Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: m4AHVrxZeDbwhaW6oQ7SN7i3xOE/c5mJ9QZoR+aZGno=
Subject key identifier: CD:8C:29:75:0C:B7:7F:5C:AC:48:05:8B:E5:74:74:7B:1D:C9:85:0E
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019FA899FEC7507D6C2D33FFCF4853E9EBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 12:01:32 +0000
Manifest this update: Tue 28 Jul 2026 12:01:32 +0000
Manifest next update: Wed 29 Jul 2026 12:01:32 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: rhGuMyiZtmnUTtOLtWqvgzjxf/O1StUdV2eNf3ujKu4=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:fe:c7:50:7d:6c:2d:33:ff:cf:48:53:e9:eb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jul 28 12:01:32 2026 GMT
Not After : Jul 29 12:01:32 2026 GMT
Subject: CN=cd8c29750cb77f5cac48058be574747b1dc9850e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:8a:4c:0e:8d:35:a0:35:8e:52:9b:6e:2a:
f9:da:b8:3d:9d:76:a0:0d:b2:01:7f:91:e3:35:1d:
24:10:1b:31:ce:15:02:14:a8:58:c7:0d:e9:cc:c4:
74:24:a5:0e:01:fc:45:66:43:1c:f1:87:54:1c:0b:
bf:f0:da:cc:11:96:67:3b:08:a1:55:d4:71:16:85:
3e:c0:39:9b:42:44:c9:73:83:32:b2:d6:24:3f:68:
d0:4b:79:83:f7:12:68:76:13:b7:2f:1d:01:3c:06:
35:cd:6f:e2:bb:b2:8c:09:2b:25:14:e0:09:86:40:
5e:ad:ab:bc:b3:84:df:1a:ee:c9:66:1e:6a:d0:1d:
7a:ae:e1:b6:3e:62:b0:cb:f4:32:f9:d2:d6:ff:a9:
eb:c4:89:21:fb:1d:ea:73:f7:f9:21:45:3a:7d:22:
fd:9f:25:ac:fe:d1:ba:72:21:90:ae:e8:3c:c8:21:
fd:b1:91:5f:6c:de:d1:ce:ff:a6:1c:55:48:c3:da:
af:5f:be:f0:cf:c5:37:64:72:27:27:f3:6f:7c:fa:
2d:86:eb:ed:63:70:e5:e3:70:1c:fa:51:fd:8f:f8:
e7:f6:3d:dc:2c:02:be:27:c8:b1:43:c9:87:84:bb:
59:a2:f0:05:2e:0c:01:20:85:ca:8c:2d:8c:27:be:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:29:75:0C:B7:7F:5C:AC:48:05:8B:E5:74:74:7B:1D:C9:85:0E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d5:32:e9:66:84:61:9d:b0:42:0b:96:bc:ce:50:5c:e5:73:
ba:e5:82:66:bf:1d:88:1e:c9:eb:6f:be:f3:09:ad:75:70:e0:
35:8e:55:a2:9e:ad:71:b8:c6:5a:24:1c:2d:d1:83:17:c4:4f:
cf:ca:98:a6:52:62:bb:fb:73:49:7c:aa:4b:c7:a3:99:70:2f:
8b:8e:84:db:33:5a:68:79:3a:06:7f:de:3a:81:ae:3c:93:f6:
60:4c:91:0f:11:9d:00:b1:41:db:4a:0c:d7:5c:14:2b:bf:fc:
50:e9:0c:63:63:07:95:81:55:3a:6c:f3:cc:f9:9f:7a:91:0e:
7a:3e:44:22:39:dc:0c:98:03:a0:6c:70:91:85:1c:4b:43:78:
0e:5d:30:dc:5a:f1:c0:eb:fc:d5:5f:b0:a1:af:d9:4e:eb:ce:
2e:6c:4e:64:f3:0a:b4:41:ca:a9:4f:6f:37:53:9a:af:94:43:
ff:36:39:f8:52:ca:0f:da:4c:28:99:af:17:64:52:4f:2f:2f:
45:8c:0c:c4:23:9b:17:e3:f0:5e:d3:5f:3d:6d:e9:eb:80:25:
99:40:07:9c:fa:5e:55:79:17:19:0f:b1:e4:83:f4:0f:41:9c:
1b:fe:a8:b1:72:00:f7:e7:dc:b4:fe:d8:48:83:5c:2a:cf:69:
0a:e4:47:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omf7HUH1sLTP/z0hT6eu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm
NzY0ZmEwHhcNMjYwNzI4MTIwMTMyWhcNMjYwNzI5MTIwMTMyWjAzMTEwLwYDVQQD
EyhjZDhjMjk3NTBjYjc3ZjVjYWM0ODA1OGJlNTc0NzQ3YjFkYzk4NTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY6KTA6NNaA1jlKbbir52rg9nXag
DbIBf5HjNR0kEBsxzhUCFKhYxw3pzMR0JKUOAfxFZkMc8YdUHAu/8NrMEZZnOwih
VdRxFoU+wDmbQkTJc4MystYkP2jQS3mD9xJodhO3Lx0BPAY1zW/iu7KMCSslFOAJ
hkBerau8s4TfGu7JZh5q0B16ruG2PmKwy/Qy+dLW/6nrxIkh+x3qc/f5IUU6fSL9
nyWs/tG6ciGQrug8yCH9sZFfbN7Rzv+mHFVIw9qvX77wz8U3ZHInJ/NvfPothuvt
Y3Dl43Ac+lH9j/jn9j3cLAK+J8ixQ8mHhLtZovAFLgwBIIXKjC2MJ75GdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2MKXUMt39crEgFi+V0dHsdyYUOMB8GA1UdIwQY
MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt
YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy
LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAytUy6WaE
YZ2wQguWvM5QXOVzuuWCZr8diB7J62++8wmtdXDgNY5Vop6tcbjGWiQcLdGDF8RP
z8qYplJiu/tzSXyqS8ejmXAvi46E2zNaaHk6Bn/eOoGuPJP2YEyRDxGdALFB20oM
11wUK7/8UOkMY2MHlYFVOmzzzPmfepEOej5EIjncDJgDoGxwkYUcS0N4Dl0w3Frx
wOv81V+woa/ZTuvOLmxOZPMKtEHKqU9vN1Oar5RD/zY5+FLKD9pMKJmvF2RSTy8v
RYwMxCObF+PwXtNfPW3p64AlmUAHnPpeVXkXGQ+x5IP0D0GcG/6osXIA9+fctP7Y
SINcKs9pCuRHOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:30 2026 by rpki-client