Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: LYtjZywJeqKKSWuziNw9biUvnQASAqaZQe718/Wg1Rk=
Subject key identifier: 7A:F7:D3:11:59:A3:86:C8:07:2C:AD:E9:36:00:20:84:85:78:D4:F7
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 019E1ED9C3DC261324FFF4A0AB2F8765C092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 118B
Signing time: Wed 13 May 2026 01:00:48 +0000
Manifest this update: Wed 13 May 2026 01:00:48 +0000
Manifest next update: Thu 14 May 2026 01:00:48 +0000
Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=)
2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: hI6AJomllY22S0kxAhSUh6jx7UDAU7geHu63ZfChh80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c3:dc:26:13:24:ff:f4:a0:ab:2f:87:65:c0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: May 13 01:00:48 2026 GMT
Not After : May 14 01:00:48 2026 GMT
Subject: CN=7af7d31159a386c8072cade9360020848578d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:c0:ca:ca:c5:ce:0a:22:5c:c7:be:49:09:
45:3f:23:32:52:35:e3:fd:a0:34:39:46:a4:c4:d6:
de:05:f9:2f:6f:c2:b1:c9:5a:1a:dd:a2:7d:35:a1:
4c:1a:8e:85:4e:08:4e:44:42:1d:bc:5c:40:12:9b:
58:22:0c:49:5e:b2:02:77:ab:56:c8:34:57:93:c9:
dd:9e:7a:e8:38:04:f8:5d:39:d9:ac:88:31:2c:ce:
d2:3f:b1:2c:ce:9e:fe:6e:4f:00:b2:b3:5c:ee:09:
b1:ec:f3:19:f8:63:6b:bd:03:4b:7f:00:f7:19:71:
b1:3e:11:61:3e:f3:84:be:d6:f3:b0:f4:5b:04:c9:
cb:3d:45:40:9c:3d:25:14:a2:9f:3e:20:fa:23:c8:
91:40:ca:d4:20:56:87:e7:d8:fa:ba:d8:ea:78:35:
8e:5c:e4:5c:7e:09:4f:aa:67:a9:d8:33:16:82:e1:
34:71:5d:02:7c:db:d8:52:39:b7:0f:cf:18:d7:2d:
db:7c:77:32:11:8e:ca:47:cc:4f:c8:cc:93:f4:12:
19:5f:78:14:92:59:cd:82:27:53:bb:73:a3:31:ea:
bc:d2:6b:28:45:f8:c3:7f:e5:84:8c:00:56:61:85:
94:71:15:9d:26:e6:39:26:c5:eb:41:50:93:dc:3c:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:D3:11:59:A3:86:C8:07:2C:AD:E9:36:00:20:84:85:78:D4:F7
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:a1:ec:1b:7b:7e:f5:38:ea:78:a3:35:3d:4c:c6:87:b6:
b9:ba:e2:7f:9c:bb:63:6a:ac:4b:09:de:18:fd:c2:29:a9:c1:
97:ce:f2:b9:a2:d3:35:94:2e:20:b0:cd:3c:ef:34:a0:3c:da:
55:5c:6f:6d:c2:1e:d6:6b:9d:06:2f:16:a4:62:72:7d:75:44:
64:6f:ba:f5:22:06:28:9c:d7:f1:6e:60:70:5b:46:9f:f4:06:
53:92:34:cf:d8:f4:35:64:dd:d2:39:6f:6f:3f:24:5c:17:7b:
f2:11:81:b6:24:c3:9b:d5:e4:a3:65:7f:e9:3c:b8:42:8f:48:
f1:27:cd:b6:df:b7:d5:af:08:99:a7:83:49:cf:75:f9:f4:c8:
db:46:d1:5c:f5:8a:18:dd:6f:1b:62:33:b6:1c:69:f4:7b:5d:
3a:40:10:6b:11:80:ed:5f:18:40:39:aa:d2:63:88:09:47:85:
db:df:fb:89:83:5f:bf:06:41:9c:e0:89:e0:78:2a:52:aa:7b:
f5:40:b6:3e:8b:f8:77:66:cf:44:0b:6d:8b:00:5d:a1:29:cb:
a0:0d:f6:e4:aa:97:44:f3:16:64:f9:2d:06:53:fe:5b:9c:38:
7b:68:13:4a:85:28:49:b7:f7:b6:08:00:bd:57:4d:86:40:9d:
83:72:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:39 2026 by rpki-client