Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: 8Bq8fcl7+ofr8Noe3PC9O/U4Cjo9ETsoFi5kTFJw8eU=
Subject key identifier: A3:D8:93:57:57:EE:AE:B9:61:B9:3A:1C:C9:0E:07:70:8A:64:41:73
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019E2091563B085436805397604AB24D0288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1910
Signing time: Wed 13 May 2026 09:00:56 +0000
Manifest this update: Wed 13 May 2026 09:00:56 +0000
Manifest next update: Thu 14 May 2026 09:00:56 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: VXMsWdTTeC+airyBTUn5PVcd3OmCiWVrsDoISbUmxVA=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:56:3b:08:54:36:80:53:97:60:4a:b2:4d:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: May 13 09:00:56 2026 GMT
Not After : May 14 09:00:56 2026 GMT
Subject: CN=a3d8935757eeaeb961b93a1cc90e07708a644173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:68:32:51:ab:a9:ed:fc:60:3f:94:7b:44:
88:f4:3b:3b:20:f8:8b:1f:0a:07:db:9f:2d:0c:4f:
bf:83:c1:b9:25:90:00:d5:18:15:ba:01:9c:15:58:
cd:68:f6:d4:88:e0:5a:3d:f7:56:5a:b8:de:ad:55:
e3:84:c4:6f:80:dc:13:9d:cf:c6:3d:23:44:01:67:
e1:1f:51:ef:3f:17:fe:d6:fe:a7:7c:7a:87:2e:12:
bf:e8:0b:ab:a9:86:5e:a4:74:f9:a9:15:63:71:b9:
c9:89:11:8c:75:0f:4c:c7:c1:c3:43:bf:16:6c:81:
86:ec:e8:c7:43:f3:1f:dd:29:f9:00:60:9f:5a:ae:
44:99:8e:99:a2:88:13:20:0a:cc:17:ce:06:8e:85:
6d:d6:06:ef:e2:8b:65:86:7a:a7:3d:8b:e7:ae:b6:
5e:85:4f:53:74:51:d3:ee:8b:c6:05:a8:46:7b:a7:
63:d6:cb:04:67:16:bb:48:21:e6:70:6d:28:ad:04:
0e:c1:8f:6a:74:60:28:9b:e0:21:49:fc:63:94:43:
d4:11:f5:1b:ab:df:e7:4a:7d:f0:28:67:d0:9a:dc:
78:cf:ba:f2:9c:16:b2:a6:2b:37:38:17:4b:f2:d1:
f1:29:26:17:48:e7:7d:ae:bd:4c:15:06:10:4e:44:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:93:57:57:EE:AE:B9:61:B9:3A:1C:C9:0E:07:70:8A:64:41:73
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:4f:91:29:96:57:b6:16:5f:1d:3e:17:10:56:e5:92:26:
a9:5f:73:ea:5a:39:a8:f4:89:bc:b8:76:4f:15:ef:77:bc:3d:
72:17:8e:45:cb:97:a5:31:a0:6d:c8:be:01:cf:50:0b:e0:ff:
dd:e8:45:ea:6f:db:a2:a0:7e:f6:b6:b0:c3:2f:a4:4e:92:6d:
57:1e:91:43:ec:67:24:37:a6:fb:26:6f:12:00:1a:46:39:bb:
bb:47:9b:e9:3c:c0:0f:d8:3a:23:ad:60:47:0e:58:d6:f7:cc:
69:88:91:4e:87:42:99:46:3e:49:36:8c:d7:b1:a4:86:b9:65:
d2:3d:76:f1:38:ac:85:b0:aa:98:5d:1c:a9:02:31:e4:37:e5:
e3:c7:eb:58:58:ae:53:a7:8e:e6:61:b8:4c:57:b3:e6:23:10:
1e:c4:11:11:5d:b7:fc:3c:63:68:97:c4:eb:ea:e4:b7:63:be:
49:ac:9f:02:92:13:a8:34:47:3d:f0:97:90:a3:94:74:a7:86:
fe:b6:5e:3a:15:54:17:a1:1d:23:17:3d:3d:13:e9:2a:98:64:
04:d2:6e:6d:42:02:c6:60:24:0c:1e:87:24:9d:8a:f7:21:7d:
eb:e5:6d:80:0b:83:8b:f7:82:7a:22:91:7e:51:d4:64:2d:ba:
4f:72:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:47 2026 by rpki-client