Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: EC0BNESR+VMcilObQ/Ng4xvQaasGY/gyMK5flMeb5FM=
Subject key identifier: 10:B3:96:98:0C:35:91:97:AF:84:CA:55:B6:A3:4B:E6:27:C9:3E:D7
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 019D98F4096C66865FD7F298ADF0E4976FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 01:00:22 +0000
Manifest this update: Fri 17 Apr 2026 01:00:22 +0000
Manifest next update: Sat 18 Apr 2026 01:00:22 +0000
Files and hashes: 1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: EuXlYBx0Fd+VQqbWUPMfEdBfDtGbwKjEykLiLnEJ/Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:09:6c:66:86:5f:d7:f2:98:ad:f0:e4:97:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Apr 17 01:00:22 2026 GMT
Not After : Apr 18 01:00:22 2026 GMT
Subject: CN=10b396980c359197af84ca55b6a34be627c93ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:5f:ef:73:dd:3e:b3:ab:f1:94:7f:4d:6d:
cb:ff:d5:15:1b:55:d9:de:fc:81:24:f7:83:30:5e:
7b:a1:1e:28:6e:87:51:04:c0:e7:89:7b:6a:a0:0a:
6e:e0:73:11:ac:08:ad:bf:05:a9:2a:12:e2:e2:2f:
9d:c9:08:0b:cf:15:60:94:60:c4:f5:90:f6:c8:41:
9d:62:5c:e5:10:11:1a:09:5c:16:89:e2:68:7c:c2:
87:63:54:e2:b1:fd:f7:6c:a4:98:d2:7a:11:40:5a:
a9:5e:e3:e9:fb:cf:81:94:56:c5:cc:4f:dc:5d:73:
7c:9f:1f:43:bd:16:50:b6:3b:c0:ab:4f:c6:96:60:
28:71:02:ca:6a:79:7b:08:24:ba:53:20:ae:df:a8:
48:61:dd:2d:81:96:0e:c9:78:f0:fe:f3:f4:34:76:
3d:fa:51:91:ea:00:1c:9b:be:66:2c:d8:5f:ad:28:
61:63:4e:36:57:32:dd:f0:54:69:dd:40:de:be:fe:
d1:27:45:22:43:36:78:40:5d:da:43:33:76:50:ad:
ac:ed:ad:72:9c:07:0c:c1:af:60:cb:b6:6c:7e:21:
3a:2d:01:38:f6:ef:a2:b4:fe:1b:6b:ae:69:a2:10:
c1:57:b8:5a:34:f8:b9:4b:48:6e:f9:0b:95:cf:b5:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:96:98:0C:35:91:97:AF:84:CA:55:B6:A3:4B:E6:27:C9:3E:D7
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:43:7c:57:d0:05:d5:11:d2:93:b8:93:50:60:2c:08:ae:ff:
bc:d8:1b:a0:05:3d:90:9b:e9:b9:63:60:ef:dd:fd:3c:d8:03:
7d:36:9e:a8:7b:3d:6d:51:d6:0a:22:39:05:23:04:b0:e3:5f:
05:e1:73:f8:c1:05:59:fe:de:1a:94:4b:57:98:08:bf:29:20:
ae:5d:45:1a:36:0c:ad:f8:18:e9:31:80:8a:65:5b:36:f2:ad:
2c:05:bf:43:89:19:0b:c7:76:69:e9:23:31:0f:5a:06:3b:f6:
2c:19:9d:f3:6d:66:38:73:31:46:68:ab:dd:24:d5:82:2d:b8:
91:3d:5f:09:ea:71:21:76:87:60:1b:8f:a5:7f:8e:63:e9:50:
a8:1d:84:d7:79:7e:98:3e:2b:7b:9e:8b:eb:28:0d:6b:60:b4:
f9:ef:53:67:9d:73:07:9e:bf:ba:a1:f9:53:c8:aa:bf:b4:f3:
c7:13:3f:76:8b:56:d2:1c:06:4f:f1:98:47:75:98:f6:b9:ee:
28:22:c0:ab:a4:04:6c:5f:4c:ab:5e:22:91:70:57:b5:27:ce:
79:13:0d:07:36:15:3a:79:89:16:de:0e:33:df:23:88:71:71:
85:63:a0:c0:0a:69:96:28:49:a2:35:d2:70:b2:a0:8c:a8:18:
f3:79:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:22 2026 by rpki-client