Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: KGDPvjlTOa0vq2+9ysBO05dfLv5cQ1JQ2+3aVquflVU=
Subject key identifier: 95:B3:95:D2:38:45:0A:D2:63:82:FF:7E:BE:7E:9E:4B:89:96:AF:58
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019D265FE1E0DE74A696DAA057804A36D035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 19:01:51 +0000
Manifest this update: Wed 25 Mar 2026 19:01:51 +0000
Manifest next update: Thu 26 Mar 2026 19:01:51 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: JBB4GRpjd70MyXE9h3lvOKUtSQ3cLB858P5jWpRy7rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e1:e0:de:74:a6:96:da:a0:57:80:4a:36:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Mar 25 19:01:51 2026 GMT
Not After : Mar 26 19:01:51 2026 GMT
Subject: CN=95b395d238450ad26382ff7ebe7e9e4b8996af58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:a6:2b:d4:d3:b9:a6:ab:27:60:d6:e0:e7:
6d:40:81:76:ac:76:43:89:e5:16:33:15:e6:60:54:
e7:a4:fb:0d:b1:a9:6c:7f:79:5b:70:94:98:89:ea:
07:ca:37:41:b3:96:06:8b:68:67:67:d3:de:31:42:
d6:ea:a5:c0:39:c7:a4:a5:b4:41:6b:da:05:57:a6:
4c:09:e4:1c:2d:00:f5:35:b8:3d:33:62:87:26:5c:
9e:59:10:ac:7f:d2:a2:4b:f3:ee:4a:0e:b7:0c:17:
75:25:1a:d7:58:2f:fe:db:b0:c0:b1:0b:5d:61:10:
39:23:fe:40:c6:78:1b:8a:56:ff:cb:3c:aa:6f:7a:
82:4c:fe:d1:51:d3:86:04:76:a3:ce:31:c8:33:ab:
ba:14:c2:78:97:eb:1d:d6:45:70:b0:99:25:45:e4:
d7:5b:9e:06:44:8b:21:6a:25:94:cc:e8:fd:1d:94:
ca:13:50:77:9f:ed:3f:05:dd:3f:cc:87:19:56:c3:
fa:31:f4:2d:fb:c8:0b:47:2a:bc:3f:a7:d8:39:c8:
1a:c6:57:88:0d:fc:ba:9a:e5:cb:42:64:51:ff:01:
4f:4a:ab:0c:fe:2b:ec:32:c3:84:44:64:58:77:f6:
85:cb:6f:1e:2f:0e:f7:0f:b8:38:bf:e1:3a:61:79:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:95:D2:38:45:0A:D2:63:82:FF:7E:BE:7E:9E:4B:89:96:AF:58
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:cc:bb:02:a9:db:b0:1d:c8:31:0e:0d:09:d6:36:62:e2:
9c:38:47:cf:3b:6f:c7:a9:a1:9d:e8:da:bb:a8:8e:1d:37:75:
ca:3b:8a:6d:a3:47:fb:7f:e1:5a:3b:4e:42:7a:f9:67:cc:12:
33:7e:51:13:45:a9:50:0c:8b:75:51:30:ce:8d:2e:f5:a7:b4:
db:7a:b8:6c:b0:c6:61:20:c6:29:d1:f8:3d:81:43:ca:50:cc:
7b:67:34:63:2e:e2:28:e8:94:50:dc:f3:af:3c:f2:17:ee:48:
db:e2:0b:52:01:82:3b:ba:10:31:f8:41:5a:15:c5:a6:5f:37:
b7:15:ed:75:e6:7e:cf:22:64:7a:0e:b3:67:81:da:f6:b7:fe:
ee:8f:4c:08:1f:6f:0d:63:80:ee:57:af:4e:37:41:2b:fb:2c:
98:d8:08:ef:45:2c:9c:3d:2c:ec:c9:dc:b0:c1:c0:ef:0e:a8:
0a:f4:9e:c2:e7:a5:72:cf:d7:77:82:19:ba:94:7f:a6:e7:83:
52:58:3f:a2:5f:b0:c7:28:b1:25:4b:a1:71:84:15:d8:8a:a3:
a5:63:8d:be:11:cb:42:58:23:c0:ec:7a:d6:3f:3b:02:27:8d:
c4:48:da:78:18:35:88:aa:70:01:32:f4:6f:98:37:c6:22:85:
11:d3:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:10 2026 by rpki-client