Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: 6EiijLVkdCSHE3dOyEicqgwLZB6LVjmvzWZ60df2idM=
Subject key identifier: 9B:24:34:85:8A:0B:65:CD:77:A1:BB:78:C3:70:7B:39:2D:E9:A5:81
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 019CAB6AF3F693B48AF890D97B47900903F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: GsPNZAso7iYaS/oS3Bsh38sLs8gF8DV0t5OYjhtDz6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f3:f6:93:b4:8a:f8:90:d9:7b:47:90:09:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=9b2434858a0b65cd77a1bb78c3707b392de9a581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:97:d6:40:03:0c:a5:b9:95:3c:e3:31:87:
85:12:bd:47:ee:3e:fc:6c:aa:3a:30:99:b2:61:8a:
a9:c0:f0:47:80:64:5b:e1:10:18:68:c1:2f:26:77:
2d:92:4f:68:61:0e:7f:f4:3e:f0:17:4f:01:36:6e:
84:01:73:81:6e:da:7a:c6:93:5c:dd:c5:87:13:c1:
de:72:87:ee:78:35:39:46:48:64:4f:71:02:7c:c3:
ad:c6:0a:45:00:67:3d:6d:cf:d1:73:c5:9b:da:89:
ca:f5:4a:9f:ff:ee:8a:79:d8:ba:c6:aa:3b:31:ea:
76:dd:1c:8d:49:30:87:db:49:01:d1:fd:4e:47:6e:
6a:ae:00:fd:4a:4f:5c:3a:4a:68:33:9a:d6:f2:fa:
d3:b1:46:a4:3b:64:8d:40:30:8a:58:87:7f:7c:66:
9d:7a:f5:ad:30:ec:fa:68:42:76:df:67:cf:0b:a4:
46:d8:a3:df:9d:85:56:7a:5d:ae:f3:1d:33:ec:b3:
64:06:e5:84:5f:43:1e:33:fe:88:df:21:4a:5f:14:
6f:ea:96:d3:ed:45:50:33:40:8a:d3:15:2b:e5:f0:
82:5f:b1:f7:9b:7b:ca:aa:1b:89:0b:9c:aa:7b:8d:
a6:b6:c2:3f:0e:9c:05:77:4b:7e:65:ae:47:fc:e6:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:34:85:8A:0B:65:CD:77:A1:BB:78:C3:70:7B:39:2D:E9:A5:81
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ad:a1:c2:8b:1d:10:6a:4e:30:3e:bb:71:a9:5b:74:d5:ba:
58:3d:92:e9:9a:30:27:58:83:2e:d0:d0:01:30:a4:b6:1e:a3:
1d:4a:79:ab:af:d1:24:50:36:3d:6b:06:22:03:07:27:da:12:
bc:cb:3d:1e:56:ff:b5:ca:56:f8:31:89:24:fd:5a:bc:2e:00:
5b:d1:45:b1:0b:a3:3e:c7:83:d2:e0:b4:d2:1b:c0:ab:24:50:
f0:d0:7f:48:dc:70:ae:65:bd:60:5b:48:ab:42:5d:eb:26:a3:
88:33:cc:a6:22:27:8d:0a:e0:2c:a5:f8:47:57:be:b0:92:cf:
82:74:0d:85:5d:ce:0d:98:e8:fe:40:2b:65:25:33:8f:22:70:
7d:77:bf:9e:ef:6b:21:0c:8a:ba:ce:83:81:3e:52:fd:5f:8e:
43:4b:b4:c0:d8:43:2a:7f:1f:0b:04:b8:b8:9d:a2:a6:b1:c7:
01:1a:89:0b:7f:41:c0:2f:5b:93:1e:7f:6e:78:1c:ee:35:a5:
a0:c7:f5:e5:e3:e3:9b:4b:95:d2:12:99:c4:79:66:b8:f5:0c:
21:f0:45:6e:30:12:1f:71:cf:49:6e:16:04:47:d1:e7:76:20:
f4:da:69:4f:b7:a6:cf:03:ad:bf:5e:a8:91:ae:f0:8b:80:2d:
1b:02:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:45:02 2026 by rpki-client