Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: FTSwCZjzmez3JO9bRDPgD0R4YNcYwlvVn4I70LO/znA=
Subject key identifier: EB:AA:15:88:5F:89:7B:CE:A2:5D:14:99:EC:CA:5B:08:B6:4B:C5:B4
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 019FAC3F2D242EEC757D263F2847046E9365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 0C4D
Signing time: Wed 29 Jul 2026 05:00:49 +0000
Manifest this update: Wed 29 Jul 2026 05:00:49 +0000
Manifest next update: Thu 30 Jul 2026 05:00:49 +0000
Files and hashes: 1: KggeSoYJuTH0OsCrW287o_IBVIU.roa (hash: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: pZDGknzCRvvDd77oJU0jvw4NXnrUNScjZTJ1uaiw9SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:2d:24:2e:ec:75:7d:26:3f:28:47:04:6e:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Jul 29 05:00:49 2026 GMT
Not After : Jul 30 05:00:49 2026 GMT
Subject: CN=ebaa15885f897bcea25d1499ecca5b08b64bc5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:86:f9:27:e0:c7:de:a6:64:71:52:6f:aa:
ea:47:c1:28:d9:87:5a:3b:09:eb:9b:53:dd:c0:34:
8b:3f:e8:ec:66:89:c5:53:a0:e7:26:d9:8a:23:51:
2b:0a:4c:de:0e:05:b9:69:d7:11:eb:3b:43:b7:ec:
0d:38:b4:07:f5:4e:de:7c:c0:30:a9:f0:18:c5:6b:
6d:59:da:d3:2d:14:8b:aa:96:ac:a8:49:85:58:22:
1a:f7:9e:52:50:2c:56:37:f9:6b:2d:9f:78:67:3f:
22:9d:38:fd:ae:c7:e9:75:60:27:f9:b5:d6:e6:6e:
7a:95:74:96:6c:37:ac:45:60:40:9a:33:ef:f7:98:
be:1f:18:be:5c:cd:f3:3c:56:ac:42:a0:9c:c6:9b:
a5:4d:df:7c:3a:dc:e8:9c:67:10:b5:a5:94:3b:f1:
47:e8:d8:f8:2b:bd:91:0d:b2:89:0f:7c:9d:e3:91:
a1:e1:8b:08:ea:cf:b5:8e:ca:2e:12:ff:d8:0f:b8:
a2:16:e8:bb:0f:b1:17:de:fa:09:c6:3e:0d:cf:fc:
66:c3:b9:8c:f8:66:a9:a9:dd:09:3d:21:29:78:d0:
50:83:c4:ef:ea:c6:47:e4:8f:d7:0f:48:67:ca:e3:
a4:30:c1:c1:2e:cf:de:b8:1d:f5:df:be:33:30:e3:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:15:88:5F:89:7B:CE:A2:5D:14:99:EC:CA:5B:08:B6:4B:C5:B4
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:bb:68:96:11:d2:cc:98:28:67:cb:8a:15:b0:1d:e8:e1:
c6:e4:75:0d:11:81:a4:1c:02:3c:55:0a:f4:3d:4f:09:17:3f:
6f:6d:8d:c8:cc:36:30:93:bb:a8:21:42:da:3d:57:13:48:08:
15:f9:e3:88:a1:b1:7f:03:f6:a4:63:3e:81:07:8c:7c:af:89:
1e:c5:f4:a3:8f:10:ce:71:0f:4f:7f:c7:35:40:06:19:36:9d:
df:8c:72:ea:19:0e:cb:74:79:71:1b:89:96:2f:74:78:d9:e0:
f8:7c:d9:de:a1:6c:38:0b:a6:54:a8:4b:8b:0a:2c:9f:10:be:
17:90:0c:19:09:61:4e:a8:54:f5:72:7c:88:88:0b:4f:4c:12:
2f:18:4e:f7:96:62:01:e3:e3:6a:e8:73:b7:10:e0:ad:2c:71:
fc:e5:2b:e1:f6:b7:28:38:5d:7c:59:f7:71:25:e8:4f:c5:7b:
46:9d:97:47:56:a1:72:be:d2:86:79:c5:dc:bc:db:62:03:31:
b2:7e:09:01:0e:a8:7d:9f:74:d4:5b:0a:37:c8:a3:51:aa:9b:
5f:f0:54:89:15:e1:75:81:d4:f0:fb:b4:3e:f9:73:d6:6b:b6:
9c:f4:a7:c9:28:b3:c1:ed:b1:d2:ff:a8:83:7c:63:b1:3a:87:
57:78:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:19 2026 by rpki-client