Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: WUOfX9CuvxhdXn5E/X62M8XfMNluxm+UhCtK90u9NGI=
Subject key identifier: F5:D5:0D:35:3A:92:E7:8F:26:87:19:A6:DA:5B:BD:A6:9A:18:70:3A
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 01A130A19189B831EF47F6C17698E86A0AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1AA6
Signing time: Mon 12 Oct 2026 15:00:57 +0000
Manifest this update: Mon 12 Oct 2026 15:00:57 +0000
Manifest next update: Tue 13 Oct 2026 15:00:57 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: 3HkoCvf8e3kkRctMN5kfn4luUXpkD5jXW+FUvqwVh/g=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:91:89:b8:31:ef:47:f6:c1:76:98:e8:6a:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Oct 12 15:00:57 2026 GMT
Not After : Oct 13 15:00:57 2026 GMT
Subject: CN=f5d50d353a92e78f268719a6da5bbda69a18703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:e7:ae:08:58:0d:90:6e:f8:01:0b:91:22:
20:8d:23:bb:5b:9e:4e:ca:65:5e:ca:f4:ec:63:78:
c9:76:1d:6b:8d:6c:ca:af:84:24:3a:07:e4:91:78:
46:6e:c2:c6:35:82:39:99:72:aa:0e:62:c4:f3:d0:
04:47:b1:04:c5:76:19:08:d4:f0:f4:20:ab:4a:2a:
cb:cf:22:6f:a4:8f:47:ac:55:d8:d7:50:21:41:ba:
25:9f:54:3f:b6:70:e8:f7:77:41:27:e0:0b:79:cd:
14:7e:6e:eb:b4:1d:02:17:0c:a1:bc:95:12:07:02:
9b:0c:da:b8:31:c9:35:06:2a:da:ee:d4:ea:a6:e5:
58:02:09:b8:21:8e:44:76:0e:e0:81:67:7d:a9:b5:
b0:58:d0:58:c0:10:af:32:4f:8b:dd:87:19:a5:40:
46:ff:f0:2c:46:0a:be:5d:d3:c2:ef:b6:d9:9b:d9:
da:a7:37:54:5b:8a:fb:d2:93:6e:a3:1a:d9:bd:2f:
1d:a3:a4:db:3e:40:ee:e2:25:4d:22:87:e5:4d:75:
6e:cf:ae:59:87:93:73:36:36:5e:38:56:9b:9b:65:
89:2c:dc:aa:05:20:ca:53:97:e9:38:9b:82:2b:de:
3b:a4:03:7d:4d:85:67:0d:02:bb:a2:22:1d:03:0b:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:0D:35:3A:92:E7:8F:26:87:19:A6:DA:5B:BD:A6:9A:18:70:3A
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:d9:96:07:71:d4:cc:6d:21:f4:3e:28:fd:52:c2:93:b1:
02:93:56:15:63:c3:6c:77:a4:1f:ef:43:7d:82:1e:68:62:9b:
ea:83:09:c4:fe:da:9b:44:00:12:a5:cf:5c:9a:55:ce:63:76:
6e:03:b7:0e:2d:9a:cd:a5:b3:dc:14:92:ea:78:41:ce:e0:9c:
87:28:61:0e:e4:0b:b5:cf:21:bf:c7:7b:bd:08:82:2f:d9:64:
88:75:cc:49:62:8b:f9:6a:ec:6c:70:76:19:24:9b:a4:ec:2f:
19:86:5c:c7:9a:d5:c1:dc:ea:4d:17:a3:a2:cb:1f:13:3b:19:
c3:14:c9:c6:5e:e4:fd:53:2a:4b:5e:fe:e9:1d:75:d3:58:1d:
a9:f7:98:10:fa:19:0b:a9:34:ff:9b:4f:93:b6:16:93:30:29:
fc:91:c7:27:08:69:8b:cb:cc:b2:85:4a:7e:86:e4:c4:5f:12:
cd:33:db:15:f6:d0:5e:a0:28:6b:3c:55:bd:5a:0e:e4:02:e6:
95:7e:ae:5c:2b:3a:86:b9:35:0e:72:ad:4b:6a:ed:40:bb:23:
d3:a6:6e:90:62:0e:0a:44:d8:91:02:62:de:cc:dc:49:ea:27:
f0:a0:45:79:47:01:21:fb:11:ae:83:6f:51:c1:f8:ec:5f:46:
9b:af:82:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwoZGJuDHvR/bBdpjoagrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz
ZmZhZjQwHhcNMjYxMDEyMTUwMDU3WhcNMjYxMDEzMTUwMDU3WjAzMTEwLwYDVQQD
EyhmNWQ1MGQzNTNhOTJlNzhmMjY4NzE5YTZkYTViYmRhNjlhMTg3MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlejnrghYDZBu+AELkSIgjSO7W55O
ymVeyvTsY3jJdh1rjWzKr4QkOgfkkXhGbsLGNYI5mXKqDmLE89AER7EExXYZCNTw
9CCrSirLzyJvpI9HrFXY11AhQboln1Q/tnDo93dBJ+ALec0Ufm7rtB0CFwyhvJUS
BwKbDNq4Mck1Bira7tTqpuVYAgm4IY5Edg7ggWd9qbWwWNBYwBCvMk+L3YcZpUBG
//AsRgq+XdPC77bZm9napzdUW4r70pNuoxrZvS8do6TbPkDu4iVNIoflTXVuz65Z
h5NzNjZeOFabm2WJLNyqBSDKU5fpOJuCK947pAN9TYVnDQK7oiIdAwsIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXVDTU6kuePJocZptpbvaaaGHA6MB8GA1UdIwQY
MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt
MjI2OGU5N2E4YmMxLzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx
LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfrZlgdx
1MxtIfQ+KP1SwpOxApNWFWPDbHekH+9DfYIeaGKb6oMJxP7am0QAEqXPXJpVzmN2
bgO3Di2azaWz3BSS6nhBzuCchyhhDuQLtc8hv8d7vQiCL9lkiHXMSWKL+WrsbHB2
GSSbpOwvGYZcx5rVwdzqTRejossfEzsZwxTJxl7k/VMqS17+6R1101gdqfeYEPoZ
C6k0/5tPk7YWkzAp/JHHJwhpi8vMsoVKfobkxF8SzTPbFfbQXqAoazxVvVoO5ALm
lX6uXCs6hrk1DnKtS2rtQLsj06ZukGIOCkTYkQJi3szcSeon8KBFeUcBIfsRroNv
UcH47F9Gm6+CsA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:54:44 2026 by rpki-client