Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: jZI+cTNJAw9paXk4gyoVtUL4RwyZx3ehrlNpPtj3MqU=
Subject key identifier: 69:A4:3A:4F:81:AA:CD:1F:E2:91:B6:70:85:2F:96:3F:6A:65:2D:BF
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019F943705B722A2D39B9A474D4D1B521A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 13:01:01 +0000
Manifest this update: Fri 24 Jul 2026 13:01:01 +0000
Manifest next update: Sat 25 Jul 2026 13:01:01 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: 30cIWfs03/Dn2/MKHoAR4pNoOaFzyqaPP0oszlVRVVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:05:b7:22:a2:d3:9b:9a:47:4d:4d:1b:52:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jul 24 13:01:01 2026 GMT
Not After : Jul 25 13:01:01 2026 GMT
Subject: CN=69a43a4f81aacd1fe291b670852f963f6a652dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:0d:87:e0:6a:2b:05:55:61:00:8e:f4:ea:
48:47:e1:de:8b:88:49:6a:39:b7:60:6e:c7:28:e5:
66:d7:f4:d0:5a:ae:fb:1b:f3:4f:17:f0:f2:5f:b2:
c7:68:dc:52:35:4f:c8:bb:68:e6:26:19:0c:63:18:
fc:71:f8:3d:5e:a5:c2:44:5f:5c:c6:bc:b1:64:42:
2e:a1:e6:cb:b8:7a:b6:49:e1:49:03:4f:52:c6:af:
0b:6c:d7:bc:fe:ac:d8:2e:25:f3:5e:57:12:72:18:
12:73:24:14:d8:68:9c:eb:84:e6:6b:6f:b7:b6:36:
41:97:75:28:2a:6b:6a:4c:b4:85:51:e6:9f:b7:eb:
03:26:a1:81:77:e2:98:c7:79:ac:f6:82:54:13:54:
20:67:21:c0:ea:dc:bc:6e:0d:33:c9:77:bc:bf:52:
29:94:2b:79:54:db:d2:55:9e:a6:a8:65:67:2e:c9:
63:85:1c:de:f1:d5:ee:b6:5b:cf:f1:2a:f9:46:12:
d3:7c:f3:5d:98:4e:26:15:9b:31:e6:5d:79:ce:fe:
56:8f:ee:5e:80:80:2e:ae:44:c2:16:13:2c:e1:27:
21:13:ab:43:6c:98:4f:46:ea:67:a3:a7:ef:f1:dd:
b3:af:2a:da:0a:ec:30:08:d8:33:30:a2:21:e1:58:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:3A:4F:81:AA:CD:1F:E2:91:B6:70:85:2F:96:3F:6A:65:2D:BF
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:10:ff:87:b5:dd:3c:88:81:62:5b:23:76:39:60:b7:a5:5f:
6e:c9:df:88:41:38:c4:c8:57:c1:29:1f:19:9c:66:ed:8b:5c:
01:8b:6d:0d:dd:75:61:6c:c5:7c:d8:bd:4c:1b:48:51:96:c1:
b6:5e:85:5a:bc:f9:95:c4:43:c2:49:b9:d2:e0:a6:ac:dd:97:
29:e3:4e:32:8c:75:ee:92:df:82:b2:3c:c5:05:ce:e8:aa:02:
33:4d:e8:21:9d:4a:88:90:69:7d:92:15:25:1f:80:04:65:04:
d7:80:33:de:69:8d:84:1a:d1:ad:d0:43:c6:43:d1:ff:6b:7b:
5e:5c:37:48:31:20:58:9f:81:fa:c2:41:7a:96:ca:f6:43:66:
0c:30:f6:8f:56:22:0d:4f:80:5f:7f:9d:fa:ac:19:03:4f:57:
93:28:1f:ef:0c:d4:33:45:ee:aa:1e:95:58:25:ba:e9:eb:33:
15:36:ef:31:3b:4a:30:0a:7b:9d:2e:3f:3b:0f:f1:72:29:9c:
83:2b:1d:b0:c5:5f:7d:a3:0e:8e:90:94:4e:34:58:53:82:0c:
d5:0d:7b:43:f4:48:de:9d:43:87:83:7c:84:9d:28:c5:9d:d2:
36:7a:3f:c3:c5:71:f0:1d:22:6f:a6:39:31:4f:f5:73:d3:01:
ba:48:74:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNwW3IqLTm5pHTU0bUhoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl
YjFlZjgwHhcNMjYwNzI0MTMwMTAxWhcNMjYwNzI1MTMwMTAxWjAzMTEwLwYDVQQD
Eyg2OWE0M2E0ZjgxYWFjZDFmZTI5MWI2NzA4NTJmOTYzZjZhNjUyZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9cNh+BqKwVVYQCO9OpIR+Hei4hJ
ajm3YG7HKOVm1/TQWq77G/NPF/DyX7LHaNxSNU/Iu2jmJhkMYxj8cfg9XqXCRF9c
xryxZEIuoebLuHq2SeFJA09Sxq8LbNe8/qzYLiXzXlcSchgScyQU2Gic64Tma2+3
tjZBl3UoKmtqTLSFUeaft+sDJqGBd+KYx3ms9oJUE1QgZyHA6ty8bg0zyXe8v1Ip
lCt5VNvSVZ6mqGVnLsljhRze8dXutlvP8Sr5RhLTfPNdmE4mFZsx5l15zv5Wj+5e
gIAurkTCFhMs4SchE6tDbJhPRupno6fv8d2zryraCuwwCNgzMKIh4VgyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmkOk+Bqs0f4pG2cIUvlj9qZS2/MB8GA1UdIwQY
MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct
ZDY4YzU3ZGI0Y2FlLzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl
LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxD/h7Xd
PIiBYlsjdjlgt6VfbsnfiEE4xMhXwSkfGZxm7YtcAYttDd11YWzFfNi9TBtIUZbB
tl6FWrz5lcRDwkm50uCmrN2XKeNOMox17pLfgrI8xQXO6KoCM03oIZ1KiJBpfZIV
JR+ABGUE14Az3mmNhBrRrdBDxkPR/2t7Xlw3SDEgWJ+B+sJBepbK9kNmDDD2j1Yi
DU+AX3+d+qwZA09Xkygf7wzUM0Xuqh6VWCW66eszFTbvMTtKMAp7nS4/Ow/xcimc
gysdsMVffaMOjpCUTjRYU4IM1Q17Q/RI3p1Dh4N8hJ0oxZ3SNno/w8Vx8B0ib6Y5
MU/1c9MBukh0kw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:52 2026 by rpki-client