Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: P83T+d4Aih3KnQaoN0RT/YHfuZcD/Nw0195mcxqSZNw=
Subject key identifier: C5:6B:C7:B3:EB:D6:90:D0:1B:92:46:A1:2C:59:7B:7B:6D:27:A4:5E
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 01A1DA9479A6631570003D11000C4235912A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1AFE
Signing time: Sat 14 Nov 2026 15:02:05 +0000
Manifest this update: Sat 14 Nov 2026 15:02:05 +0000
Manifest next update: Sun 15 Nov 2026 15:02:05 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: zxvXJrdX1vsmCuX8RAoyOTNS6Jn9AsG9NyzzAOuZal0=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:79:a6:63:15:70:00:3d:11:00:0c:42:35:91:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Nov 14 15:02:05 2026 GMT
Not After : Nov 15 15:02:05 2026 GMT
Subject: CN=c56bc7b3ebd690d01b9246a12c597b7b6d27a45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:29:eb:90:16:10:d9:5d:b8:ab:74:17:47:
9c:b6:dd:c0:ab:0b:a7:3f:98:c6:ac:b5:16:a3:45:
ec:16:d3:13:33:46:5d:b1:16:5a:fd:1f:56:5c:15:
fb:29:2d:fe:ae:a9:6e:d5:27:7e:e4:46:1f:67:9d:
4a:77:05:a5:89:70:6f:71:fa:fb:e8:00:77:14:d1:
94:d4:85:fa:29:fd:2f:5e:e0:31:8a:06:41:4e:65:
cb:4e:f9:74:e9:8e:b6:72:47:e4:fc:55:78:f2:a3:
47:be:fd:e1:91:ed:6b:58:5f:a8:95:b4:96:1b:9a:
cb:d6:03:78:8a:7e:84:b8:12:fc:4f:c5:59:75:50:
4e:51:33:71:1c:b6:7a:ae:cd:9f:57:a9:7b:ae:bf:
31:04:59:2c:0a:bf:c4:9b:88:01:38:69:05:63:f8:
3c:be:d1:0c:91:0e:8b:0e:15:4f:46:74:eb:42:1e:
bf:46:56:4c:89:9f:b1:3c:86:39:5d:8c:bf:b1:38:
5a:54:6c:12:ed:a3:34:ce:1f:af:48:4e:e6:fb:45:
21:2c:24:70:72:a7:9f:ae:09:25:ba:3a:52:b4:88:
61:4e:3a:ee:36:f7:6b:96:0e:38:fe:2d:dc:36:48:
7a:0c:9a:ac:44:be:a8:43:4f:e6:ce:fb:f7:cc:d5:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:C7:B3:EB:D6:90:D0:1B:92:46:A1:2C:59:7B:7B:6D:27:A4:5E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c2:eb:33:89:8b:3f:36:81:78:d6:2b:7c:9d:56:b1:45:7a:
19:0f:eb:d3:0e:95:dc:e4:05:ac:e9:8a:3d:72:24:7b:d9:c5:
77:03:6f:ac:80:60:31:80:1b:76:8b:ca:02:6e:67:bb:cc:0a:
96:a6:4f:26:3c:11:1d:16:fa:03:15:a8:36:90:4d:b0:02:f5:
f9:e0:c6:bf:3c:bf:69:71:e3:84:e6:7e:f3:5d:db:c2:d2:05:
98:f3:bb:8f:0a:0f:96:f0:75:4d:4f:5a:24:3d:4d:f6:33:99:
39:be:56:90:6a:0b:dc:69:74:49:35:d6:8f:e1:03:d1:a8:54:
2e:ae:bb:61:24:ee:a3:a3:0b:b1:37:48:9e:a0:61:06:19:aa:
e2:f9:d3:12:6d:c4:e9:0c:b3:9f:29:2b:bd:01:4b:6b:a7:c6:
2c:5d:d8:bd:5b:7b:a5:1f:e3:b5:47:9b:3a:a5:95:a2:a9:66:
5b:8e:8b:b8:19:9b:57:1d:1a:60:bd:a3:74:42:7f:3e:ae:9a:
49:b6:5a:0b:43:e3:0f:8d:c9:02:c5:68:ed:07:9d:82:c2:ce:
02:24:0a:e0:d3:47:3e:18:31:a7:59:19:c7:5d:37:d5:09:d3:
3f:05:7b:8f:1f:f1:ca:e0:7f:9c:fa:b8:2e:6f:c8:c8:69:eb:
49:95:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:40:17 2026 by rpki-client