Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: J0Hhq0r1HsjXzoK/psSeeuWKjtpVODhgyO3AAwN4Mis=
Subject key identifier: D6:85:C8:7A:A1:AF:C7:D9:AE:94:F6:4C:63:2B:2F:85:00:49:A1:71
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019F82305C6B220E1C3E71B473D4C5EDBA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0991
Signing time: Tue 21 Jul 2026 01:00:35 +0000
Manifest this update: Tue 21 Jul 2026 01:00:35 +0000
Manifest next update: Wed 22 Jul 2026 01:00:35 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: yuQfEKeyvlVJEdGJAM60J8GCmLKNlMz9RPfgK5x3fGM=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:5c:6b:22:0e:1c:3e:71:b4:73:d4:c5:ed:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jul 21 01:00:35 2026 GMT
Not After : Jul 22 01:00:35 2026 GMT
Subject: CN=d685c87aa1afc7d9ae94f64c632b2f850049a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:47:48:6b:9d:21:af:74:6e:e3:a0:02:fa:
67:70:3b:4e:06:f6:80:33:88:e7:56:46:de:de:d8:
ca:e3:ab:8a:e7:dd:b4:3b:68:ea:e2:0f:28:93:96:
10:47:3b:73:eb:e9:d7:79:e0:d4:99:b0:0f:49:08:
06:f2:bb:d5:87:50:a8:72:9c:0b:40:57:82:0e:4d:
3f:92:96:07:93:74:b5:4d:f1:25:5d:00:14:4d:02:
d5:0c:05:f8:d2:7a:b8:53:34:10:aa:eb:16:58:1d:
cd:c9:06:ed:af:55:1b:38:b1:a5:65:df:ff:d9:38:
ef:f0:c0:40:a4:a6:b9:99:69:32:f2:ac:6e:7e:ac:
ec:10:76:2d:4a:59:e3:90:f7:85:5f:43:8f:2d:bf:
ba:2e:46:3a:f9:c3:31:96:e5:4d:6c:8a:48:be:06:
2a:ae:62:de:03:3d:25:72:be:6d:77:3e:d6:6a:2d:
42:1e:ad:4f:a2:94:3f:0f:0c:3b:fc:e7:48:4f:fe:
ba:10:23:9b:4d:d9:d1:73:d8:b3:c9:6a:65:8e:b5:
ce:f4:ca:4b:cc:4d:68:3d:d5:53:42:fc:45:fc:1a:
91:fb:39:1f:57:8a:ea:c8:76:f3:c7:38:d7:48:54:
7f:c3:1b:55:36:f3:8a:13:a8:0b:7f:86:2a:4c:66:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:C8:7A:A1:AF:C7:D9:AE:94:F6:4C:63:2B:2F:85:00:49:A1:71
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:92:ad:f7:79:d2:0f:5a:19:70:4c:39:ac:d6:7b:6c:b6:41:
d3:25:1d:56:25:27:76:e3:1e:4e:bd:d0:35:68:d7:1b:42:f6:
9b:f8:43:4d:1a:89:47:16:22:60:a4:ee:5f:aa:4c:b3:6e:e8:
e5:6e:22:25:4d:23:1c:5a:ab:ad:e4:d4:6e:8b:aa:1c:95:ce:
48:49:bf:51:7d:5a:74:fd:44:26:aa:81:4f:8e:f3:3b:09:93:
f9:fb:ab:ef:cc:70:b3:f4:78:09:83:77:55:63:84:ca:e6:7e:
2c:7d:9d:65:8c:02:14:03:1d:9b:19:d4:43:38:8a:c4:c3:d5:
b3:8c:44:28:cf:dd:9c:17:c1:19:85:56:ac:66:5f:02:98:63:
de:b3:45:67:c0:99:cf:e7:22:62:eb:a0:df:7f:af:c6:41:bf:
e8:71:fa:b3:33:37:96:68:f6:85:08:ca:4e:67:de:e5:c0:08:
40:4f:b6:d3:1c:a2:26:f8:f7:c3:09:01:c2:2c:e3:a6:7e:5a:
fd:da:37:cd:30:e7:34:22:11:d6:9f:fb:4a:f7:38:b7:60:ea:
ff:fa:41:3d:ec:29:73:7f:e6:17:8e:11:d9:6c:f7:74:33:88:
fb:f8:10:57:7e:db:d4:0f:31:6b:79:d6:23:7d:6b:09:70:3a:
a8:3e:bc:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CMFxrIg4cPnG0c9TF7bpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx
ZmUzOTIwHhcNMjYwNzIxMDEwMDM1WhcNMjYwNzIyMDEwMDM1WjAzMTEwLwYDVQQD
EyhkNjg1Yzg3YWExYWZjN2Q5YWU5NGY2NGM2MzJiMmY4NTAwNDlhMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvJHSGudIa90buOgAvpncDtOBvaA
M4jnVkbe3tjK46uK5920O2jq4g8ok5YQRztz6+nXeeDUmbAPSQgG8rvVh1CocpwL
QFeCDk0/kpYHk3S1TfElXQAUTQLVDAX40nq4UzQQqusWWB3NyQbtr1UbOLGlZd//
2Tjv8MBApKa5mWky8qxufqzsEHYtSlnjkPeFX0OPLb+6LkY6+cMxluVNbIpIvgYq
rmLeAz0lcr5tdz7Wai1CHq1PopQ/Dww7/OdIT/66ECObTdnRc9izyWpljrXO9MpL
zE1oPdVTQvxF/BqR+zkfV4rqyHbzxzjXSFR/wxtVNvOKE6gLf4YqTGboRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaFyHqhr8fZrpT2TGMrL4UASaFxMB8GA1UdIwQY
MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt
NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5
LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspKt93nS
D1oZcEw5rNZ7bLZB0yUdViUnduMeTr3QNWjXG0L2m/hDTRqJRxYiYKTuX6pMs27o
5W4iJU0jHFqrreTUbouqHJXOSEm/UX1adP1EJqqBT47zOwmT+fur78xws/R4CYN3
VWOEyuZ+LH2dZYwCFAMdmxnUQziKxMPVs4xEKM/dnBfBGYVWrGZfAphj3rNFZ8CZ
z+ciYuug33+vxkG/6HH6szM3lmj2hQjKTmfe5cAIQE+20xyiJvj3wwkBwizjpn5a
/do3zTDnNCIR1p/7Svc4t2Dq//pBPewpc3/mF44R2Wz3dDOI+/gQV37b1A8xa3nW
I31rCXA6qD684w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:12 2026 by rpki-client