Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: Y92LpKGSMWYvYKY6ZW3wIR1vR0Aj42MCAG4Gi/tPj3I=
Subject key identifier: F8:A0:CA:88:22:FB:70:E7:0E:05:AD:4D:83:3C:4B:3B:BA:7D:A3:8C
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019D296093046F3D943B387CC201F6B97394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 09:01:28 +0000
Manifest this update: Thu 26 Mar 2026 09:01:28 +0000
Manifest next update: Fri 27 Mar 2026 09:01:28 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: KnRXYdMLW6zqbugGdYlllOV8YWyX7UElst7dzmlUElI=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:93:04:6f:3d:94:3b:38:7c:c2:01:f6:b9:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Mar 26 09:01:28 2026 GMT
Not After : Mar 27 09:01:28 2026 GMT
Subject: CN=f8a0ca8822fb70e70e05ad4d833c4b3bba7da38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:bf:99:5d:6c:cb:a3:a5:af:87:f8:c7:a5:
c5:aa:b5:82:ab:7e:6a:65:b0:95:84:b0:38:fb:79:
eb:da:32:39:14:6d:99:ec:e3:a1:c6:9a:71:1c:8d:
3b:23:d6:55:5f:c9:40:53:cc:3b:09:6f:30:7d:eb:
b5:86:43:dd:0f:1f:7f:ab:e6:92:9a:93:bc:67:af:
d3:8a:7f:23:2e:05:de:c3:2d:51:32:00:ad:18:b6:
c2:d3:88:0b:79:c6:28:f0:9d:b5:ab:15:b3:b9:4e:
78:35:ce:93:43:4e:29:c0:0e:e3:23:ba:11:ec:b2:
84:4a:7b:0b:f5:bf:62:38:76:8b:c5:16:fc:cf:3d:
24:4f:b7:dc:63:b8:34:0e:3c:38:7c:ad:d4:f0:e2:
78:a9:45:f9:c5:4e:7e:a7:31:ad:c8:e9:93:90:6f:
66:7f:6e:d7:1b:34:80:d8:51:98:e1:3b:85:66:19:
61:5e:fc:14:cf:6d:e2:d8:20:0f:b0:33:48:58:5b:
e8:d4:82:50:ab:88:cf:db:8a:18:b0:76:68:78:72:
07:27:b4:d0:1d:3b:af:82:8b:ce:a5:64:41:da:4c:
a4:bb:b4:f7:58:f3:ed:2c:87:7b:14:14:d7:36:0a:
2f:97:be:3e:b2:6d:c6:1f:9d:f8:3a:5f:58:42:94:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A0:CA:88:22:FB:70:E7:0E:05:AD:4D:83:3C:4B:3B:BA:7D:A3:8C
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4b:1e:dd:1b:28:89:6f:1f:e3:31:eb:8f:65:2d:03:85:6f:
15:ee:b3:5a:fa:c5:d9:99:eb:3f:57:4f:12:e4:6c:07:07:ff:
dc:13:b5:7a:6e:88:57:8a:13:d6:e5:b6:d4:f9:c5:3b:b5:80:
b5:c5:c3:84:9d:b8:b2:54:ff:c8:26:0a:ee:47:69:55:f9:92:
8c:a5:8f:02:a9:a9:7c:61:a4:c5:cf:c0:fa:7a:bd:12:af:f2:
4b:7e:a9:9a:cf:b7:87:9f:4d:99:3e:fb:3e:f1:56:5d:4c:2c:
ad:32:75:1e:eb:cc:49:a4:c5:f7:4f:40:1c:43:9e:57:82:81:
76:29:7d:7e:b8:87:80:68:16:2d:7d:67:c6:f9:b1:55:c0:7d:
e5:b2:65:00:c9:c4:d2:75:8f:1c:c5:3e:01:44:9d:72:3f:38:
df:b0:12:4f:40:d8:0f:f3:72:d5:50:aa:61:e2:b9:c9:b2:70:
4c:de:7f:f6:8b:d6:d9:63:1d:71:69:53:a6:58:db:01:9a:dc:
91:6e:26:9d:eb:13:25:e7:0d:c2:0d:5d:5e:71:99:cb:39:11:
77:e2:45:61:17:eb:9e:0e:ad:5f:b2:a0:b9:84:60:a1:b2:33:
04:65:db:58:90:45:37:b7:3d:71:50:f7:66:76:e2:c0:66:e1:
66:8b:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:18 2026 by rpki-client