Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File: nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier: IN+j330ibXrR2Da3IYhiKTL6EYEs7/AM8jMzBlk3u7s=
Subject key identifier: 0F:B3:CA:DA:33:EF:B7:5E:65:8B:59:43:4C:DC:B5:CC:60:BE:08:48
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 019D292951D48DEC6A9E04B88541AE28E5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number: 0E3F
Signing time: Thu 26 Mar 2026 08:01:06 +0000
Manifest this update: Thu 26 Mar 2026 08:01:06 +0000
Manifest next update: Fri 27 Mar 2026 08:01:06 +0000
Files and hashes: 1: MuR4aEGFWe7wl3Vh052cNYMzM2g.roa (hash: eJ30VAn7X7leuPQPqFb0aOSFx4e32kdxI4xgek8Nhr0=)
2: WAj8AC6cZrbept-Nm9z-z_zHUD4.roa (hash: P3ihNDztpQFazGFe+CWzMgjczagukwmAc6Qo3EggvCQ=)
3: gGP5a4m9bqAKT7-QVYaan-KR00I.roa (hash: mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=)
4: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: GrjaYHE7aD/1QvoYzVa7QyP7iJFz/urxglKgssGEGng=)
5: piHfYItCMRZJoIEsDJ__Qf2pGaA.roa (hash: RezZZPRB2YkkE5M8DiOZbDxcJLsNR31nGSqMJCGciug=)
6: rkgYpLaSooeAeaPc6HeDMNwsGSE.roa (hash: dwK5xzYUrSSoaqAtejdAj3gsVAadyZPLwc0zD6SmFNo=)
7: xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa (hash: i8nmPH8ECpbJgdaxdjOGq7PZ1dfP/YgPF/IPT9Hb4to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:51:d4:8d:ec:6a:9e:04:b8:85:41:ae:28:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Mar 26 08:01:06 2026 GMT
Not After : Mar 27 08:01:06 2026 GMT
Subject: CN=0fb3cada33efb75e658b59434cdcb5cc60be0848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:a4:9e:f9:d4:d2:f8:65:69:40:b1:a4:b8:
5e:b9:52:da:33:42:2f:39:b3:ff:6c:7a:4d:ce:3f:
2e:29:f1:a3:2c:d0:ea:9c:64:49:0d:0f:de:3e:b7:
5e:fa:7e:f5:b8:2d:65:5e:b1:c1:8b:30:3b:0b:05:
b9:59:07:4c:5a:ff:3f:5b:39:db:ee:8f:2e:d9:c0:
dc:13:c2:81:91:56:00:34:6b:49:cc:10:a8:f2:f3:
2a:fd:0c:88:91:bf:6e:cf:7c:19:5e:94:03:45:af:
e7:dd:5a:a6:19:5e:ff:10:db:ec:eb:78:ec:1e:6a:
15:a9:ab:85:c2:bc:43:ee:3e:41:92:2f:2e:72:60:
49:a7:7a:f6:aa:a9:e3:a9:79:bc:4f:44:9e:8d:72:
c3:b5:da:52:24:f0:d9:88:c4:59:78:d7:51:7a:d4:
ba:56:16:0d:85:13:ed:83:26:88:f9:a5:e1:26:8b:
7d:00:d4:57:dc:c2:50:af:ff:9b:87:ec:ff:91:68:
79:a6:15:76:10:84:5e:00:56:2d:59:bd:83:d0:2d:
d3:d2:91:8f:9b:f2:3b:a1:1e:73:ec:89:48:c3:5d:
7f:11:fe:d6:8b:9f:b5:9e:ab:32:a9:5f:2f:ce:40:
cc:a0:91:9c:26:c5:e7:9b:47:dc:b5:cc:5b:81:8c:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B3:CA:DA:33:EF:B7:5E:65:8B:59:43:4C:DC:B5:CC:60:BE:08:48
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:f7:99:8e:11:d3:89:c6:dd:a0:ff:f4:99:fd:f5:7e:8e:
ed:ae:43:b1:c9:cc:5c:14:32:32:72:f7:fa:3e:49:a5:84:df:
2b:de:d4:b0:02:83:7e:83:76:18:d5:6c:6e:c0:3e:d0:d3:4d:
d8:a9:c4:49:c3:7b:d0:36:99:33:6c:a1:8c:fe:d3:87:e0:a9:
62:ea:e4:db:19:3f:91:7e:08:82:c3:df:2c:6e:d3:c7:cc:db:
a4:2a:b7:8f:4f:1a:42:54:d3:2d:8e:93:0d:04:6a:49:79:89:
3d:9e:d8:4a:10:f9:fd:2b:b4:d4:61:fe:0f:7f:a6:13:79:e6:
f5:dd:00:90:ca:78:b9:49:a4:c8:cf:d9:2b:23:01:ed:43:eb:
c5:58:dc:78:30:8a:c7:05:5c:85:18:eb:2a:7a:38:94:b1:5f:
bc:cb:73:64:b4:31:36:4a:76:60:a1:23:28:d3:f3:27:ba:64:
cd:b6:57:9b:66:16:11:89:4e:9e:11:9e:e3:80:b0:41:a2:eb:
9e:2c:c6:02:a7:1d:25:d2:2c:29:3f:b6:98:9d:61:62:4f:ec:
90:ac:64:d6:e3:b7:e4:46:19:2b:aa:d4:64:6e:8d:a9:b1:8f:
40:2f:1d:6a:d5:c8:9a:94:af:84:55:7a:75:7e:d3:04:94:74:
b6:52:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:35 2026 by rpki-client