Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: ZurgEI84/vtVdrub50L2JExU8B7y1Mi0kSWDDvlpiJc=
Subject key identifier: 97:E4:EF:99:D9:89:64:C8:C1:66:6D:07:20:7A:14:C4:BE:53:04:E9
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 01A0D011A41B72B2A8D8D5ECF7C35E7759E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1A74
Signing time: Wed 23 Sep 2026 21:00:11 +0000
Manifest this update: Wed 23 Sep 2026 21:00:11 +0000
Manifest next update: Thu 24 Sep 2026 21:00:11 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: 1Kg2GsyeTIkvUzycRD44PEQFVa1zBfwO4/kTmKxdnwg=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:a4:1b:72:b2:a8:d8:d5:ec:f7:c3:5e:77:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Sep 23 21:00:11 2026 GMT
Not After : Sep 24 21:00:11 2026 GMT
Subject: CN=97e4ef99d98964c8c1666d07207a14c4be5304e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:24:50:44:dc:5b:22:a6:35:6a:08:31:58:
c5:79:17:09:93:19:af:10:6c:ce:df:1d:c7:92:b3:
6d:53:ad:73:2c:c1:87:35:ed:1b:73:34:e2:3a:95:
b5:0f:49:16:b9:43:e7:2a:a2:64:86:8d:04:0d:50:
ba:68:2a:2a:35:73:83:42:b2:66:9d:77:af:16:5d:
2b:a3:b8:93:06:4c:8c:6b:f1:04:a0:b4:33:d6:f6:
94:e9:97:e6:d8:a3:fb:70:fd:6c:b1:b5:b9:99:ea:
99:7d:7b:7b:48:91:c4:44:73:9a:91:81:6b:48:70:
21:10:3b:5f:5b:39:e5:ac:c1:75:d4:38:b3:f1:e4:
e6:23:17:9e:e4:f7:4a:3a:a9:ca:ea:b0:c5:1d:b0:
15:a9:dd:4c:ac:c0:0e:02:77:61:1c:93:c1:aa:03:
0c:1e:34:2e:f9:c2:05:03:e4:82:83:9e:20:12:67:
ec:c8:e5:eb:76:9c:e2:4c:4b:a4:e9:aa:aa:1c:2c:
33:d6:c6:30:c0:5c:f5:b6:15:bd:82:79:96:0e:1b:
7e:7f:68:6b:0b:b5:94:aa:e6:ce:c1:84:b7:7b:e1:
09:be:e4:9c:b1:3e:fa:a7:63:2d:18:cd:53:e8:b2:
01:44:6c:44:a0:78:0f:cb:c2:7a:e3:ad:fe:f5:94:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:EF:99:D9:89:64:C8:C1:66:6D:07:20:7A:14:C4:BE:53:04:E9
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1b:98:7c:6d:49:79:f1:8e:ee:6e:3f:5a:a1:d4:d7:f9:5c:
cd:b4:4c:62:52:bd:05:7b:b7:4d:61:4a:94:22:87:ed:bd:43:
5e:89:a9:c4:a1:d2:bf:68:b5:74:89:ac:b8:5d:66:78:92:60:
06:35:2e:07:a5:1e:d8:70:14:31:19:e7:22:ea:60:19:26:ca:
1a:b1:1f:6d:3a:0b:cb:df:d9:7a:73:fd:2e:d5:ac:a4:cf:29:
20:78:62:a1:bf:f7:49:70:4f:0e:7c:a1:79:a6:21:8d:98:3c:
11:36:37:ec:7b:02:cd:c3:06:0e:3b:ac:81:b2:91:87:ee:61:
71:53:be:ba:6e:9a:b0:d6:55:3c:b3:17:f9:4e:b1:c7:58:af:
2a:e2:a8:da:aa:28:1b:cc:35:2e:bf:a3:c2:47:0b:23:e9:d3:
82:b0:51:a0:23:d9:c2:00:1d:9f:86:b8:84:10:e4:c8:6d:34:
ec:95:22:c5:01:10:99:97:ef:de:77:03:32:5e:24:13:05:ba:
5f:f2:04:9d:16:33:ec:1c:3e:6d:ef:a3:0b:d9:68:e2:84:6a:
ae:a2:a9:45:b6:d2:40:77:fd:e0:2d:1c:17:23:9a:a4:0d:f1:
89:32:12:9d:9e:b8:37:d9:24:45:e9:a9:62:1f:e9:44:b8:4a:
cc:3d:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:35 2026 by rpki-client