Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: pL+QVtMOSgbTVadWEuwiH7zOqwGpckQy3/G8gLHUH8k=
Subject key identifier: BB:10:AB:F9:EF:20:43:FE:27:3D:81:3F:68:7D:32:0F:18:F4:B8:EE
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019FAB6408D68FD9041190E6012110B92A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 19DE
Signing time: Wed 29 Jul 2026 01:01:27 +0000
Manifest this update: Wed 29 Jul 2026 01:01:27 +0000
Manifest next update: Thu 30 Jul 2026 01:01:27 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: /pEQSXdo8wQDSiyJyTpwKQ69vWB2wKw08JvRlWL02/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:08:d6:8f:d9:04:11:90:e6:01:21:10:b9:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jul 29 01:01:27 2026 GMT
Not After : Jul 30 01:01:27 2026 GMT
Subject: CN=bb10abf9ef2043fe273d813f687d320f18f4b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:d5:1c:4f:ee:0e:02:63:13:dd:ab:08:9f:
5a:ce:f2:d7:b0:11:6e:dc:82:11:aa:eb:4a:0e:98:
13:42:ea:d8:df:79:e5:4a:6d:11:81:40:36:a8:e8:
10:4a:45:a6:e7:8a:cf:d4:ec:39:68:1d:05:3d:89:
67:9d:f7:a6:db:a4:38:fe:18:fc:f4:76:1f:26:81:
77:d5:a2:41:fa:43:df:95:e3:34:5a:13:8f:04:94:
eb:9d:47:96:92:72:4b:82:af:11:63:0a:1f:ea:40:
fc:56:fe:e9:da:32:13:3a:a2:bc:e6:8e:a1:f5:13:
26:a2:16:d9:fe:26:20:c2:c7:29:e4:05:dd:90:a9:
d5:b5:8d:fd:a2:84:01:34:8f:98:a4:71:22:00:ca:
54:a4:a2:49:1c:a9:0e:97:3a:bf:d2:16:3c:5b:ad:
3c:2c:bc:fc:8f:f0:f5:b9:cc:c9:65:39:80:6d:0e:
de:0f:ae:dd:ff:d8:77:f1:fe:fd:39:85:94:42:b7:
f8:61:2f:db:49:25:93:11:13:81:bc:80:7f:d2:82:
43:5e:a3:d8:52:ab:a6:93:e7:7e:17:45:8c:b6:0b:
51:12:3c:27:6e:0d:0d:bb:6e:6e:68:a5:75:2a:db:
7f:c8:06:f4:a4:5c:79:ad:b4:54:a0:5c:4d:a5:6f:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:AB:F9:EF:20:43:FE:27:3D:81:3F:68:7D:32:0F:18:F4:B8:EE
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:87:35:47:cf:b0:61:0f:e6:79:4b:05:45:15:0d:8d:ae:7a:
f7:20:d9:7e:b2:8e:17:2c:3a:7a:ef:9c:79:64:c7:1e:1d:0f:
b4:00:13:cf:87:36:e5:70:c3:86:16:46:20:ef:b2:2c:df:c2:
7d:36:7b:f7:92:a1:cd:e8:32:bb:22:67:12:37:5f:92:7c:2f:
79:00:df:46:62:62:bd:93:12:40:60:76:4c:ef:e5:80:0f:a3:
8a:12:47:50:cd:a2:c2:5a:39:d8:6b:22:94:91:a9:cd:e9:3a:
67:6f:62:a2:af:60:4f:5f:f5:b0:c4:78:92:33:2a:45:4c:e2:
52:86:c8:b8:8d:3b:b5:98:7a:2e:8d:87:8e:c6:12:72:67:d0:
ca:14:aa:0d:b4:76:c3:99:e4:c8:c3:47:0c:00:ea:1f:60:77:
c0:ec:ca:c0:bb:b6:2b:76:ec:9f:fb:03:c0:d6:0c:cd:e5:f1:
5e:fa:71:00:6f:a6:29:ee:e7:77:4b:09:0b:9f:1f:ab:d1:e7:
34:79:89:5b:ba:6c:11:d6:e4:99:0f:34:86:a4:0d:23:03:d6:
4d:c1:33:a7:14:c8:b2:b8:30:82:77:60:22:5b:1a:d5:0e:54:
21:80:47:69:84:fe:69:3d:90:2a:e1:90:d6:28:77:6a:6a:98:
ec:d5:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:05 2026 by rpki-client