Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: VExjL74aiHbGjgnKLnK54x5i9mPMydnPk1aYaKyLOvA=
Subject key identifier: 0A:50:DB:D6:54:6F:6C:EC:E1:82:D1:28:2C:AA:5A:39:B0:ED:AB:F5
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019D27A9474A66249DD79E30595AF3845D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0859
Signing time: Thu 26 Mar 2026 01:01:38 +0000
Manifest this update: Thu 26 Mar 2026 01:01:38 +0000
Manifest next update: Fri 27 Mar 2026 01:01:38 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: E3lcw53Eewod04ii4MlJRL07an//f0PwTA1tO/I760M=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:47:4a:66:24:9d:d7:9e:30:59:5a:f3:84:5d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Mar 26 01:01:38 2026 GMT
Not After : Mar 27 01:01:38 2026 GMT
Subject: CN=0a50dbd6546f6cece182d1282caa5a39b0edabf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:4a:4c:f8:97:58:c0:bf:ad:f2:ec:f7:51:
0e:c7:e1:ae:7e:e1:2e:4b:a3:ac:42:08:40:4c:c2:
9f:01:03:9e:55:91:b3:0a:97:8d:31:e4:72:a6:7a:
89:00:9e:f3:e4:a9:22:5a:da:bf:e6:b1:23:bd:88:
80:cb:37:cc:2c:57:b8:4f:3e:62:3d:4e:d1:fc:6c:
32:f2:d1:ae:0e:72:15:27:5a:39:81:3c:53:36:1d:
5d:4f:2d:92:5e:0d:b0:87:2c:a4:07:27:07:e6:e7:
cb:e2:30:22:b4:74:4d:51:27:fd:ba:2c:1d:72:06:
8c:fc:45:7b:d9:67:29:fd:ee:ed:58:2c:57:5d:0c:
de:96:69:90:a2:a2:e6:0d:a6:d0:d3:0a:5a:80:84:
1e:a8:0a:94:c7:12:67:de:99:e1:56:ea:0f:66:8a:
c0:83:3e:f6:60:d3:75:d7:7c:1c:97:9a:f8:3a:66:
57:14:71:6c:88:f0:ce:5f:f5:97:0c:c2:76:e2:f0:
b2:ec:e5:f3:96:3b:78:4e:2f:75:36:5e:bb:7a:68:
54:99:0b:ec:01:d2:4a:92:63:53:fd:3d:45:01:19:
13:65:1f:64:10:18:f5:98:d0:19:0a:05:5b:7a:ab:
fb:4a:5d:7e:1e:38:48:90:85:78:0d:0a:a7:31:6f:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:DB:D6:54:6F:6C:EC:E1:82:D1:28:2C:AA:5A:39:B0:ED:AB:F5
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:82:94:69:de:b6:cc:8c:b3:d6:cf:65:b9:d0:0b:e2:bb:c8:
a3:39:ef:fe:23:be:98:d7:3e:b3:20:f3:4e:f3:9e:91:0d:55:
d8:e5:80:11:c4:b1:4b:d0:87:56:79:6b:55:3e:82:28:dd:fd:
c6:fd:c5:4c:00:f9:dd:75:36:68:04:34:93:9c:8e:c3:91:15:
13:87:12:39:d3:c7:c1:24:ca:ae:4d:1f:55:55:f5:89:87:67:
83:70:24:08:a8:12:bc:2f:f3:dc:cf:c3:4c:3e:aa:46:6b:46:
82:b0:e3:b3:8d:f5:0a:a0:aa:6f:c2:44:c5:40:4f:75:5b:44:
d8:09:93:b8:ec:f2:8c:0e:d5:4e:f9:f4:21:70:7a:37:ab:5d:
bc:4d:cf:d1:f8:95:80:a8:2c:40:71:f7:b4:6f:fc:01:f3:64:
f2:80:d6:41:de:34:2e:83:7f:e8:fd:b8:8c:94:c6:67:32:b5:
1d:ba:98:5d:95:45:56:60:3e:c9:d2:05:d0:af:ba:d7:33:3d:
bf:ae:06:70:e9:25:d2:73:65:ed:b3:da:f2:ed:28:6c:ff:9b:
0d:d4:64:0f:5c:11:66:ed:f3:6b:dd:47:d1:7e:94:9d:5b:ee:
b0:8a:31:d2:d2:4c:ea:32:98:dd:8c:b2:c9:56:31:dd:66:2e:
11:dc:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:44 2026 by rpki-client