Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: DgPEpwX2GMatDu+4sIS76iDLoMKz/yiBZZ5oMfIuXHU=
Subject key identifier: 2F:7F:E4:FA:67:37:DE:3A:BF:6F:9E:77:83:AD:0C:7C:EB:EF:D4:EE
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019F935B16D48E31E34D5337DF1139525A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 09:00:48 +0000
Manifest this update: Fri 24 Jul 2026 09:00:48 +0000
Manifest next update: Sat 25 Jul 2026 09:00:48 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: x2RzkCUO0YDC5FlRazhvLtz6yGlbLC+IO34IIoYTweA=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:16:d4:8e:31:e3:4d:53:37:df:11:39:52:5a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jul 24 09:00:48 2026 GMT
Not After : Jul 25 09:00:48 2026 GMT
Subject: CN=2f7fe4fa6737de3abf6f9e7783ad0c7cebefd4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:f0:74:af:bc:3d:20:a8:85:48:d3:cb:0c:
0c:83:bf:99:23:1d:44:1b:97:e5:8d:de:84:92:6b:
03:96:da:83:fe:1b:b6:9d:ef:c9:64:95:4e:a6:43:
7a:e6:2f:60:6a:51:8d:84:bf:dd:e0:6f:95:e1:41:
42:51:9e:62:23:68:34:f0:af:1c:14:51:45:9f:a5:
b6:b6:e1:51:06:ea:2f:4c:43:61:7b:66:29:dd:52:
2c:55:52:17:fb:59:5e:e9:31:c0:86:da:66:c5:ee:
e8:c5:82:bf:18:05:e4:db:ce:1e:df:67:da:a0:55:
35:85:f5:9d:eb:b3:22:9e:fd:c9:db:a9:6f:e5:42:
50:4a:e5:18:56:f7:a9:59:87:37:c0:5e:c1:17:cc:
14:99:52:b3:de:fb:6b:46:e2:48:16:34:28:4d:28:
fb:05:98:9b:be:23:a5:e7:38:ed:f1:97:40:1e:5a:
8d:3d:73:d3:f5:e9:1a:41:11:58:98:36:5d:5a:8a:
2f:ae:cd:fb:9a:bd:87:09:c7:6b:00:4e:86:5d:b3:
dc:67:74:39:ce:f7:c3:21:2b:f5:c5:e7:7f:64:76:
03:38:02:54:f8:ea:42:ad:6d:c0:01:f1:21:6e:e7:
3a:0c:61:6c:7f:cb:21:4b:0b:89:3f:8e:c5:54:b1:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7F:E4:FA:67:37:DE:3A:BF:6F:9E:77:83:AD:0C:7C:EB:EF:D4:EE
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:5e:38:9a:ce:96:10:e9:f1:93:a6:3c:93:c6:49:55:bf:
16:20:1a:3b:16:f7:99:aa:7e:7b:45:88:bd:c9:2d:10:16:98:
ee:b4:ad:22:17:0d:d3:15:d4:19:f3:5e:c3:f9:5b:10:d3:98:
30:9b:d5:55:d9:17:3f:7c:5a:f1:9e:ed:af:07:37:50:b9:4c:
00:bf:90:45:0c:19:5a:ca:c4:51:28:08:35:49:3c:f6:7c:27:
9c:1f:06:c4:45:bc:ae:9a:8b:a5:a4:2e:9c:0f:04:8b:5a:84:
bd:12:e5:30:ab:00:b1:e2:f1:06:7c:73:6b:f7:81:f7:88:7e:
84:4e:8e:7b:56:78:4d:f9:d3:2d:80:b2:05:fb:d1:21:18:6c:
38:0a:0e:2a:95:c1:7b:a8:44:63:2f:6c:1e:93:bd:4a:5a:c9:
34:13:b1:54:77:72:bd:8b:82:be:d9:30:4a:7e:79:06:7a:20:
b8:c2:3d:4c:27:df:04:e3:91:f2:b5:57:9f:d8:55:22:d3:02:
89:ad:5e:99:d0:43:75:3e:41:32:43:53:cf:aa:1c:39:4c:27:
20:f3:b2:95:bd:88:60:16:73:23:fb:de:33:23:fa:1d:5d:7d:
d1:90:4d:92:5b:d8:47:bf:49:ad:40:e5:0b:97:5b:d5:d2:54:
7d:12:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:22 2026 by rpki-client