Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: 2n6z4C+VkFDkmULGeaPABIix/guKGUW7TnVeSVb6IkY=
Subject key identifier: 09:86:C8:14:5D:09:06:BF:9C:E6:8E:E2:C9:AC:92:21:0E:E3:14:9D
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019CACB4BD322A543CF2FFD9682DA92EE431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: OqMmpbl+oZgMYIQmamlV/+zPLc3zBKE9xpqpRLwEg+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:bd:32:2a:54:3c:f2:ff:d9:68:2d:a9:2e:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=0986c8145d0906bf9ce68ee2c9ac92210ee3149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:22:be:77:b4:a3:0c:df:df:05:54:f7:9b:
34:2f:04:4f:b9:61:92:b0:35:e4:6d:4c:41:86:60:
51:9d:5b:66:bf:d6:e6:aa:92:30:c4:40:1d:d8:ae:
51:d9:44:80:51:e2:29:29:c3:53:3a:e6:0e:b2:cf:
35:fb:b6:92:66:24:44:ec:a6:43:01:a1:be:9a:51:
23:fb:b8:ba:19:93:11:34:a7:5f:a6:7b:24:bc:3b:
7a:75:d1:30:9d:d7:0f:50:c4:13:8e:0f:8f:e1:cf:
3a:ce:48:a3:ae:a6:b1:72:0e:ef:7b:0f:a2:4f:3a:
f8:2a:54:c2:f3:d7:30:b5:a2:14:9b:3c:8d:a9:27:
71:46:f0:6f:72:ff:c4:35:54:da:4c:19:b5:32:b3:
83:65:61:d6:7b:c3:0d:66:11:ad:ac:40:c2:76:e6:
a0:db:82:c5:d8:0a:b8:c2:b5:f8:8a:ab:2f:9f:78:
7a:52:54:1e:16:d6:ff:e8:10:83:2c:d1:8b:be:06:
31:07:bd:f2:cd:6c:f1:ce:11:43:bf:81:c0:13:d4:
a5:a8:c7:cb:c3:ad:8d:c8:45:f2:17:c3:70:57:df:
08:65:5d:a0:9b:83:31:9d:0f:58:69:b6:62:da:0a:
52:71:bd:02:8b:bd:44:cf:62:c1:f5:97:97:b7:64:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:C8:14:5D:09:06:BF:9C:E6:8E:E2:C9:AC:92:21:0E:E3:14:9D
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:2d:ba:33:22:05:34:44:00:c3:ea:ea:60:2e:d9:92:88:
9b:27:f0:c4:b2:0a:3f:87:36:93:ab:25:a4:09:bd:1b:50:e7:
1c:f0:ba:64:93:ee:aa:7b:99:04:42:c0:24:af:7f:25:4b:e9:
7a:c1:c5:f0:9c:2c:02:79:53:be:32:a9:e3:31:99:f9:86:6d:
24:c2:a3:76:7b:10:e6:e8:f8:65:67:9d:d9:75:f8:2a:cb:8f:
64:71:d7:6b:ad:d7:0f:76:54:76:15:2a:3d:55:27:07:8d:24:
43:9c:11:7d:26:91:cb:91:4b:73:e6:16:d3:62:f9:28:e3:fb:
b9:4e:8b:29:c1:5c:a2:c4:42:83:83:9c:2d:8c:45:7a:01:3f:
d4:43:cc:19:74:d0:89:fc:47:7f:26:b5:7b:54:b5:64:fc:03:
93:9b:e6:5d:98:25:c4:ea:28:59:3b:12:b2:0c:3d:41:11:d2:
4e:6f:5f:60:b7:ef:11:a4:c1:e7:54:89:9d:9d:7e:db:4c:8a:
b5:4a:77:f2:aa:6d:ea:71:ad:a0:1e:07:14:d7:17:09:05:1e:
5e:f8:6d:ac:3e:7d:ec:d0:06:cd:39:25:95:8b:f3:1d:63:71:
c2:48:17:88:f2:47:11:95:47:1d:46:9b:db:41:e2:1d:dd:17:
d7:19:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:35 2026 by rpki-client