
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: MY8JdPxwn1spTYjy1U6+EP0DvFneNt+dqMV0dirzHNg=
Subject key identifier: 7D:73:24:5F:38:EF:E9:DC:7D:AA:31:07:1A:0C:E9:DA:E0:E6:B9:61
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019EBEED31648CA1224F9E8ECA074820296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 03:01:15 +0000
Manifest this update: Sat 13 Jun 2026 03:01:15 +0000
Manifest next update: Sun 14 Jun 2026 03:01:15 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: ov8Sd0pxl+YTP2uZr1qmP2mBK/WLOxtrIFq2W29d7Qo=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:31:64:8c:a1:22:4f:9e:8e:ca:07:48:20:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jun 13 03:01:15 2026 GMT
Not After : Jun 14 03:01:15 2026 GMT
Subject: CN=7d73245f38efe9dc7daa31071a0ce9dae0e6b961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:b6:cc:2e:14:b0:d6:c2:0b:74:38:d4:7a:
3b:2b:f2:bf:c8:33:a5:5d:13:11:8f:b9:42:e5:38:
72:14:f7:61:49:a6:3d:db:65:31:d6:61:e4:ca:c6:
f0:20:38:a0:c1:a0:29:a4:d7:f1:7e:1c:71:12:5a:
57:ef:cd:9a:82:bf:d7:7f:49:d6:88:4e:5f:1f:7e:
29:27:e1:30:52:2c:1b:88:aa:f2:59:7a:29:d7:22:
4f:8b:02:c3:55:34:1f:66:06:8c:ca:a7:ed:73:56:
de:79:73:96:da:8a:a8:ea:ae:18:25:a0:0e:64:6d:
f1:33:4e:71:6a:15:97:64:0a:70:c7:75:83:c6:04:
8b:35:4e:83:96:81:4b:a8:63:32:45:2c:6b:99:4f:
98:4d:b0:07:ed:03:37:52:6d:54:50:13:49:90:bf:
1b:6a:4d:a8:7c:c3:6f:ce:c1:16:f3:42:a2:f4:a5:
5a:07:ea:ac:cf:b6:b3:a1:53:e7:dd:4e:31:3c:2f:
51:f7:1a:e6:eb:05:a0:e6:8b:2c:f5:9e:30:24:1e:
56:1d:08:1e:57:44:f1:7c:a7:4e:3e:41:a4:be:8b:
dd:21:fe:cb:11:f6:be:d9:9f:98:6e:e2:13:bc:d3:
65:61:5d:f3:ee:03:3b:5e:95:26:05:53:f9:bf:20:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:24:5F:38:EF:E9:DC:7D:AA:31:07:1A:0C:E9:DA:E0:E6:B9:61
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:72:8e:cd:2a:a4:1f:0c:10:15:61:05:12:1b:95:f5:3f:0e:
4d:f2:12:f2:5a:a9:1b:cd:27:80:4a:50:82:06:99:88:3c:33:
c4:11:da:fa:b9:a5:eb:90:0e:62:11:8f:d5:34:5e:25:c6:e9:
d1:16:52:63:90:76:21:45:5a:13:7d:10:dc:93:d2:a8:f5:c1:
6b:e7:4c:88:3b:20:e5:e6:d9:14:fc:50:f5:a0:8c:94:71:67:
f9:d4:dd:ee:5d:33:2e:a2:dc:8b:60:80:97:76:3c:92:0b:f6:
32:bd:ce:36:d3:a6:83:7f:bc:10:27:b6:45:77:37:ec:8e:25:
e4:d6:38:5d:c5:60:6b:61:29:27:2c:29:62:46:b4:6b:fa:b5:
a1:41:fb:3e:79:49:f3:b8:26:b6:32:b1:6a:48:e9:c6:7e:92:
3c:ad:4e:26:69:61:d8:51:12:db:6d:e1:bb:cc:d8:bd:32:a4:
12:ba:37:dc:5c:83:2c:aa:90:7b:89:f4:e0:5f:1c:87:2c:de:
da:95:75:18:cd:43:d2:da:d7:ca:53:86:21:e1:c4:ed:c0:26:
7e:f7:c0:52:e7:4b:f9:dd:4d:ff:4e:38:df:77:b0:ee:47:6b:
3c:db:08:80:9e:cd:9f:23:89:e9:36:74:a3:f9:92:10:21:4e:
2e:5c:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:06 2026 by rpki-client