Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: Wl9hM58a/3mYwj+E/WZWyukC3EJDzllY86LoacZbLi0=
Subject key identifier: 4D:69:EC:84:A0:98:F7:6A:F4:BF:3C:CF:FE:24:4C:A9:0F:9C:8C:C2
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019CABDA07ACC4A832F169C622E62889C1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: g2l0RuGUnNWTD/mWZ36oknr78X8WmqK+USXw3kjqFi0=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:07:ac:c4:a8:32:f1:69:c6:22:e6:28:89:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=4d69ec84a098f76af4bf3ccffe244ca90f9c8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:ce:22:58:44:ff:c6:dd:dc:61:9b:91:66:
79:ab:33:38:51:1a:ab:da:87:ab:81:c1:aa:53:18:
ce:e5:8c:36:da:68:ce:74:13:76:a7:28:e3:7c:e3:
f5:da:9d:10:8f:50:10:cf:99:c9:6f:6e:3e:c4:f0:
5f:c1:fd:1d:4e:df:8a:40:74:b7:70:f7:a1:bd:d3:
11:59:c8:5a:0f:83:35:d5:5d:ba:5a:34:26:e5:78:
f0:2f:28:04:68:35:d3:3a:91:89:d7:3d:ea:e1:64:
d1:cc:38:36:dc:fa:86:77:12:6f:2e:74:8c:ad:39:
b7:26:21:7f:a4:db:39:35:f6:5d:2a:5d:63:b6:12:
84:5c:93:aa:6f:ab:71:ff:be:72:dc:d1:4c:0d:4a:
86:4e:8f:3b:03:d8:3c:cb:d4:93:90:38:69:04:e7:
f9:8a:43:fb:a6:0e:3f:b2:cf:f4:0b:88:9a:cf:53:
48:bf:7d:a9:dd:7f:8d:64:59:51:6e:dc:31:ca:eb:
b2:65:ba:d5:82:53:5d:8e:ef:65:88:51:a2:e7:52:
79:20:d1:79:e8:42:8b:3d:09:f9:bc:1e:a5:4a:aa:
fe:a1:59:c4:f5:a5:a9:19:04:3b:8b:55:a4:3b:f3:
84:e9:41:c7:5e:32:d9:c6:7a:d3:ef:dc:70:17:50:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:EC:84:A0:98:F7:6A:F4:BF:3C:CF:FE:24:4C:A9:0F:9C:8C:C2
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:99:32:5d:65:5d:11:c6:90:b7:24:37:95:cb:c0:f1:4e:e1:
88:d2:cb:b7:11:d2:6e:70:25:6d:e2:c7:56:3d:27:9b:b3:5c:
ab:60:0b:a8:47:9f:ba:4b:e6:1f:34:d8:81:e7:24:59:bd:80:
22:85:56:f4:46:64:51:18:af:c2:0e:39:80:09:93:5c:6a:c1:
1f:8b:d8:1e:fc:3c:66:a3:7e:33:a7:4c:54:48:04:f7:71:89:
0b:18:06:d7:b3:94:d8:1d:a6:35:a6:41:e4:08:66:6a:66:89:
0a:de:e1:6c:3f:20:c5:de:97:a4:0d:ac:3b:f2:0f:d9:ca:ff:
ea:76:f9:df:70:12:c7:f0:d5:eb:b9:9a:33:48:f3:e3:0d:d7:
76:5d:92:cf:bc:b2:70:c2:0a:bc:39:93:73:09:6d:a6:04:b4:
91:c8:fe:29:8a:19:23:da:94:24:47:fe:4c:aa:b4:42:08:86:
1e:5f:2a:f2:5c:04:0f:98:97:97:58:42:67:61:97:55:ba:13:
8e:a2:db:66:64:7a:13:55:52:f4:29:53:c4:7b:58:45:50:4b:
5f:d8:ad:67:57:90:69:85:66:8b:9c:4f:01:0a:f5:56:63:62:
40:9e:58:d3:34:e8:26:19:2f:9b:29:20:7f:f9:bc:76:24:7a:
30:4c:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:59 2026 by rpki-client