Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: A2SAGVjthJ0f8LEVr6ZzGr4ME9sLYmmd02aAtrzrx1c=
Subject key identifier: 42:25:70:7E:88:A2:5E:89:2B:D4:DA:EC:96:0D:46:F3:64:AC:F3:F5
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019E1CB4830E679B8A2A35B4E27D0B845B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 15:00:52 +0000
Manifest this update: Tue 12 May 2026 15:00:52 +0000
Manifest next update: Wed 13 May 2026 15:00:52 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: C/W/dKGQleDel5EVjYLH4DjwKZTB1YseuLqj+cisQ+s=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:83:0e:67:9b:8a:2a:35:b4:e2:7d:0b:84:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: May 12 15:00:52 2026 GMT
Not After : May 13 15:00:52 2026 GMT
Subject: CN=4225707e88a25e892bd4daec960d46f364acf3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:67:23:91:a8:1c:15:06:8f:a8:d3:47:27:
63:4b:e1:c0:12:d0:04:a5:49:ef:fb:58:ff:ac:c3:
c1:35:7c:2d:76:4d:cd:90:c6:58:21:ae:06:b3:a9:
73:31:72:8a:7e:b6:89:51:ab:1f:6b:e1:60:58:0e:
5a:7f:ac:f7:9a:c5:4c:c3:76:fc:54:4e:ef:20:72:
35:f7:cb:cb:47:f2:5a:ad:65:00:12:6f:37:12:3c:
2b:b8:98:e5:f1:d9:a6:47:a0:5b:b2:ba:07:9f:27:
51:7c:ff:9e:6c:72:51:c6:f4:da:e0:0c:19:c4:72:
3c:8f:62:c5:3b:4e:d1:ca:8e:f2:6e:bc:27:4c:2a:
60:f1:7e:0c:b0:0b:7f:fc:cc:01:60:3a:95:a5:ab:
7e:45:fd:15:cd:ee:7e:31:0d:1f:d4:9d:be:07:19:
39:0a:a1:9a:ba:22:7b:87:a2:ac:32:f8:3b:48:3e:
41:aa:ee:7c:1a:b4:5f:e3:5e:95:8d:8b:15:1b:03:
2c:a4:ce:1a:0d:c3:71:e4:a5:01:9f:53:03:96:89:
89:ab:43:1c:28:ce:ad:49:e5:8d:25:4d:01:43:c4:
29:f1:17:26:84:a3:52:4b:02:c3:10:86:09:4a:a0:
0d:10:31:6b:3a:04:ec:ae:f9:88:d0:bb:ce:a5:91:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:70:7E:88:A2:5E:89:2B:D4:DA:EC:96:0D:46:F3:64:AC:F3:F5
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:37:c4:c1:71:03:31:46:b1:8a:ac:89:e9:75:96:54:07:79:
81:b6:d0:2a:4d:50:70:af:3e:9b:a8:19:1e:40:32:b0:a7:8b:
21:91:11:68:13:02:0e:fd:b8:81:45:9f:52:5d:b9:d1:c0:46:
c0:53:77:cc:77:54:5e:af:32:37:e0:b7:b2:ae:fa:be:85:c7:
13:d8:b1:48:6d:d5:41:dd:e0:60:92:c9:26:df:e2:af:48:ae:
57:34:19:c5:6f:1f:ec:47:fb:73:bc:b0:72:7e:5d:2e:43:47:
a4:a4:1c:12:99:06:fa:0e:83:df:3a:2b:e2:76:41:88:0d:db:
b4:1e:0c:dc:de:80:9c:f0:b6:78:1c:0f:30:ce:6f:5f:e8:45:
da:bc:ec:3f:05:8c:16:f9:72:43:88:9c:40:3b:87:3d:25:3c:
f6:41:5f:ea:6b:73:d9:86:12:33:a9:fd:3e:33:aa:cb:e3:25:
6d:05:08:00:be:ab:69:a8:d6:f7:82:70:50:7e:5b:e9:a9:e7:
0e:d5:3d:92:2d:5c:d3:42:cd:3c:18:ab:31:87:48:f4:28:b0:
3b:a7:f7:20:26:e1:fd:60:7d:28:12:2a:7a:a2:77:54:d2:3d:
8a:fb:bb:a6:86:aa:52:de:7d:1d:f6:12:e2:e3:b9:16:63:16:
3c:1e:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:32 2026 by rpki-client