Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: 7pZMspcMbfDxmcgcLSlLIPPgsgSTGCj1n3XdkbIEQDo=
Subject key identifier: 1F:7E:AF:4F:15:A3:83:69:81:4C:D3:B8:65:0B:8C:4E:CF:B8:A4:0B
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 019D2996F6FF49A95375E00BFA2D39B517E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 110C
Signing time: Thu 26 Mar 2026 10:00:52 +0000
Manifest this update: Thu 26 Mar 2026 10:00:52 +0000
Manifest next update: Fri 27 Mar 2026 10:00:52 +0000
Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=)
2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: ywC4RaD0jPjG3fjZSNpZJJETVr9z7sTH/LWc2Yew8FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f6:ff:49:a9:53:75:e0:0b:fa:2d:39:b5:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Mar 26 10:00:52 2026 GMT
Not After : Mar 27 10:00:52 2026 GMT
Subject: CN=1f7eaf4f15a38369814cd3b8650b8c4ecfb8a40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:00:c1:d7:95:6f:9c:0b:b1:0f:83:07:62:
98:81:5e:6b:29:c5:5e:9c:51:6c:39:66:e9:87:3a:
9b:58:91:be:83:aa:5e:20:fa:81:7b:39:e0:e6:9a:
ae:41:1d:57:f4:ac:d0:3c:8e:73:2d:e2:08:ae:b7:
4b:d1:5e:ab:4f:3c:68:28:a5:18:30:b4:11:57:85:
52:50:ae:3e:66:42:77:6c:ae:3e:68:d3:e3:77:b7:
44:42:c8:81:77:e5:9c:da:c9:a1:cb:55:b0:86:9a:
4c:50:7c:15:fc:33:1d:d9:3e:2c:65:1f:b7:08:9e:
2a:cf:e3:1b:23:3e:7b:16:7a:41:5c:5e:0b:37:69:
76:f4:61:5b:28:ec:f6:02:dc:72:b6:b4:b4:8f:a9:
90:c0:3b:02:39:81:c2:9f:7c:52:58:fd:b7:72:63:
41:7f:79:45:87:f1:6c:f4:5c:ab:c9:a6:fc:74:29:
6f:1b:9b:23:f7:46:7c:69:60:e2:25:d1:d6:ee:c6:
b4:ab:1d:20:70:d8:9b:15:5f:45:a7:9a:98:4a:a5:
15:8f:87:68:a9:6d:17:38:95:b0:96:a3:66:b3:d9:
de:3c:79:18:8c:2c:0b:22:1d:0c:a1:ca:73:58:0e:
68:e0:b9:81:16:32:da:1b:9d:71:6d:8c:fb:3a:4a:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:AF:4F:15:A3:83:69:81:4C:D3:B8:65:0B:8C:4E:CF:B8:A4:0B
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:69:41:a4:8c:62:5c:36:66:f1:fa:b3:4b:f3:28:04:14:07:
73:17:ec:21:13:f9:0d:eb:8f:a9:60:3f:e6:ba:81:db:38:5e:
51:df:a5:aa:6a:6b:e6:da:54:e6:e0:67:af:91:cf:15:44:3e:
b1:4a:f2:8c:8d:f6:f7:7b:16:b5:dc:76:13:21:5e:1a:7e:4d:
b8:1d:be:86:66:d9:f9:17:9b:7f:8c:b5:2b:5c:e2:28:7a:f3:
4e:1f:0f:b4:24:56:83:bb:f0:bf:19:f3:07:c0:f1:95:91:cb:
29:03:45:dd:19:67:c9:b4:60:e6:d3:1c:cd:ac:03:b5:94:24:
a6:64:87:3c:93:f0:e6:f7:9d:8d:8e:b6:d8:9a:4d:b0:05:12:
c2:ed:4d:6a:86:81:7b:ff:2f:16:29:28:cd:3e:ce:a0:b2:4c:
bb:fa:81:a6:65:be:2d:c1:ba:e7:7b:0d:4d:bd:5d:21:42:2b:
16:64:3a:b4:a9:5a:16:bf:51:92:7f:bd:de:ca:43:99:5f:15:
0c:ba:ca:be:93:d0:b2:c4:6b:d6:62:67:98:43:eb:cb:09:e0:
a6:dd:1a:7f:5f:ae:68:4d:2a:c0:fe:9c:d7:ed:c3:23:67:0f:
f7:66:35:67:ca:c2:42:8a:f9:b7:e1:13:3f:df:4e:b5:a8:58:
08:93:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:12 2026 by rpki-client