
f9:8d:11:51:d9:c9:b5:99:d1:83:b4:33:15:ac:2b:fd:39:06:
0b:5a:ee:3e:94:5d:74:a7:96:17:88:89:7d:f0:78:c3:78:a3:
2b:eb:70:f2:8b:d9:8b:bc:69:4c:4c:a3:b8:2a:4f:f5:1d:b8:
9c:9b:d5:b0:cb:15:51:2b:60:d8:02:c5:63:9a:1e:6c:02:c3:
21:8a:fc:b7:aa:51:ba:ea:85:cb:e4:71:c2:56:0d:36:11:1a:
ab:9f:4d:33:fc:5a:7e:a0:fc:f3:ce:ec:bb:bb:a1:68:52:34:
30:71:df:48:d6:45:21:03:a4:ca:17:66:a4:f4:40:b8:49:23:
60:d4:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:30 2026 by rpki-client