Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: kurmoROLmeu6K1kCTgUcJ5BsM2+PghuwNihcjiE+FTg=
Subject key identifier: D2:EB:A2:A9:07:14:A9:B5:00:0E:29:AD:12:96:81:EE:5F:CB:AF:40
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019D9B50D266944370662ACA87BCD9145AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 12:00:58 +0000
Manifest this update: Fri 17 Apr 2026 12:00:58 +0000
Manifest next update: Sat 18 Apr 2026 12:00:58 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: clyrqr2AInz+lkKYvgHHT4BxBRoNIXPigXsFqijt3Ww=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:d2:66:94:43:70:66:2a:ca:87:bc:d9:14:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Apr 17 12:00:58 2026 GMT
Not After : Apr 18 12:00:58 2026 GMT
Subject: CN=d2eba2a90714a9b5000e29ad129681ee5fcbaf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:2a:75:69:fd:b2:a2:f7:02:e8:f4:a8:83:
d7:c9:7a:48:ab:c3:e6:0e:90:a5:c9:50:53:74:84:
b8:0b:0e:ce:4f:64:b8:d7:cc:b5:29:65:b3:9c:36:
26:37:f6:63:53:a1:0e:30:c0:1c:ea:9e:13:1e:1e:
01:b6:1c:1d:8b:43:76:55:09:6e:5f:05:36:d6:b8:
2b:78:39:b8:e4:e0:26:36:51:19:30:d5:2f:cc:d0:
e4:f5:da:45:e0:e1:59:7f:be:79:a6:3f:8e:35:cf:
b0:e7:2d:5c:cf:00:3b:27:5a:e3:7e:85:d4:36:82:
47:b7:aa:11:f4:d9:4c:f2:13:10:dd:c7:f3:bb:90:
b9:02:bf:c7:3c:48:73:00:69:b0:c4:dd:73:46:50:
a6:30:7b:71:cf:5e:ff:b2:93:73:a8:76:2e:15:60:
23:b3:6c:e0:91:b4:69:35:c0:4f:ba:62:41:c7:ea:
0d:b1:bd:e4:ee:e6:c5:dc:f5:ae:d3:ec:b8:42:0f:
27:26:fb:1b:8d:c1:bd:d3:d8:8e:9b:8e:cf:0c:59:
9e:9b:ac:0d:b4:75:7e:16:ec:9e:00:d9:59:82:41:
c4:f0:45:65:f2:4f:e9:4a:47:e2:15:8b:d3:53:cd:
70:71:d6:92:8f:03:dc:d4:30:2e:dc:7f:6c:4f:31:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:A2:A9:07:14:A9:B5:00:0E:29:AD:12:96:81:EE:5F:CB:AF:40
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:df:d3:5f:97:4c:f3:5e:f9:76:ce:96:86:66:0c:25:c1:36:
4b:8d:b1:3a:16:27:67:a0:6c:f6:67:ec:b2:c0:ee:8d:98:20:
d0:89:92:d4:cd:0e:e7:72:bb:e4:3c:0e:c1:16:86:8c:e2:a4:
66:5e:17:cc:75:46:ce:72:bc:52:20:41:82:10:2c:5c:81:ec:
7f:41:1d:e2:91:df:c6:2b:63:7f:c7:2a:6b:83:db:3b:91:fc:
47:16:5b:cb:a3:c2:d0:93:9e:86:8a:a3:55:98:02:34:32:ae:
fb:2f:ad:4a:59:8c:1c:89:e9:f4:08:ae:b6:92:5e:5d:38:74:
1d:84:3b:69:7b:4f:89:46:2e:f7:f4:35:ba:2b:2b:fe:98:3c:
cf:d0:16:6b:68:7a:d1:98:c3:06:0b:b5:24:65:33:1e:93:de:
03:10:16:c3:77:0c:c2:2f:84:55:ac:01:d0:9d:f1:8f:3e:ec:
54:3a:84:a3:b0:a7:56:48:55:3f:90:68:8e:94:6d:94:2b:ea:
21:f8:52:6e:85:a8:b7:d3:04:40:b3:f4:0b:67:61:0a:39:f1:
92:d8:b9:4e:4d:d2:d0:b3:a2:de:c8:e1:33:b5:a5:2a:12:01:
9a:8d:d8:3d:14:f6:84:4d:c3:37:ad:c7:49:65:a6:14:65:91:
dd:c5:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:41 2026 by rpki-client