Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: RR0K17RGH6QnDaWhbHxTg0raM7PW3xTDOr85kmx+GdA=
Subject key identifier: 4E:DA:3A:75:3D:E7:4C:1C:AC:38:48:59:DA:7F:6F:BE:08:0E:63:CE
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019CADC7539F1DDBB426C77E21DDC0F481BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 09:00:47 +0000
Manifest this update: Mon 02 Mar 2026 09:00:47 +0000
Manifest next update: Tue 03 Mar 2026 09:00:47 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: 5chfWlBVo6v038o/0/Sjm6bZg9kDpWQ0BiEpnwTjanM=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:53:9f:1d:db:b4:26:c7:7e:21:dd:c0:f4:81:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Mar 2 09:00:47 2026 GMT
Not After : Mar 3 09:00:47 2026 GMT
Subject: CN=4eda3a753de74c1cac384859da7f6fbe080e63ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:e3:a3:bc:41:cf:f6:67:e4:f5:f1:38:e2:
e1:ab:3a:d8:09:8a:a0:fe:2a:fa:ca:a9:26:02:0a:
d7:97:1c:db:23:29:74:a0:24:68:7b:3e:69:ba:6b:
85:07:33:b8:18:68:10:66:7d:2e:d4:09:04:5d:f8:
5a:3a:f8:a6:e1:7e:6c:11:71:4c:fa:08:a6:b6:f8:
97:87:ec:1b:ee:50:02:93:26:17:cf:cc:1a:95:7a:
eb:17:cd:78:84:e6:5b:23:36:26:a0:ff:a6:fa:58:
44:a7:0d:7d:66:70:36:5c:65:83:e3:44:cb:bb:90:
7c:c6:92:d0:c9:08:f2:4f:a0:77:9b:df:24:08:7f:
c5:24:71:4b:fc:54:f5:36:db:63:e0:53:e8:23:ad:
3c:3d:54:fd:b9:17:f9:87:75:ee:27:8c:af:81:40:
e2:fc:59:1c:3b:9f:83:50:d2:03:39:6b:d5:7d:67:
5d:a9:4b:6b:62:5c:33:79:a2:f6:35:4f:7a:e1:28:
fa:16:fa:f1:33:c1:69:83:6c:f2:3f:4a:0b:73:a1:
85:f7:fe:03:0e:c4:f7:7a:25:be:6b:08:18:34:81:
a2:de:18:d7:e3:b6:93:ed:47:ab:91:5c:08:50:59:
d6:2e:a4:a5:cb:bc:97:e9:33:45:a8:b5:c7:19:6c:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:3A:75:3D:E7:4C:1C:AC:38:48:59:DA:7F:6F:BE:08:0E:63:CE
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:d8:b5:00:56:74:d6:7e:37:22:2c:e7:73:e9:ba:9e:bc:
76:64:f0:cb:96:29:5f:31:c7:19:a2:4c:dc:6c:e6:7a:77:cc:
4d:dc:dc:08:2e:c3:70:d3:44:69:ca:8c:5c:16:a0:06:eb:0e:
c4:6e:13:ff:d4:fc:60:07:d2:af:cf:b1:03:a0:46:0f:59:f8:
44:b5:21:a4:77:0c:20:cf:a4:fa:03:ae:aa:f6:aa:30:27:f4:
e0:ba:55:35:4b:9e:10:5b:06:fb:17:5d:51:c5:b8:d8:a8:a0:
50:d0:73:28:11:4f:be:5b:4d:dd:ac:ed:ee:a9:a7:8f:d4:eb:
ec:70:35:8c:b2:fc:40:35:75:ab:95:88:e8:c6:08:61:c6:1b:
7c:83:12:3e:f4:2b:71:37:cf:29:4a:84:00:6f:10:bd:70:b5:
ea:62:45:e0:e5:a6:b2:9f:50:bc:c7:1a:ef:6a:de:81:5b:7f:
b4:8f:d4:01:ac:3e:75:ac:01:48:db:d4:ff:a3:d1:76:31:0f:
8f:53:1a:bc:fb:a7:c5:d7:b6:87:89:57:61:58:f1:09:8d:42:
8c:e2:81:d5:4c:ac:6c:c5:a1:6b:d2:c1:0e:21:40:89:ec:a2:
cf:4b:c7:1c:da:55:f6:1a:71:d0:92:b4:98:09:10:9f:14:d4:
1e:d9:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:01 2026 by rpki-client