Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: yzTMjD/CEZu2Nu6DDyB4ZyWJ6tLnuKT4c+3amXqo6N0=
Subject key identifier: DC:DE:08:40:10:F4:77:7B:85:B8:1C:59:FC:A6:AB:1B:D4:55:58:D8
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 019D98509B26983964ED45E564DD34F67832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 08AC
Signing time: Thu 16 Apr 2026 22:01:52 +0000
Manifest this update: Thu 16 Apr 2026 22:01:52 +0000
Manifest next update: Fri 17 Apr 2026 22:01:52 +0000
Files and hashes: 1: IBlLkWqkaAhFp5QCimnfnCtLSuw.roa (hash: Qqv9tu5JI0ukk1Ce5QgBQxyaYDJ3PAWYDYEJ40iffTc=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: shCZo2pkt4jY6LhGdy6zqZtFrKM98TvNuqRcDDCVUU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9b:26:98:39:64:ed:45:e5:64:dd:34:f6:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Apr 16 22:01:52 2026 GMT
Not After : Apr 17 22:01:52 2026 GMT
Subject: CN=dcde084010f4777b85b81c59fca6ab1bd45558d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:7c:64:19:03:b0:b5:94:ed:cf:dd:d3:5d:
23:83:ed:9c:70:1e:c1:56:ff:50:a2:f5:22:8c:af:
05:96:40:6f:e8:92:6a:b4:7e:ff:b7:60:0a:31:cf:
e5:39:dd:7e:6c:b3:68:26:ba:44:70:3a:c0:6d:71:
78:5a:62:c4:c4:8c:d6:bf:f2:6a:b0:3f:15:fb:14:
48:00:1c:50:42:c8:d2:a7:d6:4b:a6:df:c4:18:0b:
62:7b:a4:71:ca:38:0e:be:56:8f:10:db:dd:8e:c0:
3c:0e:8b:6c:05:05:84:35:86:05:05:be:06:2d:f2:
7a:b9:f8:20:62:ba:2d:23:33:cd:88:45:1d:84:8f:
d7:b2:e9:64:18:d4:50:15:15:6e:21:d3:be:82:73:
a0:db:c7:7d:d6:b2:a0:2a:4c:1f:21:77:81:c0:dd:
4e:3d:ab:43:f2:a0:c9:42:d2:78:c7:d1:f9:4e:a1:
aa:24:6d:4b:4c:ee:97:f4:73:6d:61:5f:99:d1:fd:
7f:32:1f:78:9d:2c:93:49:df:26:8b:71:d5:ea:bd:
8a:8c:c3:c8:8e:1e:71:8a:15:1d:e1:4f:8f:bc:8f:
f9:0f:7c:bd:5b:5d:ce:b1:38:2b:33:0f:0b:07:ef:
dd:eb:03:ac:7a:d5:03:66:38:66:17:d0:1b:7e:4b:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:08:40:10:F4:77:7B:85:B8:1C:59:FC:A6:AB:1B:D4:55:58:D8
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:21:64:3b:bb:a2:d7:46:2e:a6:3d:97:d2:9f:81:f5:23:b7:
dd:12:29:6f:aa:2e:bd:f8:25:0a:de:2a:b9:c6:48:46:f3:43:
4d:bb:db:3f:7f:aa:79:76:bb:73:c6:69:e2:c4:34:96:a8:70:
e5:7a:8a:eb:78:d4:94:6f:dd:df:29:a0:07:8e:53:7c:f0:7f:
73:4c:84:bf:f1:56:2c:b4:6c:0a:b0:64:bb:b8:78:fd:24:1f:
76:1d:26:ab:c7:77:ba:25:27:18:c4:e5:3d:1e:88:7a:3c:e3:
2e:4c:91:20:45:d8:5a:cd:7b:6a:f4:05:a9:f5:22:67:40:78:
54:58:00:e7:37:00:6f:3b:8d:97:fd:34:c5:71:0d:68:f7:21:
de:eb:17:4d:46:12:6f:10:99:da:e2:d5:ac:39:07:aa:c2:59:
8f:c2:20:2e:e4:30:ff:16:09:ef:3d:38:eb:18:4d:d7:2b:10:
aa:0c:e6:2e:42:99:e1:5a:03:b0:85:23:7b:7d:3f:92:de:43:
09:95:30:3b:d1:53:fa:ed:06:46:6f:7d:ce:3e:63:a0:81:7a:
5a:b5:c6:e7:8b:23:d5:5c:a2:1a:e3:e6:08:68:d5:8e:88:07:
87:5a:b2:bd:5e:53:c2:9e:c0:16:79:3a:62:82:29:6e:c8:f2:
e5:6b:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:43 2026 by rpki-client