Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: MkwHN1Gms/JEPRH2wJI/JYCxvcL7KHGuP4GuBSgZztw=
Subject key identifier: 45:36:A9:C4:B4:94:A9:2E:89:98:64:3F:48:CB:E9:0D:AF:B3:4C:8E
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019F916C7965E73339D19E9D67EB8477ADE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 00:00:32 +0000
Manifest this update: Fri 24 Jul 2026 00:00:32 +0000
Manifest next update: Sat 25 Jul 2026 00:00:32 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: vV2JlCHG5jh1iX6aBeCYFHiMxoHtj8sTMSXfFdnmYsw=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:79:65:e7:33:39:d1:9e:9d:67:eb:84:77:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jul 24 00:00:32 2026 GMT
Not After : Jul 25 00:00:32 2026 GMT
Subject: CN=4536a9c4b494a92e8998643f48cbe90dafb34c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:30:7a:2a:29:d9:8d:c2:24:78:c0:ed:d1:
43:3c:16:e1:e1:57:1d:b4:9e:e0:c8:16:73:03:bd:
ce:0f:af:f8:d2:59:f2:5e:20:0a:33:b6:12:60:a2:
d0:cf:9c:73:6d:03:17:63:03:da:07:67:1e:4a:73:
3d:2d:7d:89:43:43:91:3c:7d:1a:9e:ff:67:88:3d:
35:61:23:db:2b:f4:ff:95:53:e2:c6:a6:e6:4a:22:
50:2c:c3:14:4e:32:0f:0e:57:12:0d:77:c9:3e:cf:
27:d0:31:25:8d:9e:b6:a3:e3:d1:b2:0e:f6:a8:5f:
0a:1e:17:b8:c4:2c:37:8d:84:72:2d:4d:29:71:61:
66:52:9e:e3:22:a1:d9:71:14:24:a5:2b:95:53:2e:
a2:28:99:32:61:8e:b5:53:4a:37:2f:44:22:ee:eb:
3a:4a:e6:1d:10:89:b0:a3:c8:4c:e0:f6:90:a7:07:
f3:9e:45:01:0e:b4:12:16:b8:a3:0c:1c:40:46:ad:
90:98:66:fd:81:f0:74:dd:ae:ad:3d:44:a4:66:87:
e4:10:86:a9:dd:be:ea:73:58:93:7f:6e:df:d9:a5:
0e:34:50:48:e8:86:0f:d8:5a:7b:97:7a:35:5c:5d:
d6:8b:a7:a6:c8:b3:3d:1c:0d:63:3e:87:5a:fa:37:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:A9:C4:B4:94:A9:2E:89:98:64:3F:48:CB:E9:0D:AF:B3:4C:8E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d9:52:94:2f:29:95:82:e5:ae:ec:5c:2a:e1:ff:19:3c:8c:
cc:0b:e8:c4:e2:ac:5e:87:80:cf:12:87:81:8f:09:7f:c3:70:
fb:e4:5d:62:0f:92:ca:26:02:9c:ae:63:51:6f:f5:42:81:18:
aa:ab:34:e8:73:12:fb:99:38:b3:13:db:d7:a6:1a:45:79:fa:
47:c6:59:69:29:fc:89:f9:3e:d6:70:98:f6:67:00:ff:c9:13:
df:20:15:0f:d7:21:fe:e8:44:48:83:79:39:50:37:f0:90:01:
0c:b2:fc:7b:8e:9c:5a:86:34:45:26:39:4f:18:f6:cf:d2:6b:
47:81:c2:84:cc:ad:cc:48:4d:a4:fa:e3:08:dd:da:3f:5e:a3:
e2:d3:1c:05:ac:7b:6d:90:f4:5b:86:6b:76:cf:44:03:ca:8c:
b1:93:08:0d:05:c4:e1:f1:34:d1:ea:f4:1f:cf:02:7c:51:ce:
c0:cd:33:e5:ec:72:e2:b3:fb:75:5c:92:99:e4:9c:a5:f1:0d:
49:e3:63:4b:d0:4b:87:81:e3:e5:15:8a:68:e7:19:0a:53:db:
a4:a5:e9:08:24:60:a6:dc:b8:d3:93:f1:eb:e6:d4:b1:df:0b:
2a:37:5c:15:87:b9:34:7f:15:06:6a:00:5f:df:e7:79:9d:e0:
68:f9:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:06 2026 by rpki-client