Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: +k4XuQCQ3O81vW1FP/ZXKMIqdoC/uCS0zeHD/UTrCkI=
Subject key identifier: 79:E0:97:9A:D4:9A:9D:27:66:00:C4:FF:02:D0:EC:78:EC:B3:07:01
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 019F91A3C52154C3847A0B67F11F6E1009E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 124B
Signing time: Fri 24 Jul 2026 01:00:56 +0000
Manifest this update: Fri 24 Jul 2026 01:00:56 +0000
Manifest next update: Sat 25 Jul 2026 01:00:56 +0000
Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=)
2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: vIwXsNxGKhfgZEPyhg07FFTcJabx07sXGyDyn8MPgSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c5:21:54:c3:84:7a:0b:67:f1:1f:6e:10:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Jul 24 01:00:56 2026 GMT
Not After : Jul 25 01:00:56 2026 GMT
Subject: CN=79e0979ad49a9d276600c4ff02d0ec78ecb30701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:77:3b:5d:e9:47:4a:22:a3:28:c7:1c:66:
50:4c:2b:33:80:f3:3d:fb:22:65:4d:82:fc:10:3a:
7c:32:29:b3:28:d9:f8:53:5e:26:2f:ce:9c:44:06:
f4:89:3f:7e:e8:a3:5a:98:1a:57:6e:fc:38:c5:e5:
1e:dc:de:96:10:81:ea:70:de:41:c4:f1:66:ab:ed:
b9:ed:7e:16:e1:54:73:48:28:5f:f6:fa:aa:d0:9f:
c0:5c:63:79:57:42:42:5f:21:56:a8:63:b1:c1:5c:
4e:f1:a3:95:85:40:9b:1c:89:a2:9d:d4:a8:15:14:
c0:a6:25:c2:0d:47:5a:60:04:89:fa:a4:65:b3:dd:
bb:e1:9c:47:c4:ff:39:1a:1c:f2:54:90:28:21:40:
0c:a2:35:05:b0:de:e4:00:66:73:9f:1b:ea:67:c5:
a6:be:8f:06:9f:b4:2f:2f:ed:17:de:ab:d2:f6:6f:
35:82:e7:ad:d5:b5:cd:3d:33:d9:3b:03:1c:e5:95:
09:7a:87:58:e3:9c:ac:ec:be:1e:82:0f:e7:86:c2:
39:c7:f4:37:70:4a:fe:a6:e2:6c:2f:c7:f2:84:7e:
92:56:b6:4d:32:61:b7:f3:b7:6f:8a:9a:b2:56:ed:
1a:f0:b1:33:13:b6:2c:3a:48:ae:35:38:21:08:5f:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E0:97:9A:D4:9A:9D:27:66:00:C4:FF:02:D0:EC:78:EC:B3:07:01
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:9e:03:1d:67:15:7e:75:8e:37:4a:8d:21:99:ac:97:d8:
e6:96:f4:12:d8:52:d4:ff:49:92:75:fc:c9:6f:a1:0d:87:84:
a7:8b:e9:39:dc:aa:b1:e8:fa:3c:8c:be:c1:16:90:8b:e9:96:
7c:cb:58:34:2c:e2:84:44:43:3f:c8:b7:c6:46:75:5f:37:dd:
de:f7:0e:3a:23:1b:4f:bd:10:99:d4:47:cc:cc:2f:77:b6:48:
62:ef:1c:6a:5b:fd:26:02:b3:72:de:ed:fb:f3:d6:dd:04:15:
94:d4:46:42:16:aa:5e:d1:58:01:b0:6c:a2:7d:24:51:03:87:
a1:e5:98:ce:bd:f2:6b:36:68:f7:ae:6e:00:dd:2c:2a:3c:92:
f1:05:e0:36:46:83:39:ba:5d:ea:3c:f6:3a:9d:ac:31:80:fa:
86:92:e0:23:fd:6a:ab:86:f2:17:58:b2:25:03:85:c5:08:59:
3b:cd:b5:e7:18:65:5b:46:7f:95:3e:6c:89:3b:d9:5d:4f:a8:
d6:09:7c:f3:54:fa:33:ce:b8:60:d3:1d:5f:9a:ae:0a:d2:6c:
9a:a3:ab:91:33:fd:d2:90:8a:f6:7e:ed:81:c4:59:23:a3:3f:
4e:df:1c:5e:98:69:8f:8c:d6:80:1f:70:3c:36:6a:7f:c5:91:
13:ee:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:33 2026 by rpki-client