Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: 4JgLd3+fhsfiI8QQKE62odMxT5OqSXv9uNwtyPe8ZgA=
Subject key identifier: 5B:DE:F3:CB:8E:82:CA:F2:DC:C9:B5:E0:78:E6:D8:D7:9E:5F:87:AC
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 01A0C030B22CDCA31A23A2F7BEDBC28BC1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 19:00:11 +0000
Manifest this update: Sun 20 Sep 2026 19:00:11 +0000
Manifest next update: Mon 21 Sep 2026 19:00:11 +0000
Files and hashes: 1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: yEBnoOUdunAZRP7dgL0qMuFTdFq8oE2arvP41PP9ihQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:30:b2:2c:dc:a3:1a:23:a2:f7:be:db:c2:8b:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Sep 20 19:00:11 2026 GMT
Not After : Sep 21 19:00:11 2026 GMT
Subject: CN=5bdef3cb8e82caf2dcc9b5e078e6d8d79e5f87ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:12:51:c7:74:ce:eb:39:78:92:4f:8e:b4:
28:b8:ad:d6:47:1c:0f:95:b6:6a:82:1b:88:e0:a9:
6c:24:d5:2f:5a:4a:87:40:4d:68:95:e0:65:c0:5a:
9e:1a:dc:dd:0e:d0:43:8d:bf:ca:9d:52:31:92:c4:
1e:9a:bd:eb:e2:f7:1b:89:35:b0:29:80:1f:7b:f6:
26:11:c1:06:05:0f:6a:77:9c:23:e9:a8:31:1e:74:
42:cc:3b:6d:ef:5e:6b:bc:87:4e:7d:a6:aa:9c:61:
c2:4e:77:95:cb:66:07:49:f1:10:90:e9:84:40:0b:
cd:85:eb:50:5a:ad:e9:86:f1:8f:cd:d2:0f:30:08:
f2:5b:28:c2:90:1e:25:87:14:2a:0c:b0:02:f5:d8:
c0:ce:e0:56:5d:c5:b0:35:fd:f5:10:5c:c7:49:4a:
82:84:55:3e:5a:92:51:70:99:54:e5:8e:da:af:eb:
95:56:58:7e:4b:57:70:77:c4:88:1b:58:26:e6:02:
3e:9d:a0:14:d6:1a:20:fa:1c:5a:67:20:bd:14:ec:
b8:a4:1e:21:e3:22:ea:ab:e4:ae:bb:16:09:1a:fc:
62:50:f5:79:3d:2d:3b:2c:bb:aa:b1:63:12:a4:12:
db:86:5c:9e:79:03:5e:85:6e:d1:f3:2c:1b:a1:40:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:F3:CB:8E:82:CA:F2:DC:C9:B5:E0:78:E6:D8:D7:9E:5F:87:AC
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:19:e3:d6:4e:fa:78:7d:43:bf:6f:0e:ba:f2:48:13:d9:3a:
5d:ec:b9:cb:e1:7b:37:f9:e7:32:b3:7e:7e:bd:bb:53:7c:41:
cb:8e:20:ae:5a:69:79:ee:4a:cb:04:6c:8d:e3:50:96:f3:b2:
4a:59:27:9c:2c:a0:ef:38:f9:90:08:82:41:97:4d:46:24:60:
a0:bc:23:ec:da:ea:42:7b:4c:0b:9e:f0:12:00:31:9e:4b:6c:
e3:5d:45:f4:a6:ec:96:74:c0:6d:0c:4f:d3:66:e2:0d:eb:35:
9e:9c:b8:8a:00:49:9c:e2:60:cd:31:cb:de:69:80:b2:d6:50:
53:28:6c:ad:fc:a7:06:f0:e4:6a:fa:32:59:f3:5c:7c:7f:6d:
6b:f1:72:a4:b7:a9:96:1c:7c:d1:24:30:1b:40:dd:38:8b:5d:
94:78:2a:8d:03:4f:b6:9b:c1:b3:ad:c2:c5:34:8b:1f:bc:9e:
30:0c:b2:ce:27:54:4b:0e:28:a7:c0:53:c0:c4:3f:8f:95:e2:
0e:22:3f:62:7e:a5:29:d5:fa:fc:29:cb:9a:8f:ca:56:14:22:
3b:1b:2e:37:ac:e7:1c:81:3f:97:62:17:3b:6c:36:e3:5f:e7:
ae:2f:3f:f9:b0:da:9a:6f:6f:04:0d:bd:c3:86:12:14:c2:dc:
32:52:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:36:01 2026 by rpki-client