Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: yHsfROG14Tm9GnKCjzI0xJoaC5ClaRoOh0zVaLrpGuY=
Subject key identifier: 64:8F:B1:1D:5E:95:1E:2E:B9:4A:55:25:F9:73:F7:DE:CE:99:19:C1
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 019D2704886927DCDB9390705C53560A8A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: Ntg6Heq/EiMNvKBE6WjnoMdTDcg9fCDwnk9WjJeMKvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:88:69:27:dc:db:93:90:70:5c:53:56:0a:8a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=648fb11d5e951e2eb94a5525f973f7dece9919c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:7e:51:04:aa:54:90:5f:d7:bc:ee:21:63:
26:23:7a:be:03:a6:1b:bf:1d:75:2d:7b:14:43:f5:
d7:2b:2f:7f:34:e8:3f:78:a6:ef:8b:19:3f:b3:e1:
64:cd:94:f2:f3:e1:af:ef:61:0a:bb:3f:27:d6:6e:
d1:86:96:86:47:5f:4c:0e:50:0f:f1:19:9b:1b:d1:
18:3d:fb:2e:3b:e2:a7:2d:b5:04:6d:da:51:ce:00:
02:93:13:37:5f:6d:eb:14:65:51:27:4d:95:2d:fc:
66:c3:59:45:b6:8d:df:97:45:9b:68:d6:ac:d8:59:
28:ac:d4:0f:07:fb:d8:c1:e3:9c:38:86:3f:11:c8:
6f:fa:8d:ec:bb:05:97:2d:92:03:47:dd:b2:9f:21:
c8:7a:ef:9f:65:f0:2e:3a:a4:2b:d0:cd:e2:ab:95:
1c:c0:df:95:e2:66:ac:67:70:c6:7c:9d:fc:b9:35:
2e:5a:38:39:3c:54:19:21:87:23:3f:8f:db:e0:6c:
56:5d:47:3d:55:2f:5a:fa:a5:f3:e5:d7:b0:19:fe:
0d:6a:45:92:ab:24:25:a0:e9:70:bb:cf:72:b3:62:
47:6a:9c:54:70:63:6b:e5:b8:c3:d4:f7:7d:d2:2c:
03:9d:bb:c6:b9:94:cb:38:20:30:7d:c9:9c:5f:a6:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:B1:1D:5E:95:1E:2E:B9:4A:55:25:F9:73:F7:DE:CE:99:19:C1
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:a3:ac:20:2a:61:c4:66:e5:f8:28:ae:ee:2e:3d:18:e4:
2b:42:75:1e:ab:85:e5:8c:d2:83:ab:32:d5:02:d7:6d:b6:17:
4d:50:93:f5:93:22:b6:d2:3f:0f:1b:89:25:67:e6:11:1e:d3:
eb:22:44:0e:fa:85:d2:a9:2d:7d:bc:8f:40:3d:81:47:fd:bb:
f6:b8:08:be:14:fb:0a:4f:4f:2e:50:f3:93:4f:df:0d:d3:a0:
79:69:ad:80:e2:e6:e0:9a:44:aa:a2:59:ca:eb:59:2e:99:f7:
9b:53:50:dd:03:6a:3f:4b:29:6e:2b:07:c3:6e:e8:1f:1e:ae:
9c:4d:6d:36:64:cc:09:34:12:8b:3a:aa:cb:16:15:c2:8e:f7:
98:16:80:9c:65:2a:2b:eb:c8:ad:33:41:f4:ba:c6:45:a3:6e:
d2:30:49:61:db:92:46:63:95:4d:6a:3a:16:6a:d6:8b:c1:5e:
a5:67:04:39:2f:f2:34:c2:2a:73:f8:b0:4b:65:6d:3c:00:2e:
7d:7c:c4:38:8c:11:a8:b4:12:5c:aa:7a:a6:6b:b3:62:5c:71:
3f:3d:0c:6a:41:ec:1c:29:36:27:47:d8:30:7f:75:10:04:79:
4b:fe:80:a8:c1:0e:05:f7:17:4f:f9:87:2d:83:83:ea:c5:13:
21:20:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:31 2026 by rpki-client