Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: seVqRpd2LrX1lD1mJ+IIx8n0TlIRxTgkDYpPyPsE9eA=
Subject key identifier: C7:D4:92:9B:2C:E1:FE:CD:E6:2C:5C:99:F5:4D:ED:9F:DF:E9:2B:1E
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019E1D907E7BB7503BA2065A1E3B3B61C13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1910
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: rWCjBz4GGLt52L2FtqeORL3BGINLRFweSh4ZbKls0MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7e:7b:b7:50:3b:a2:06:5a:1e:3b:3b:61:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=c7d4929b2ce1fecde62c5c99f54ded9fdfe92b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:3e:18:11:60:db:71:9b:e2:ac:b2:04:7c:
81:65:40:a7:86:eb:35:5b:04:3a:5b:0a:5f:0f:34:
b9:4c:93:ec:32:bb:a2:05:cf:61:28:0e:98:7a:9b:
54:1e:32:4b:8d:7b:76:ae:96:74:a9:31:06:30:41:
68:9c:75:8f:46:e5:ff:6d:16:ae:c5:11:78:a8:31:
5f:2c:a8:85:36:87:87:b1:96:11:f0:29:5a:eb:f2:
74:d9:73:ad:61:dc:77:a1:58:84:fd:b5:5c:8f:84:
9a:6b:8d:73:ef:e5:95:8d:4c:bf:18:60:04:56:34:
15:ee:36:5e:53:1b:ec:52:97:c5:9a:3b:a7:22:0f:
b8:9f:26:83:21:1b:ec:4e:ac:5d:64:34:56:b0:98:
1a:a0:5d:19:7b:c9:4f:c5:f9:fb:8b:78:5b:12:cd:
14:64:cc:a4:c7:e3:58:37:a2:fe:0b:1d:a4:74:ab:
7b:58:e5:3b:6b:f9:57:77:2f:6e:3d:9d:d2:6b:c1:
db:4e:68:7e:ab:1a:42:40:ce:f3:ee:c9:8d:6c:de:
1a:22:1c:4e:51:4e:97:5b:9b:20:0c:05:94:78:c8:
0e:dd:15:5c:61:f7:1d:fe:46:bf:b9:2e:ae:0b:15:
1b:70:65:42:6e:f0:21:0e:d5:b3:e4:47:e3:9b:f8:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:92:9B:2C:E1:FE:CD:E6:2C:5C:99:F5:4D:ED:9F:DF:E9:2B:1E
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:93:b1:cd:1e:1a:7a:05:2a:6a:ce:46:c2:49:f8:4b:d8:c0:
7e:0f:8f:92:08:2a:f6:f5:43:2b:c1:a9:74:9f:96:d3:bb:ef:
ef:b7:69:f9:b5:cd:f6:34:40:7c:44:d2:1a:a7:4e:17:24:99:
e0:c2:0b:a2:15:d7:9c:dd:4f:7e:8c:2a:3f:5f:2a:62:dd:2e:
87:7f:11:a5:96:20:39:25:38:92:2f:50:89:e9:4a:b2:8c:f6:
c3:44:f3:8c:e7:12:2a:ba:02:cf:de:99:1f:f7:fd:1c:92:e0:
4f:43:e3:79:ed:da:e0:79:3d:3c:e9:cb:f3:e7:01:dd:55:8e:
90:e4:eb:73:c5:66:b0:32:6e:56:32:9a:86:90:e2:81:f8:e3:
2b:f3:3f:fe:65:3d:0e:c9:fc:11:33:7a:6d:a8:d5:27:26:d6:
65:16:26:72:b0:e7:21:60:ff:48:84:75:29:d7:51:ba:bf:70:
8f:93:88:65:78:86:2a:d1:9b:e9:b3:ae:e0:23:9b:62:d2:ce:
b0:c4:aa:57:85:f2:5d:0e:c6:b9:e2:23:2f:18:7e:50:85:1a:
ca:2d:e4:46:96:0c:ae:87:f4:bc:81:25:4f:be:e6:c3:57:fe:
1c:0a:f9:85:18:dc:66:3d:bb:e2:af:c0:1e:4a:39:08:85:8f:
eb:a3:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:41 2026 by rpki-client