Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
File: nhuhZT_KfIAXI8pG_0Qua6wekaA.mft (raw, json)
Hash identifier: MMF78mLFjgEgEXP8w4g14IHn1AGOXVZxaENveBkWLuM=
Subject key identifier: BC:23:3E:45:03:BC:A2:BB:FC:14:76:CF:5D:36:3F:3D:86:E2:6D:DD
Authority key identifier: 9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
Certificate issuer: /CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Certificate serial: 01A1325947B6E892927A4030204596D0032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
Manifest number: 0D17
Signing time: Mon 12 Oct 2026 23:01:14 +0000
Manifest this update: Mon 12 Oct 2026 23:01:14 +0000
Manifest next update: Tue 13 Oct 2026 23:01:14 +0000
Files and hashes: 1: KggeSoYJuTH0OsCrW287o_IBVIU.roa (hash: 3X9Kd87JdDMTWZvK8kLFjDZVe2SDW7wiUWXk0sGtCM8=)
2: nhuhZT_KfIAXI8pG_0Qua6wekaA.crl (hash: jmQUo62pk162RS8ibf+cmehxXBz1GElhZrTnx/mtA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:47:b6:e8:92:92:7a:40:30:20:45:96:d0:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ba1653fca7c801723ca46ff442e6bac1e91a0
Validity
Not Before: Oct 12 23:01:14 2026 GMT
Not After : Oct 13 23:01:14 2026 GMT
Subject: CN=bc233e4503bca2bbfc1476cf5d363f3d86e26ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:85:ff:15:cd:2a:2a:d0:b7:65:6d:32:93:
b0:fc:c9:e8:e2:08:90:05:70:fa:a2:71:01:f1:d9:
a3:3b:4e:e9:0b:49:91:24:d8:63:37:b7:44:11:06:
70:3d:29:17:d7:36:6b:81:39:50:d3:5b:41:b1:17:
8b:cf:f1:4f:21:79:11:0b:0d:d4:06:ab:a1:d2:0a:
df:b4:dd:93:7b:bd:dd:d5:67:5e:bf:d3:ba:ca:3f:
99:12:67:c9:cf:4b:92:06:6b:20:03:8f:04:41:64:
ef:d3:d8:fc:6c:6b:f2:da:cf:f6:db:db:67:35:75:
83:cb:b1:1e:15:36:3a:0e:29:81:05:5a:d8:95:ae:
b5:69:e9:09:24:31:55:8b:f9:f1:ed:82:cd:1f:18:
f0:c3:e0:39:5d:47:6c:a2:73:a7:a4:ba:5e:b7:e3:
53:cb:09:28:ee:4a:e0:83:9b:e9:e2:80:5b:4c:0f:
7c:c7:59:8c:d1:e4:e4:ac:81:6b:de:e3:71:01:95:
c7:ae:8b:30:6d:38:7f:e0:f7:f2:5b:8c:4d:68:67:
45:6f:e9:1a:9e:58:cf:22:18:ea:37:2b:81:d9:0e:
a1:ea:f6:94:36:93:4f:4d:f7:bd:ce:d8:17:6e:1a:
ff:f2:62:26:69:67:f4:84:e4:7c:f6:66:c3:b8:fa:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:3E:45:03:BC:A2:BB:FC:14:76:CF:5D:36:3F:3D:86:E2:6D:DD
X509v3 Authority Key Identifier:
keyid:9E:1B:A1:65:3F:CA:7C:80:17:23:CA:46:FF:44:2E:6B:AC:1E:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhuhZT_KfIAXI8pG_0Qua6wekaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/389424-aaba-4491-9fba-fcb43d4f6714/1/nhuhZT_KfIAXI8pG_0Qua6wekaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fd:ca:a7:d6:58:30:aa:ba:83:b9:0a:80:4e:29:19:85:7f:
b5:33:75:0b:a3:e3:aa:75:be:d2:de:ec:43:14:3c:97:c4:d4:
a2:99:79:6d:c1:38:cc:a1:37:0e:6a:2b:d4:0b:f2:79:ff:10:
67:43:3b:69:77:97:5e:89:91:60:33:8e:91:3a:13:07:2e:f3:
e4:3f:34:0a:b0:30:d0:88:53:6f:38:68:7a:a7:ba:f1:34:b1:
f4:22:b9:a8:c6:22:d9:90:79:53:4b:a7:e2:eb:44:6b:97:77:
20:8b:85:e8:18:5f:18:07:dc:0c:44:16:cc:8c:92:ed:0d:69:
f7:78:6a:71:94:70:a8:ce:e9:47:b1:a9:7e:0f:39:41:98:2d:
29:2e:2d:ab:e8:0d:71:99:eb:2a:22:95:c4:b7:60:c6:69:6c:
96:72:80:5d:32:55:94:4d:ef:b1:c3:8e:ce:ad:0b:59:f7:55:
dc:8e:c9:cc:b1:4f:db:52:d8:44:bd:4e:6e:d0:41:75:36:cb:
df:9b:0a:0f:6d:a4:25:2f:e5:08:85:f2:ac:96:e0:3a:0c:0c:
3f:da:2a:2c:2a:4a:a5:7e:73:6c:cb:1a:d0:32:a7:54:07:40:
aa:91:c7:3b:22:97:49:81:db:a7:9a:5d:31:34:73:2a:90:a7:
4b:f5:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:34:22 2026 by rpki-client