Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: nz6Uw6wzHjU8BOH8+KRVRcEv/3JM/iqZrW7ZSYIyQZ0=
Subject key identifier: DC:34:77:AA:2D:2A:33:00:9D:AE:68:90:1D:A8:44:D2:4F:1E:A7:DD
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 019DA56717D85EA5FD77DB473A9A03084569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 01E3
Signing time: Sun 19 Apr 2026 11:01:30 +0000
Manifest this update: Sun 19 Apr 2026 11:01:30 +0000
Manifest next update: Mon 20 Apr 2026 11:01:30 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: e/IK8sr59GuirfpGLyVY/x/u0etJY1+sJUOUIYc9Sdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:17:d8:5e:a5:fd:77:db:47:3a:9a:03:08:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Apr 19 11:01:30 2026 GMT
Not After : Apr 20 11:01:30 2026 GMT
Subject: CN=dc3477aa2d2a33009dae68901da844d24f1ea7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:27:14:ae:b8:0c:80:40:26:73:c1:a4:cc:
15:28:ee:ab:7f:3d:88:b3:d1:72:24:78:3b:8b:3e:
da:3f:0f:e8:a9:65:be:2e:6b:01:b5:db:01:eb:02:
40:11:db:98:85:6d:90:52:00:a3:ee:5d:31:a2:c0:
a3:95:96:32:c5:59:d3:9c:1d:de:ce:9c:e3:d7:78:
05:fb:01:3c:7e:70:d3:a9:b9:9c:81:14:50:33:03:
4c:2e:5e:04:d4:53:17:96:9e:08:aa:70:cd:ef:a4:
f3:24:68:e9:a2:bb:5d:f1:bd:12:a8:f5:86:31:2d:
d4:5d:6b:8f:61:35:6c:76:b7:90:33:37:fc:00:85:
a2:1f:03:fc:45:15:78:7d:cd:61:4b:2c:bc:3e:fc:
60:b6:aa:12:cb:91:91:d6:89:f2:d6:e8:6c:73:00:
1b:9e:7f:68:36:a6:a2:96:13:26:e5:8c:17:d1:d1:
8d:6e:1e:45:b6:c3:c0:c5:6b:45:f7:8f:05:b9:4c:
f7:76:5d:6f:d3:b2:ef:53:eb:55:cf:6d:85:3b:75:
55:f2:b6:ac:cb:74:58:47:46:8c:e5:72:66:da:9e:
eb:f0:c8:e5:6f:4f:a2:be:48:05:75:19:36:0a:0e:
47:53:cc:d0:a7:c4:ab:50:60:34:85:32:fc:86:24:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:77:AA:2D:2A:33:00:9D:AE:68:90:1D:A8:44:D2:4F:1E:A7:DD
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:36:46:24:1a:b3:3e:ec:55:0b:7e:73:13:22:28:38:f4:
39:82:a2:d5:65:f9:dc:91:01:b9:64:fd:a6:5f:64:e4:72:2a:
5e:48:8d:5d:ef:56:55:1d:16:c0:36:76:40:8e:2e:03:83:95:
d6:38:1a:ce:eb:33:85:20:06:a2:1e:3a:b1:ba:67:54:b6:79:
5e:75:a3:d6:f4:31:bf:2b:fc:38:b6:ce:a5:d1:4e:b1:e0:d7:
dd:7b:03:37:48:4c:67:19:5f:42:af:85:e3:65:20:7d:d9:49:
d1:bf:5a:8a:82:f5:87:2c:63:14:17:7d:08:5e:3e:0a:16:92:
8f:b3:1a:8b:13:34:c5:69:d2:de:22:e1:25:4f:89:c1:6d:df:
74:a0:d6:8a:55:74:d6:39:5f:19:ea:ed:c3:6e:41:ba:0a:13:
c4:11:f1:9e:1e:9a:48:64:9f:32:94:0c:a3:95:7d:b6:f1:47:
8c:87:5e:9a:3e:0c:40:df:c9:50:7f:d5:39:dd:8f:82:ed:ca:
1d:be:01:23:88:3c:1f:b2:98:97:1a:bd:46:7d:44:2f:59:d9:
bd:f6:5f:48:16:24:90:d2:0c:61:fb:14:47:02:54:15:27:18:
4a:55:67:ef:94:c5:5f:40:8a:f4:cc:38:ca:e4:d3:0c:0c:8a:
0a:18:e4:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZxfYXqX9d9tHOpoDCEVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTZiNTFlZGYzOWViZjA2NjJiMmM4MzRkNjVkMWJkMWRl
ODI1MjIwHhcNMjYwNDE5MTEwMTMwWhcNMjYwNDIwMTEwMTMwWjAzMTEwLwYDVQQD
EyhkYzM0NzdhYTJkMmEzMzAwOWRhZTY4OTAxZGE4NDRkMjRmMWVhN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIknFK64DIBAJnPBpMwVKO6rfz2I
s9FyJHg7iz7aPw/oqWW+LmsBtdsB6wJAEduYhW2QUgCj7l0xosCjlZYyxVnTnB3e
zpzj13gF+wE8fnDTqbmcgRRQMwNMLl4E1FMXlp4IqnDN76TzJGjportd8b0SqPWG
MS3UXWuPYTVsdreQMzf8AIWiHwP8RRV4fc1hSyy8PvxgtqoSy5GR1ony1uhscwAb
nn9oNqailhMm5YwX0dGNbh5FtsPAxWtF948FuUz3dl1v07LvU+tVz22FO3VV8ras
y3RYR0aM5XJm2p7r8Mjlb0+ivkgFdRk2Cg5HU8zQp8SrUGA0hTL8hiSiCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw0d6otKjMAna5okB2oRNJPHqfdMB8GA1UdIwQY
MBaAFJ5WtR7fOevwZissg01l0b0d6CUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQt
NTYzYTE0ZTg2ZDYwLzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQtNTYzYTE0ZTg2ZDYw
LzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo42RiQa
sz7sVQt+cxMiKDj0OYKi1WX53JEBuWT9pl9k5HIqXkiNXe9WVR0WwDZ2QI4uA4OV
1jgazuszhSAGoh46sbpnVLZ5XnWj1vQxvyv8OLbOpdFOseDX3XsDN0hMZxlfQq+F
42UgfdlJ0b9aioL1hyxjFBd9CF4+ChaSj7MaixM0xWnS3iLhJU+JwW3fdKDWilV0
1jlfGertw25BugoTxBHxnh6aSGSfMpQMo5V9tvFHjIdemj4MQN/JUH/VOd2Pgu3K
Hb4BI4g8H7KYlxq9Rn1EL1nZvfZfSBYkkNIMYfsURwJUFScYSlVn75TFX0CK9Mw4
yuTTDAyKChjkyA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:20 2026 by rpki-client