Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: 5g9r23B4kze8eS78f3Ibns1f0/hFsmmhuMTGtg5+4iA=
Subject key identifier: 65:18:AE:C4:6F:5D:5E:8A:5A:AF:29:51:20:16:F0:25:F4:39:AA:8D
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019F91A3A7DD1D72FCE03D751178C7AC6FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0999
Signing time: Fri 24 Jul 2026 01:00:49 +0000
Manifest this update: Fri 24 Jul 2026 01:00:49 +0000
Manifest next update: Sat 25 Jul 2026 01:00:49 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: QqIDA8D13K+/ewfZSZj+XFhCnP/UEQkMJi3P32T9KNw=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:a7:dd:1d:72:fc:e0:3d:75:11:78:c7:ac:6f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jul 24 01:00:49 2026 GMT
Not After : Jul 25 01:00:49 2026 GMT
Subject: CN=6518aec46f5d5e8a5aaf29512016f025f439aa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:02:ad:48:1d:a5:11:69:dd:cd:79:95:9e:
42:bb:d5:80:99:fe:41:71:72:38:1a:c3:20:da:30:
cb:bf:0a:63:b0:c8:2e:8a:14:bb:3c:56:7d:7d:42:
6c:20:e2:d7:67:db:87:18:67:6a:c3:59:39:10:f5:
f8:5d:8c:86:23:b3:36:1d:f5:e4:fa:93:8b:fd:3e:
6c:88:af:c7:c7:e4:83:54:24:13:76:1e:40:6a:79:
da:f9:d8:ee:a5:df:0f:bf:ec:87:02:5d:4f:30:3c:
ae:6e:a2:ee:70:33:04:46:6d:e1:a4:3c:c1:dd:b9:
11:28:7c:2f:b9:10:78:0c:bb:c6:c4:84:51:8e:1e:
b2:a1:cc:84:18:3e:3c:dd:f8:26:65:ef:13:c0:45:
8d:f2:ad:ef:e1:61:1a:21:fa:88:e8:e9:e5:44:33:
ba:90:97:7d:8c:42:83:b3:59:38:16:c1:dd:c6:c4:
ca:94:fa:57:64:21:8b:b5:50:c6:77:34:9e:95:d9:
50:cf:fa:28:21:79:9a:ec:e8:a6:1c:9c:4a:82:de:
0a:f5:df:28:70:98:52:b9:82:14:21:77:be:4a:9f:
4b:40:11:b5:68:ce:17:75:49:e3:e0:17:42:e1:33:
8f:bf:03:f8:ec:05:16:c1:9e:e1:10:9b:79:1c:03:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:18:AE:C4:6F:5D:5E:8A:5A:AF:29:51:20:16:F0:25:F4:39:AA:8D
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f9:4a:58:e5:6f:e2:d4:0e:4a:b3:c3:7b:85:37:a6:45:e2:
de:e4:f8:b8:47:cf:22:ab:da:31:59:24:24:bb:07:8c:44:d0:
b5:c0:6c:1c:37:d4:de:ce:cb:db:10:a8:7a:8d:e1:dc:39:cf:
19:f3:43:47:6f:14:c0:09:be:ec:a1:bf:3f:81:4c:2d:3a:47:
d1:e2:34:2c:ca:a4:43:c1:7b:43:b9:da:df:7f:c1:16:d3:2f:
79:95:9d:89:aa:2b:0d:95:3c:cd:27:6c:f2:bd:32:78:ef:17:
dc:ba:8d:ee:3a:67:fe:6c:22:a6:6b:51:50:e0:68:3f:a0:4c:
35:16:86:48:f0:fa:82:28:7a:c7:98:d7:d2:ea:fe:b4:9b:07:
85:4a:6e:0b:1e:ad:13:17:70:91:ec:17:29:f1:6a:f2:29:b1:
d8:f7:b8:fd:4b:48:a9:20:61:3b:40:b0:ed:87:42:e9:42:50:
77:64:a7:92:05:ba:ba:e7:32:2e:da:c9:e0:d2:c0:a3:98:5d:
3e:50:d5:d7:0e:21:d3:ed:b9:9a:58:8f:97:89:70:cf:6c:f7:
19:80:61:0d:f7:62:ad:58:ab:f5:d2:9e:45:09:c7:40:28:cc:
d8:3b:63:b0:d8:23:74:c3:b1:fe:ab:de:dd:8a:32:46:9e:d5:
fb:36:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:13 2026 by rpki-client