Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: In1h4n99lghkt+UptjqQzIrMsJpRptTlinMYOWvH1YM=
Subject key identifier: 40:6A:51:5C:A0:DD:79:99:F1:E3:6D:75:0A:4F:56:02:61:52:2B:70
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 01A0D4CB46CBFE3DD200F94D05B725880F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 19:01:26 +0000
Manifest this update: Thu 24 Sep 2026 19:01:26 +0000
Manifest next update: Fri 25 Sep 2026 19:01:26 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: nKCHGnaMHIwztj+4FRmHZgr8YJ53XfQh6zWHD6y3Fvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:46:cb:fe:3d:d2:00:f9:4d:05:b7:25:88:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Sep 24 19:01:26 2026 GMT
Not After : Sep 25 19:01:26 2026 GMT
Subject: CN=406a515ca0dd7999f1e36d750a4f560261522b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:39:f3:00:b6:a3:99:20:96:3a:b6:72:2b:
42:8b:16:af:f4:03:2a:45:25:33:e3:73:ce:6d:02:
bd:9b:77:41:93:56:f3:52:ee:8e:74:48:04:c6:1a:
3c:93:64:a0:03:e1:ad:9c:13:ab:21:4b:7e:da:27:
34:62:f9:70:70:56:d5:50:2d:be:a1:bc:79:4d:78:
f0:98:9e:ae:4e:60:99:b7:fc:4f:b1:36:c4:26:25:
52:63:73:f8:b6:19:fa:c5:51:38:f2:c8:65:a0:b9:
c6:9d:38:55:95:13:3e:d8:8f:88:47:56:14:40:1c:
4d:83:42:f0:9a:2d:cd:8c:69:2d:84:5c:ce:be:cb:
44:bb:8d:5f:a4:8f:e4:62:df:f5:11:6e:d0:0f:8a:
8f:a4:e3:4a:bf:93:c3:70:cd:31:24:46:0a:4f:77:
06:d5:cf:94:0b:8e:b6:67:de:b8:a0:85:7b:7c:59:
74:9b:28:fd:f3:8b:4e:71:c2:c2:49:89:cf:74:ea:
97:a7:db:c5:6a:b3:f1:c4:53:93:27:0f:b5:29:7e:
aa:01:7f:b4:78:a7:83:45:a8:78:7d:77:30:82:25:
9d:b9:67:3f:4c:11:68:1f:15:23:f3:0e:35:a4:fb:
20:a7:f1:f4:06:81:9a:97:17:8d:0d:50:f5:c7:bc:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6A:51:5C:A0:DD:79:99:F1:E3:6D:75:0A:4F:56:02:61:52:2B:70
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:65:ce:83:65:e3:21:c6:51:6d:7c:d0:9d:ad:49:43:dd:62:
bf:9f:89:7d:98:de:3d:19:b1:0d:73:6f:8a:a5:18:21:93:94:
5a:21:ee:a1:74:ac:64:ea:dd:6f:09:1e:e9:26:1d:8b:12:05:
68:8c:15:2c:62:10:cb:26:1f:8f:29:99:57:02:be:61:f7:54:
81:91:d7:88:64:af:47:84:5f:66:0e:8f:a8:91:23:17:db:ab:
c0:06:fe:32:dd:93:54:07:e2:b4:f6:60:6a:26:48:cc:a8:f9:
30:45:ec:17:43:cd:37:54:4b:1a:43:a7:10:5c:f2:e1:e7:d4:
69:c1:ea:89:b9:d7:a9:51:d3:60:2a:c3:b0:7d:c6:08:48:86:
a0:6d:6d:3e:e0:51:fb:75:b4:2c:9e:e6:a6:3c:aa:08:5d:e4:
86:e4:c0:6c:5d:0d:2c:53:2d:b5:63:af:de:e9:4f:61:2a:48:
45:54:d9:d9:ca:b6:90:19:62:41:85:0f:aa:c2:3f:2b:8c:40:
86:5a:01:6a:83:f1:81:ca:88:ff:a3:17:fd:0e:a7:c7:5e:75:
a2:0b:f8:e6:9b:d0:bb:8d:de:3a:4d:c4:d9:3f:f1:ac:65:86:
85:1a:b3:29:b2:72:85:69:e3:56:96:ff:5f:ac:5d:22:66:10:
45:41:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:41:51 2026 by rpki-client