Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: S802znV5+AHZYc22qniQnFbuNuDZeG5ewzVcBT8uGec=
Subject key identifier: 04:EC:FA:9B:86:89:47:15:27:6B:C2:39:29:60:82:23:CA:CB:CD:C5
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 019FA82B3C4C78EF463649D7FFDE0A83487D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 10:00:33 +0000
Manifest this update: Tue 28 Jul 2026 10:00:33 +0000
Manifest next update: Wed 29 Jul 2026 10:00:33 +0000
Files and hashes: 1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: uXYF4ag1y9feY0IRji33EckQUk6jbbzYwUiVX6VAJcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:3c:4c:78:ef:46:36:49:d7:ff:de:0a:83:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Jul 28 10:00:33 2026 GMT
Not After : Jul 29 10:00:33 2026 GMT
Subject: CN=04ecfa9b86894715276bc23929608223cacbcdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:63:ab:e0:00:eb:ba:db:b9:ee:d2:dd:6f:
e8:e9:f1:23:27:0a:de:e4:d9:68:8e:0f:be:f3:33:
94:c8:8c:f1:e1:b2:dc:b0:c3:a2:ba:ce:48:46:ca:
ba:4a:78:92:b4:89:ba:fc:eb:38:fe:4d:fb:ea:05:
1f:d4:01:3b:53:cf:44:32:1c:45:13:57:ce:d6:24:
9d:31:4a:e2:53:48:9d:07:05:92:8d:a5:30:37:91:
b3:cf:fe:60:39:8a:9f:9a:1f:a9:e8:02:20:96:a7:
26:a8:93:0c:af:4c:09:9e:f7:30:d4:f3:e0:60:60:
de:0e:26:bf:8d:05:63:ad:b2:a2:3d:81:ba:48:75:
54:15:98:a5:c7:5a:40:fc:5c:67:93:ac:31:ed:cd:
78:87:d2:7b:fa:8e:f9:3b:6a:6c:ac:1b:57:c0:9d:
fc:b3:8b:cc:5f:16:73:27:50:62:02:60:a7:2a:9e:
59:92:f5:42:16:bc:c3:de:6a:00:d3:5a:2a:4d:01:
1b:27:c9:0a:cc:02:6c:6b:d0:72:5f:d9:ce:7d:24:
b7:f6:87:6f:bf:78:4e:fe:3c:48:f0:e3:93:db:5a:
36:e4:9a:5c:5a:e6:cc:5b:4d:9d:85:97:df:5f:85:
97:86:e4:09:82:b6:a1:38:23:ab:73:c8:cd:ab:52:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:FA:9B:86:89:47:15:27:6B:C2:39:29:60:82:23:CA:CB:CD:C5
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:05:00:30:3b:58:83:88:bb:d2:a1:d5:4b:b9:98:ab:87:b8:
a4:20:69:a0:e2:a2:bd:73:3d:c8:b8:c3:ac:1f:34:1f:2c:83:
0a:e7:b1:db:10:0b:fb:3a:e0:dd:1b:c7:10:54:7e:a7:f1:22:
33:e8:dd:cf:22:d7:34:e4:17:44:9a:83:cb:e4:d0:5d:1a:e8:
35:83:44:e9:13:fc:8b:f7:c8:b9:fa:14:f6:a1:c0:e6:b1:7a:
ad:b3:da:d6:d7:9d:54:3d:b9:b1:a6:90:f5:c2:80:60:38:ef:
2e:90:fd:ba:b5:98:94:66:f0:7a:a3:62:ce:3c:09:98:d2:38:
40:b4:8a:91:62:68:b7:6b:ac:a1:ef:80:3c:05:02:c7:9d:ec:
e1:51:47:c4:d3:7e:cd:9e:ab:52:c5:82:ed:96:f2:49:0c:93:
14:a3:70:0e:05:9c:ea:31:9d:b4:86:92:cb:d2:cf:03:d8:bc:
de:d8:87:00:c9:88:9d:5f:a9:53:da:2f:48:8a:da:9b:18:64:
1a:c6:97:69:61:0e:3f:8a:cf:61:2c:d4:9f:40:05:f9:55:b2:
eb:d2:83:e1:08:0c:82:73:39:e4:f8:50:9e:58:d4:a3:d5:36:
23:6f:d5:f1:6d:60:3f:6e:a6:ae:a2:d3:05:73:e0:36:b1:c5:
4b:91:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:51:21 2026 by rpki-client