Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: gMSpoyMbScMO3hi2pgBIDEoQdVmbiCvY6f5tu+IGwvI=
Subject key identifier: 57:7C:00:FC:82:31:60:2B:14:74:F0:50:8F:1B:DC:4C:86:6F:CF:07
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 01A0D0ED406C9DE54AFBF78FF7165C6074CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1A76
Signing time: Thu 24 Sep 2026 01:00:04 +0000
Manifest this update: Thu 24 Sep 2026 01:00:04 +0000
Manifest next update: Fri 25 Sep 2026 01:00:04 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: npJ1AaiF9S4gpOjnXrq6XbKc9stnlYkmsBfRnCNTZx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:40:6c:9d:e5:4a:fb:f7:8f:f7:16:5c:60:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Sep 24 01:00:04 2026 GMT
Not After : Sep 25 01:00:04 2026 GMT
Subject: CN=577c00fc8231602b1474f0508f1bdc4c866fcf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:74:c8:21:6e:84:2b:96:ef:ff:e8:90:4d:
01:8c:92:98:0c:5e:0f:6a:73:83:e7:7c:d5:72:69:
37:5e:a2:9c:2f:5b:34:05:4d:39:da:0d:61:43:3b:
96:8a:2d:10:18:93:72:67:21:50:d0:ce:a3:f3:e5:
e3:eb:c4:76:2f:30:36:da:a5:d2:ef:79:fb:97:71:
2a:b6:4c:f7:89:77:3c:06:57:78:be:c1:e1:82:e3:
ca:9d:f8:32:f8:6e:02:6e:07:7c:dd:4d:13:29:db:
4d:2f:7e:b6:5a:83:ba:e2:69:a4:67:2f:ce:c0:f5:
ac:13:fe:4c:07:31:fb:00:af:80:8a:f3:45:de:5c:
ac:dc:65:85:a6:91:da:1f:86:61:42:0d:ad:b7:d2:
0d:c9:bb:aa:77:a9:a2:ce:08:8e:26:fb:8a:b1:c2:
6e:80:76:ba:af:e8:86:88:57:00:f3:25:05:a8:76:
9c:db:1d:1a:b1:80:08:6b:3d:49:ea:27:98:80:58:
7c:7c:8e:b3:9b:05:d3:27:a2:36:08:ee:40:de:fb:
b4:dc:7d:03:3c:f4:bc:46:8b:93:cd:7e:ce:9c:12:
a8:ce:bd:94:7b:0d:de:7e:38:05:f6:0c:3a:70:38:
26:93:11:27:e4:1d:40:49:8a:42:c4:20:d6:1d:ce:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:00:FC:82:31:60:2B:14:74:F0:50:8F:1B:DC:4C:86:6F:CF:07
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:50:fc:d9:a6:9f:ae:e2:e3:cc:e6:90:ad:3c:73:1f:2a:37:
78:07:22:53:a2:e5:57:c6:5f:73:62:eb:3d:8c:ac:75:8f:5f:
ad:c2:78:b8:36:18:ef:d7:71:e3:9f:8e:19:c1:cc:3c:9b:67:
a8:09:e4:84:2a:73:01:e4:59:75:43:f5:a5:01:2f:2e:bd:d2:
3f:88:d6:41:2d:70:96:6d:f6:96:9e:66:b9:6d:43:4b:28:b7:
da:ba:d3:63:55:40:b3:5d:e4:0c:f1:e8:7f:d1:b7:25:1a:54:
04:72:86:a8:61:a5:ac:5c:d8:82:ca:c4:4c:27:1b:f0:14:b9:
14:73:d6:1a:0f:2c:de:17:dd:60:b7:1a:3c:43:b8:70:94:25:
81:08:e2:71:32:8b:03:27:d0:80:f2:07:af:3a:c1:49:52:e0:
7b:fd:a9:37:ea:b1:5f:05:5d:53:0f:9c:46:71:33:6e:91:ac:
6a:94:b9:8a:e4:fb:f8:b4:b2:42:6a:fd:d3:14:b0:39:3f:69:
0d:bc:33:ce:73:af:7b:5f:d7:6c:25:98:12:69:7d:d5:23:c3:
80:17:49:13:7c:04:d0:f2:f9:f3:f1:a9:6d:ee:b5:4e:93:f1:
98:f8:b6:68:05:ee:b2:00:17:97:26:bb:65:e7:9d:87:e3:1b:
49:88:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:13:00 2026 by rpki-client