Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: aKpGSJg9shQ23XdhbEBLcrVdciUbSruwx4kVBWlha3Q=
Subject key identifier: B7:18:5C:5D:98:EC:74:1D:77:A7:5D:D1:DF:AE:28:A0:74:49:CA:64
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019EC3376AC5A0FB00EC042D4609CA12AC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0277
Signing time: Sat 13 Jun 2026 23:00:49 +0000
Manifest this update: Sat 13 Jun 2026 23:00:49 +0000
Manifest next update: Sun 14 Jun 2026 23:00:49 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: Rt8cx0qx+AVo93ujR6Nlnzt12/HucsIU9cFZC8ISvac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:6a:c5:a0:fb:00:ec:04:2d:46:09:ca:12:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Jun 13 23:00:49 2026 GMT
Not After : Jun 14 23:00:49 2026 GMT
Subject: CN=b7185c5d98ec741d77a75dd1dfae28a07449ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:00:ce:5e:d3:8c:2b:fd:69:59:50:f0:bf:
9a:39:34:83:b0:41:48:45:47:24:5b:56:73:b8:3a:
ca:e1:e0:f9:bd:ac:db:b4:3d:e1:db:3b:72:1e:74:
36:25:16:a6:ef:2e:36:79:81:4c:f4:8c:42:cf:3f:
d6:e8:77:3e:3d:ee:f6:24:a5:c2:34:f8:c9:45:ca:
ea:36:95:ca:e1:e1:e2:67:bc:c7:1a:d5:06:7c:43:
bb:71:50:09:bd:19:37:ec:af:cb:d8:82:cc:48:9b:
4d:ee:c6:51:65:84:a0:f1:6e:52:4a:66:e8:74:3d:
f8:0d:a1:f1:60:5e:21:cd:67:ed:6c:54:d9:c0:6e:
dd:fd:0e:30:d0:47:ee:1c:9b:11:38:41:b3:97:a1:
d4:d1:ad:ff:03:7f:b2:3f:17:dc:d9:80:c3:a5:ee:
d1:82:0f:b1:1b:19:9a:13:ae:50:6b:a0:8a:0f:ab:
5c:09:fa:35:e6:1d:12:2c:94:21:b5:cb:20:7b:2a:
26:a0:76:0c:b3:b5:fe:de:25:36:e0:be:3a:b5:77:
70:ae:d9:d0:11:aa:7d:45:62:1b:ff:4e:26:23:21:
bf:85:fa:ee:15:fa:08:db:48:2a:f5:15:72:df:2f:
fb:3b:c0:ad:4d:c4:e4:c1:f1:9c:69:e8:1e:c6:79:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:5C:5D:98:EC:74:1D:77:A7:5D:D1:DF:AE:28:A0:74:49:CA:64
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:ad:72:d2:a3:e4:e7:ca:fa:a2:0c:11:63:42:02:d1:1d:
c6:e7:4e:f7:a3:4e:8f:9f:9c:ed:d9:b2:7f:56:94:6d:f2:a8:
f1:3f:72:78:1f:8e:f3:4d:b8:7b:a8:e6:99:59:ee:19:f0:fd:
cf:41:ba:c1:76:95:9a:60:19:10:33:f7:1b:4e:ee:5a:0a:b6:
e6:3e:e3:59:37:af:d3:56:ce:3a:a4:6b:47:b7:70:a6:74:4e:
31:ba:7d:a7:31:26:09:73:04:ae:ea:28:8e:0f:ad:40:37:03:
9a:28:c2:d3:87:d4:9d:81:ef:b8:96:9e:82:3e:c7:1c:58:cc:
3a:6c:1f:8f:2c:b3:cd:9c:0a:c4:3a:7f:f7:e3:f8:76:4b:22:
e9:d7:1d:38:f4:42:ce:a5:ba:af:bc:07:e8:25:d9:56:83:f6:
de:c5:72:5a:8a:64:4c:e6:58:1f:d7:f0:21:00:c9:bd:04:46:
c5:e8:3f:01:64:f8:96:a3:d4:ba:0c:1e:70:53:fe:47:75:5f:
63:40:df:d1:58:8d:2c:32:d5:ac:0f:31:18:e8:9d:97:6e:c0:
9c:bb:f7:50:3b:57:56:7b:c3:13:27:71:e1:39:9d:e3:d0:e0:
d7:e2:a9:61:73:3f:62:9e:4e:9a:ff:ea:da:be:0d:c4:bf:17:
0c:7f:6a:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN2rFoPsA7AQtRgnKEqx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTZiNTFlZGYzOWViZjA2NjJiMmM4MzRkNjVkMWJkMWRl
ODI1MjIwHhcNMjYwNjEzMjMwMDQ5WhcNMjYwNjE0MjMwMDQ5WjAzMTEwLwYDVQQD
EyhiNzE4NWM1ZDk4ZWM3NDFkNzdhNzVkZDFkZmFlMjhhMDc0NDljYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1coAzl7TjCv9aVlQ8L+aOTSDsEFI
RUckW1ZzuDrK4eD5vazbtD3h2ztyHnQ2JRam7y42eYFM9IxCzz/W6Hc+Pe72JKXC
NPjJRcrqNpXK4eHiZ7zHGtUGfEO7cVAJvRk37K/L2ILMSJtN7sZRZYSg8W5SSmbo
dD34DaHxYF4hzWftbFTZwG7d/Q4w0EfuHJsROEGzl6HU0a3/A3+yPxfc2YDDpe7R
gg+xGxmaE65Qa6CKD6tcCfo15h0SLJQhtcsgeyomoHYMs7X+3iU24L46tXdwrtnQ
Eap9RWIb/04mIyG/hfruFfoI20gq9RVy3y/7O8CtTcTkwfGcaegexnmkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcYXF2Y7HQdd6dd0d+uKKB0ScpkMB8GA1UdIwQY
MBaAFJ5WtR7fOevwZissg01l0b0d6CUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQt
NTYzYTE0ZTg2ZDYwLzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQtNTYzYTE0ZTg2ZDYw
LzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkWtctKj
5OfK+qIMEWNCAtEdxudO96NOj5+c7dmyf1aUbfKo8T9yeB+O8024e6jmmVnuGfD9
z0G6wXaVmmAZEDP3G07uWgq25j7jWTev01bOOqRrR7dwpnROMbp9pzEmCXMEruoo
jg+tQDcDmijC04fUnYHvuJaegj7HHFjMOmwfjyyzzZwKxDp/9+P4dksi6dcdOPRC
zqW6r7wH6CXZVoP23sVyWopkTOZYH9fwIQDJvQRGxeg/AWT4lqPUugwecFP+R3Vf
Y0Df0ViNLDLVrA8xGOidl27AnLv3UDtXVnvDEydx4Tmd49Dg1+KpYXM/Yp5Omv/q
2r4NxL8XDH9qjg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:33 2026 by rpki-client