Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: 32xHioOQOTj3LKb/zZhdNFTVjdABSEyfEl0dG5W4syQ=
Subject key identifier: EC:A1:81:59:4C:1B:B8:45:31:6E:03:91:0F:6B:6D:1A:CE:CA:CF:D0
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019D984F975B5C0A670E67448067CB19C778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 18CB
Signing time: Thu 16 Apr 2026 22:00:46 +0000
Manifest this update: Thu 16 Apr 2026 22:00:46 +0000
Manifest next update: Fri 17 Apr 2026 22:00:46 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: XY4HkHessnbYmiMMOmk0mSOhBJxjyedNCr2XIRe16P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:97:5b:5c:0a:67:0e:67:44:80:67:cb:19:c7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Apr 16 22:00:46 2026 GMT
Not After : Apr 17 22:00:46 2026 GMT
Subject: CN=eca181594c1bb845316e03910f6b6d1acecacfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:35:b1:9e:4a:8e:a2:2c:cf:ee:ca:15:54:
af:59:04:e6:91:74:93:aa:f3:0d:37:d7:bc:58:20:
1b:4e:af:b2:69:c8:61:c4:7e:e9:47:b6:06:ee:fa:
c6:f1:5b:fd:db:e3:fc:22:9a:c6:32:74:28:40:b8:
51:ac:07:a1:33:ef:4d:ea:96:03:84:8b:ac:17:54:
9f:3f:9a:19:9f:a4:ab:7b:74:37:d4:46:20:d8:6d:
b5:be:ba:df:d9:c2:2f:31:59:f7:70:ec:cc:f0:ef:
58:25:9f:79:d7:fd:2c:a7:65:63:3d:af:3e:e9:95:
00:c5:55:6d:3e:72:61:82:b4:a3:de:c0:0f:c6:ef:
d9:b2:91:c8:2c:2e:f1:e6:41:bc:cc:c2:4e:ed:9e:
8a:a3:48:d8:07:f9:05:64:6c:a8:b9:94:10:4b:6b:
04:68:24:64:db:bf:4e:38:29:c5:d2:0f:d1:51:70:
9c:69:4c:84:39:1b:d0:c5:3b:45:2b:42:7c:1b:0e:
fe:22:4c:64:78:fc:63:a1:07:f6:ce:ec:7b:bb:f5:
f7:9f:66:6e:b1:0c:61:3e:f4:54:27:cf:f6:d7:78:
c6:61:e5:ed:49:4a:b5:65:86:07:2a:b3:50:30:48:
42:a2:54:a5:8e:16:b4:22:82:c4:c2:6c:1a:09:32:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A1:81:59:4C:1B:B8:45:31:6E:03:91:0F:6B:6D:1A:CE:CA:CF:D0
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dd:1e:ce:a3:a0:c2:67:ba:05:b0:cd:96:b7:f4:07:19:ee:
f2:65:75:c2:bc:9d:73:87:78:81:5a:a2:27:c6:e2:c7:0d:f9:
f2:48:a7:e7:61:34:a1:d1:7d:41:c4:1b:9a:76:47:8f:c6:76:
89:9f:37:4f:48:94:03:86:41:b1:e7:65:a9:b3:3a:cd:98:51:
a4:41:f3:c8:ec:fa:76:b9:54:08:10:bd:45:57:17:df:33:a2:
ac:27:4b:7a:92:d8:fe:03:6d:68:dc:f4:2b:f5:da:f0:23:f9:
c7:20:a9:c1:17:30:12:81:7e:d2:1e:0d:7b:c2:2a:bf:b6:7c:
f0:92:99:80:36:e3:46:e1:ad:83:6e:fa:65:1a:7d:85:87:0c:
01:2c:47:a1:14:aa:d0:2e:58:6e:d8:d0:be:11:2c:bf:6f:34:
c1:fc:95:98:77:0e:11:b6:62:6b:8e:a5:0f:4e:5f:12:80:ae:
22:3b:f6:9f:83:db:79:a6:37:cc:13:91:64:85:da:4a:77:28:
fe:e4:22:5c:c5:a1:55:23:2b:c4:a1:b4:0b:ed:0e:a7:4a:bf:
57:cf:7f:c6:d1:9a:f8:c3:dc:67:5e:55:d4:f2:1e:de:14:8c:
bd:83:2a:ce:3d:74:af:d4:cc:71:60:07:e6:67:8b:b9:23:9e:
73:59:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:06 2026 by rpki-client