Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json)
Hash identifier: YjJcCyDeuej/XEMzNu+7ZnLLp85a2wQCxerehWBijnU=
Subject key identifier: D6:9E:60:3C:E6:A5:5C:48:A7:15:5E:A8:9C:04:B5:57:A5:F8:65:D4
Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Certificate serial: 01A0CCA36F021A7AB90E57F623C29F5E9552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
Manifest number: 0385
Signing time: Wed 23 Sep 2026 05:00:57 +0000
Manifest this update: Wed 23 Sep 2026 05:00:57 +0000
Manifest next update: Thu 24 Sep 2026 05:00:57 +0000
Files and hashes: 1: RN1T4vywmwHPQadFEzInHppFeFE.roa (hash: A8eCa7/kNYjBFHFZcIxv83rfbT0LWEh2Tlp7MoHKDsw=)
2: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: 09zbEhcuJjVsc3vR3qvPe5do3ZGGDbt0XQC4BgZCGR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:6f:02:1a:7a:b9:0e:57:f6:23:c2:9f:5e:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522
Validity
Not Before: Sep 23 05:00:57 2026 GMT
Not After : Sep 24 05:00:57 2026 GMT
Subject: CN=d69e603ce6a55c48a7155ea89c04b557a5f865d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:31:e0:95:64:ef:e9:76:3b:df:af:08:bb:
da:ba:81:ce:65:3a:b8:3e:b7:d0:8a:15:24:d0:d0:
6f:c3:2a:db:8b:46:a4:8d:07:cc:bb:1a:8a:90:01:
91:2f:a7:c0:63:fb:72:e0:80:44:f2:83:28:fc:85:
ff:a6:48:7a:46:fd:b4:02:0c:b8:62:d6:2f:41:f2:
b1:54:29:77:ec:5b:64:e1:80:a6:40:c3:ff:3f:41:
8c:5a:84:fb:98:c3:6f:55:6f:36:41:8b:6d:07:80:
da:5d:63:4e:c2:a3:f4:71:49:1b:11:a1:39:73:7e:
ce:04:47:f1:8d:2b:61:cc:17:66:3e:e4:2e:ea:cf:
36:7d:a9:01:08:96:fb:d0:ea:60:42:9e:7a:16:bd:
e0:21:0c:48:a9:86:ee:cf:8f:b8:11:b4:4a:b8:66:
3d:f6:cd:3f:2f:82:ba:20:b9:8e:72:77:b3:70:8e:
ec:bf:4b:9d:fe:ed:03:13:bd:d4:d9:a0:22:91:6c:
10:48:0f:d3:9f:c5:c9:6a:b6:c1:de:c4:9b:0a:80:
49:a7:3e:69:43:71:8a:7b:1a:12:74:42:bf:46:fa:
ac:40:f4:d5:9d:3e:37:a0:19:42:3e:dc:ad:98:81:
6a:05:a7:5c:bf:f4:c6:94:ee:63:3d:33:c7:77:fc:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:60:3C:E6:A5:5C:48:A7:15:5E:A8:9C:04:B5:57:A5:F8:65:D4
X509v3 Authority Key Identifier:
keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:da:bf:64:17:3d:f5:25:c5:09:c7:75:73:c5:43:90:15:68:
2a:97:b3:b4:c8:ac:c6:cf:48:fc:8a:3b:db:f8:2b:80:16:f4:
ae:8b:57:41:ab:18:13:96:c4:db:86:ea:d7:bf:a8:1a:34:ca:
71:0d:26:ee:a0:3d:92:ba:95:e1:ba:0c:c6:fc:d0:cb:8a:1a:
cb:16:a2:02:82:73:df:ac:1b:af:02:b3:a8:88:f5:36:6b:6d:
e1:60:28:7b:ca:ac:a9:a5:b4:24:80:26:86:07:c6:16:c7:f4:
68:df:0a:dc:a7:2d:c0:e7:b0:12:9d:a9:4b:ce:6c:76:04:92:
83:26:d7:db:1c:74:af:b0:cd:4d:dd:76:8e:b3:4e:83:43:87:
26:02:f0:95:3b:d2:f2:11:26:f5:5d:34:6a:0c:ba:07:55:fe:
5f:4d:4a:99:5b:6c:d8:a6:ad:06:01:ed:40:a2:91:b2:5b:51:
82:09:86:32:7f:01:1d:02:53:78:77:7c:b8:6e:30:12:a9:43:
cc:08:5f:f5:26:09:27:77:4e:6a:85:82:75:23:91:e6:16:fd:
f8:98:fd:9a:82:0b:bc:f7:d4:fe:f2:b7:9d:75:f1:48:ab:ad:
44:2b:97:d0:5b:ef:4f:f0:e9:b5:92:9a:15:b7:ea:e0:39:53:
ab:24:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:32:36 2026 by rpki-client