Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: uGothOZ6iGGWK2rERAdGNGjMTHDlkqVqhjdgrz7FV0c=
Subject key identifier: 77:89:3B:B3:79:14:7A:F3:9D:2C:BC:EB:EB:74:A9:8C:FA:E5:68:0E
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019EC0DA9D8096670A850E0C46BDD963B215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1963
Signing time: Sat 13 Jun 2026 12:00:13 +0000
Manifest this update: Sat 13 Jun 2026 12:00:13 +0000
Manifest next update: Sun 14 Jun 2026 12:00:13 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: R6SEz+0os7/etawyKARLbA6fIDMLPPsBvDHEhWhjiOA=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:9d:80:96:67:0a:85:0e:0c:46:bd:d9:63:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jun 13 12:00:13 2026 GMT
Not After : Jun 14 12:00:13 2026 GMT
Subject: CN=77893bb379147af39d2cbcebeb74a98cfae5680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:35:57:78:b4:8a:5f:17:d7:3d:28:8b:9a:
70:6d:af:24:e5:af:34:2d:1f:91:2c:9a:75:a4:53:
ad:31:a0:09:35:ec:ee:b6:b6:d5:69:60:1e:93:1a:
c8:ef:27:5e:ed:75:ab:93:64:a9:d1:74:d9:5c:b7:
49:8c:74:55:7a:6e:69:55:aa:2a:79:ba:87:63:c0:
c6:40:f5:ed:38:ad:52:0a:27:dd:5c:c7:6b:b3:43:
cd:13:4e:0f:1c:fa:5c:96:59:8e:62:77:d4:ee:de:
32:c6:7d:5a:16:d0:61:3d:fb:a3:5d:f0:71:00:72:
b0:b3:34:5a:1a:cf:03:cf:0e:80:40:06:24:6c:27:
39:98:70:40:fe:bc:fa:73:7b:d3:47:4c:77:10:4e:
95:c0:ee:33:65:30:a8:bf:9c:be:ee:00:06:06:9b:
86:6f:b1:f8:d2:ad:6d:6c:6d:55:55:45:1f:d1:2d:
19:38:0e:c6:41:20:88:c4:7a:83:95:4b:3f:6f:9d:
b9:21:46:ed:15:02:09:6a:f7:45:ce:28:7a:78:a3:
42:16:25:c3:94:a8:88:a1:fd:2a:cf:7e:ac:94:cb:
a2:b6:c5:a2:50:cf:7b:4f:8f:22:a0:53:86:67:87:
dc:d6:04:bf:79:b6:69:7e:fe:18:b1:17:be:27:0d:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:3B:B3:79:14:7A:F3:9D:2C:BC:EB:EB:74:A9:8C:FA:E5:68:0E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b9:4b:44:60:40:05:21:f9:5c:f0:5b:a2:7d:d0:5b:3a:fe:
fd:1e:7a:6c:98:9a:0e:50:65:64:9d:0f:a7:52:98:69:84:70:
0f:e1:13:06:7f:62:f1:e0:91:fe:72:e9:07:ec:dd:64:7b:37:
e2:9b:bc:be:1b:2f:54:e7:ea:6b:fa:c2:b4:79:cf:6e:1f:47:
78:d1:26:6b:87:2e:99:41:63:23:50:6a:eb:c0:42:39:74:28:
22:d8:17:c3:2c:e2:b8:a4:1d:cc:d6:cd:5c:e0:3b:46:5c:6b:
91:93:b9:48:49:0b:ab:65:d8:37:9e:b9:b9:fb:3e:2f:6c:3c:
f1:02:7f:7d:8d:21:a3:73:46:f9:80:d1:de:94:5a:ca:1b:76:
c9:27:4a:ad:f5:52:3c:b9:9e:c2:5a:88:7c:2e:1e:23:57:d4:
c4:66:d7:5e:3f:4e:d3:42:e2:b8:6a:c5:27:68:a6:8b:a8:31:
42:64:08:d3:e0:b3:30:02:8a:c7:3c:3d:eb:eb:7a:49:8b:20:
e0:42:ab:2a:b6:b1:ef:0d:31:71:2b:68:b6:b2:a3:da:1e:eb:
41:d8:92:71:79:72:6a:de:99:d5:7e:d0:2d:4e:40:b5:0c:15:
fc:59:e4:7c:9d:59:92:59:65:5e:b6:40:b4:b1:5b:12:a8:8a:
8f:a2:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:06 2026 by rpki-client