Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: oiJDy7sb7T7Rn9hQUwL9qD8pRAqeH9RQJ/npbAcT3Fw=
Subject key identifier: 82:D4:E6:A7:B7:81:BA:00:C6:43:29:FE:3A:01:B6:E1:82:C9:78:43
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019EBFC91D9DED15A45B628A03EC7C7A163D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 07:01:28 +0000
Manifest this update: Sat 13 Jun 2026 07:01:28 +0000
Manifest next update: Sun 14 Jun 2026 07:01:28 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: 2VJpEbnWdMX/vNxWxfejlvzS1nM5DGK+j7MMXY3Li1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:1d:9d:ed:15:a4:5b:62:8a:03:ec:7c:7a:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jun 13 07:01:28 2026 GMT
Not After : Jun 14 07:01:28 2026 GMT
Subject: CN=82d4e6a7b781ba00c64329fe3a01b6e182c97843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f8:29:b0:3a:1f:0a:ce:1d:a6:3c:bc:af:7f:
34:03:60:a7:82:ae:87:cc:b1:ef:2b:24:74:cb:cd:
3f:1e:31:69:5f:17:87:97:59:d0:5a:b0:a0:49:f7:
48:66:c3:0a:22:ef:7e:9c:7b:4d:90:36:3b:f6:89:
02:40:8d:8b:cc:cd:55:ec:47:0f:9f:4a:62:ad:77:
0d:5d:0c:9c:18:29:8e:88:6e:89:df:6e:ea:9e:d0:
b0:31:f7:f3:76:38:24:60:80:7b:ab:17:8b:ff:7e:
63:9e:27:f9:36:0b:c3:0c:4d:de:aa:d0:94:f1:d9:
7e:f6:02:e6:2e:d0:f0:b3:e6:57:94:20:e6:97:99:
1f:55:f2:2e:5e:6b:8d:67:3d:2d:68:71:44:9d:a7:
f1:48:a6:d1:11:63:5b:63:a6:ca:8a:5a:be:12:ab:
f9:95:f4:4b:f7:5a:1b:ce:ab:2f:5a:ed:a7:90:eb:
c1:02:bd:81:80:22:7d:64:10:1f:e1:89:ad:2a:4c:
a0:ba:4b:de:2b:fe:9d:cf:e8:80:c8:9c:9a:27:55:
18:0e:3c:07:6a:b4:a3:5a:9b:b6:fc:64:3e:83:e6:
ed:e0:76:68:7e:2c:5f:df:e7:4c:cc:59:0c:70:7c:
c3:6c:fd:74:51:5e:b7:19:e0:91:28:64:64:bc:97:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:E6:A7:B7:81:BA:00:C6:43:29:FE:3A:01:B6:E1:82:C9:78:43
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:76:8b:6f:7f:3d:37:1e:14:5b:14:be:87:e9:70:60:fc:62:
84:fa:40:5b:8f:89:d7:eb:2a:29:94:6e:85:e7:eb:01:47:3c:
bc:d5:4a:56:1b:67:4f:5c:6b:f6:eb:57:19:a1:23:a7:6d:79:
ac:4b:a6:e3:c4:00:57:98:d3:23:fe:35:fa:08:6a:08:03:66:
48:e4:33:88:24:fa:8c:94:04:2e:90:18:a0:3b:94:92:87:07:
6c:08:13:b5:4d:a9:a0:72:10:9e:18:3a:fc:6c:c7:ac:a0:1e:
5d:da:ad:73:cf:24:ce:29:70:e6:dc:3e:05:e0:12:78:74:54:
2d:16:fd:b6:86:78:fd:5a:f5:cd:5a:10:52:cd:cb:80:7b:ae:
5c:02:38:7a:98:36:e5:a5:eb:be:fb:d9:ae:0a:e0:f6:f7:18:
72:eb:35:fd:d3:ed:86:ed:91:13:d2:0e:fe:0f:71:fe:01:bb:
0a:fd:00:4c:d3:8f:4f:bb:bd:d1:3f:31:77:4f:b6:8d:da:67:
75:56:b7:9c:c0:46:da:db:22:e3:c5:34:b0:b3:cb:e5:8b:37:
1d:98:c5:d6:61:a7:9f:8a:56:22:f4:74:be:b7:43:b9:7e:51:
03:86:e6:c5:68:52:b3:ad:2c:9e:b6:6b:c1:93:54:d1:8f:c0:
52:36:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:21 2026 by rpki-client