Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: k1vmpnVOQJB1etkpfm5TP9W6oMeJtgb+PfxKbZqhnNs=
Subject key identifier: 4C:83:6A:3E:62:DF:3D:E9:34:63:5E:FE:29:5B:E9:1C:6A:60:57:AA
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019F935C2ACD1D4A22B0D5E29CA589AE4CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 09:01:58 +0000
Manifest this update: Fri 24 Jul 2026 09:01:58 +0000
Manifest next update: Sat 25 Jul 2026 09:01:58 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: ypJdOZ8C91coaCo/s+g+Ra/GpY2NLyJgjqJipcJ/ypg=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:2a:cd:1d:4a:22:b0:d5:e2:9c:a5:89:ae:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jul 24 09:01:58 2026 GMT
Not After : Jul 25 09:01:58 2026 GMT
Subject: CN=4c836a3e62df3de934635efe295be91c6a6057aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:26:6c:5e:be:99:8b:42:5a:58:36:4f:e8:
48:88:0c:91:ed:a6:ff:d1:9d:57:23:71:2e:4f:77:
59:64:68:65:4d:29:ae:b8:86:fe:c2:81:e8:64:17:
c6:c7:83:f5:23:16:50:01:68:9e:b9:8b:55:8d:c5:
bb:66:f9:21:10:f5:eb:fa:92:5b:c6:8f:17:ca:98:
3b:1c:f1:46:75:07:6f:c8:19:93:86:41:55:73:6b:
78:49:9b:26:9a:f1:08:da:20:e9:51:52:24:d6:f9:
ea:35:46:4a:64:b6:05:d2:7d:f3:19:6f:e1:80:f3:
d1:bc:68:63:35:34:81:04:63:a4:4e:c4:ed:1c:12:
8a:33:93:18:78:1f:37:e0:8d:ab:b1:d2:c4:c3:d4:
f0:6d:b2:c1:04:d6:bf:ab:e1:8d:11:61:9e:01:17:
7a:2d:6b:56:e0:fa:45:f6:21:5a:2d:b6:19:9c:d1:
77:e6:9b:aa:f7:e2:e9:cc:c6:96:ac:bd:99:a8:70:
a6:e6:ef:77:71:4a:86:1a:20:27:75:f0:b7:95:71:
fe:8e:32:c6:2f:b7:bd:a2:b4:74:87:54:78:4c:06:
71:dd:c2:f8:ff:b4:ee:c5:40:fd:a4:77:5f:0d:52:
cc:f5:16:38:ca:94:8e:39:6d:f3:b8:3a:e4:7b:c2:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:6A:3E:62:DF:3D:E9:34:63:5E:FE:29:5B:E9:1C:6A:60:57:AA
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:45:84:fa:d9:89:4e:b9:e5:64:97:8a:41:21:b5:6c:50:0f:
c8:ae:27:40:1b:37:9f:73:6d:9f:40:7e:6f:61:42:64:72:27:
45:62:eb:45:ad:82:4e:d0:9f:8e:f4:9c:08:9b:c6:24:da:d1:
66:3a:37:6c:00:53:3a:4f:f6:f0:3d:5b:0e:0a:d0:1d:13:42:
2a:2e:36:4f:4a:25:2c:68:32:09:56:f0:62:d2:2c:b3:1d:14:
14:db:2c:27:08:77:75:e7:82:e9:32:11:e2:3b:fa:51:80:dc:
aa:ec:40:52:1b:8b:2c:23:bf:bc:5e:89:65:4e:4d:a8:f4:03:
d6:bf:7a:55:fc:f9:47:0c:f9:76:80:04:ad:3d:38:72:11:ce:
fa:71:c7:f2:0c:57:6a:a4:f3:3b:f2:0a:7b:f8:34:a2:5b:12:
cc:ba:c7:32:1f:1c:fe:9b:68:25:ce:17:e5:9f:1b:c5:c9:99:
41:26:f4:39:ca:11:92:9e:3a:9b:18:84:c1:a9:2a:24:80:dc:
f1:37:d1:94:e0:99:ed:72:ea:3d:68:df:81:24:d9:4c:51:e3:
a7:aa:e5:bf:aa:97:e8:31:dd:ed:e4:0d:06:47:dc:2c:82:26:
16:d4:93:e8:76:fd:00:14:73:53:a9:57:ff:69:f0:94:01:b6:
2a:05:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:25 2026 by rpki-client