Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: MZNZXYdNzcvcumW4kKdkq9gvxxXZcp5AjnBu5jD7+4I=
Subject key identifier: 41:E0:89:3B:3C:88:26:4A:62:38:69:EC:9F:6B:E2:3F:DA:F3:AD:28
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019D27725964E2B60B9B6A30F85C201D60A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: 0VzOvPI6ki8cPlvFksoWvpg+06rZGJQcgoqjprpRM/4=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:59:64:e2:b6:0b:9b:6a:30:f8:5c:20:1d:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=41e0893b3c88264a623869ec9f6be23fdaf3ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:8e:65:55:38:17:ed:be:bb:b0:fb:1e:9e:
08:a3:80:48:b8:0c:5b:16:f7:05:fe:25:53:f4:68:
a2:04:ba:7f:67:88:0f:fc:eb:bd:e4:68:51:f7:6d:
b3:a3:a1:2a:fd:b7:4f:db:30:74:49:d4:81:7c:67:
b9:ff:64:16:6d:9f:f2:13:a7:21:1b:36:0e:f8:88:
ed:0b:6c:34:64:75:d8:d2:af:40:4c:e2:2c:16:eb:
fa:cd:13:ef:a3:f6:45:43:0e:79:da:af:96:31:98:
59:31:73:7b:eb:0c:c2:80:37:7a:5c:29:9d:cc:05:
a0:a7:77:71:d1:30:86:d1:39:68:88:94:52:cb:f8:
cc:96:bd:fc:71:cf:aa:2b:b2:c6:bc:29:15:c8:b2:
54:34:6a:c5:8c:d4:56:d5:5d:55:35:88:74:cc:17:
bb:7a:e5:91:f5:a0:4e:ad:ff:64:75:f7:0c:8a:5f:
25:66:69:5f:5c:84:59:c8:52:7a:8e:c8:52:59:03:
b9:64:f1:2b:0b:85:29:3c:c3:fc:82:94:ae:7f:9d:
73:22:54:ca:fa:7a:3f:c3:f5:74:b2:22:2f:08:40:
76:67:c9:aa:25:65:9a:22:29:20:05:eb:4c:57:67:
9e:4b:8b:17:67:a8:5e:98:0b:5d:3d:92:78:4e:a6:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:89:3B:3C:88:26:4A:62:38:69:EC:9F:6B:E2:3F:DA:F3:AD:28
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6b:83:7a:41:85:18:bb:38:55:82:21:e6:71:ac:3e:c5:96:
c1:c5:31:9f:98:20:5d:82:36:b0:a9:c1:ea:78:e6:cf:46:24:
a5:6a:84:c5:84:08:01:4a:cd:f1:1c:6e:c3:b3:8a:b2:27:16:
85:d5:8f:2a:01:71:07:ee:da:99:37:08:0a:e3:bf:87:ca:97:
9b:63:4b:28:38:f9:24:e5:86:88:e3:ae:4a:38:7d:5b:ff:9c:
31:83:fa:59:2b:c5:48:87:6d:b8:14:f1:1d:54:88:ce:3e:cb:
66:61:1e:9c:b2:8d:0e:e2:e5:7b:8d:e5:3d:cd:e7:35:38:ce:
b6:17:46:9f:74:67:01:27:0b:a8:a2:ac:7d:70:e8:47:8a:5b:
3c:4d:21:b8:a0:55:e0:55:03:1f:a7:b0:a7:c3:44:bd:36:3f:
2c:df:a1:dc:65:03:2c:ee:ce:75:62:aa:3d:9f:58:b7:92:af:
15:3f:38:d5:9d:74:18:2e:50:4d:d3:bb:de:93:77:35:e9:64:
bb:7c:62:86:2d:1d:87:5a:8e:4d:4d:cd:35:77:24:34:9b:77:
96:b2:12:77:e6:de:2f:bc:d7:cd:6a:ca:1a:44:bd:62:44:f9:
57:5f:6b:b0:eb:9e:75:f5:1d:a8:d0:c2:8f:46:69:e0:95:21:
4d:33:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:46 2026 by rpki-client