Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: jyWwuabHy8QFPYDf14XeKWs3KiD4UPsB5Re3s0tUB00=
Subject key identifier: 9A:21:D8:CB:45:70:BB:FF:AF:F7:7A:4D:0E:8A:53:E5:57:2B:88:10
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 01A0C47C0B206E7C947FE289F7212D0AEB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 15:00:58 +0000
Manifest this update: Mon 21 Sep 2026 15:00:58 +0000
Manifest next update: Tue 22 Sep 2026 15:00:58 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: /L9ED2x58udDpC2MTszJC8I07nvUmOBSm2Dq3zumyYM=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:0b:20:6e:7c:94:7f:e2:89:f7:21:2d:0a:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Sep 21 15:00:58 2026 GMT
Not After : Sep 22 15:00:58 2026 GMT
Subject: CN=9a21d8cb4570bbffaff77a4d0e8a53e5572b8810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:d7:67:44:10:42:a8:b3:57:36:38:01:ac:
db:c5:16:66:bc:03:c0:03:d6:bf:dd:3e:03:47:ba:
c0:5f:95:66:a6:49:15:92:59:60:39:27:4d:a2:0b:
e8:46:a8:7d:a9:4d:8a:6b:51:98:11:e0:aa:f4:ab:
1a:bc:9f:28:85:b9:14:3c:5d:ca:b4:de:26:39:05:
d1:4d:26:f2:ee:d8:ad:bc:af:37:21:ce:b1:2b:56:
11:bf:f9:53:fd:e0:5a:e9:3f:f6:e8:dd:26:0d:93:
71:ec:1d:0f:71:5f:9c:a7:11:a7:5c:bc:f2:f4:85:
d6:0f:31:cd:30:f6:4b:64:4a:71:99:47:86:38:76:
e5:2f:61:72:8f:6d:7c:78:eb:dc:41:dd:68:60:b6:
f9:f5:35:23:33:85:02:56:81:1a:ac:d6:20:19:c0:
8b:f6:01:8e:44:04:37:fd:d4:ab:25:40:c0:dd:da:
8e:6d:ab:b0:88:77:02:41:00:af:77:ac:ab:0e:bf:
0d:ff:55:d4:44:85:ba:02:78:36:39:ee:05:43:46:
c6:d2:13:c0:e5:9a:0f:df:97:9e:2a:52:32:d4:5e:
f0:19:b6:0e:fa:a2:0a:c1:9d:9a:25:4b:f6:9f:80:
ee:26:74:ed:df:37:9c:8e:92:a0:3c:4e:e2:1e:cc:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:D8:CB:45:70:BB:FF:AF:F7:7A:4D:0E:8A:53:E5:57:2B:88:10
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:31:10:43:d2:af:0a:d5:c8:62:0a:a1:58:d8:47:49:08:6a:
af:53:b4:5d:65:a3:a5:df:c9:c2:44:cb:22:d4:0f:e3:5d:13:
d1:39:08:66:dc:26:f1:ee:16:e4:da:f6:31:68:e1:39:37:e2:
86:65:81:6c:28:45:ed:62:42:7e:78:cb:74:36:34:7b:a1:72:
b4:8b:62:50:cc:47:f4:d0:36:2a:fe:cf:ea:56:71:28:d6:fd:
cb:08:46:95:e3:76:82:4c:c6:9e:33:2f:dd:c7:1f:cd:db:20:
51:f8:68:df:b0:84:e6:af:e2:8e:89:20:94:8d:54:1e:44:e9:
09:1f:57:d2:4f:db:cc:ab:cb:db:e2:db:d3:c8:b0:71:52:16:
f5:32:8f:fe:e5:ab:fb:26:1e:cc:1f:9a:d7:a8:39:c3:f3:24:
fe:05:a5:63:af:a4:b2:51:22:d1:54:cf:2c:98:35:cd:28:dc:
7a:16:c9:a3:ca:12:c3:f8:0c:ec:0a:39:56:9c:ae:fc:5c:ca:
7a:2c:f3:dc:94:4d:fa:ae:1c:7c:76:6c:bd:77:35:d3:83:54:
72:b5:26:ed:5c:4e:d5:84:d4:4f:99:c7:12:15:bc:b4:a7:39:
6b:03:bb:ed:6a:85:ff:74:2c:d8:ea:26:a0:46:53:55:1d:c9:
60:b2:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:26 2026 by rpki-client