Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json)
Hash identifier: MzgjFpreqgo+1DQcXN8sluj8wRQnpV61UaDZ07adZHM=
Subject key identifier: BA:78:B5:30:55:94:45:22:E4:E9:D3:A8:EA:84:98:32:3F:EE:25:26
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 019D37C05E1E40DCB95EB54B46C9A41806EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
Manifest number: 087A
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: IBlLkWqkaAhFp5QCimnfnCtLSuw.roa (hash: Qqv9tu5JI0ukk1Ce5QgBQxyaYDJ3PAWYDYEJ40iffTc=)
2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: dMeyFh5Js1EZ2yWnimoH56dCP1NktGcopxKnINr3d0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5e:1e:40:dc:b9:5e:b5:4b:46:c9:a4:18:06:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=ba78b53055944522e4e9d3a8ea8498323fee2526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:86:38:ea:0d:52:91:4e:9d:05:40:50:3b:
2b:c5:b1:e7:d2:87:03:8e:95:ad:8e:72:8c:7c:d3:
d0:0e:75:01:3b:90:44:51:3d:ea:ac:57:e1:d7:b4:
08:52:8f:ff:08:bd:6e:7f:92:ad:7c:0d:df:e6:4c:
a9:c0:bb:05:b1:ed:e2:8c:ce:89:82:44:4b:55:33:
80:5a:56:a0:35:fb:10:fb:b4:07:2d:8f:2c:12:44:
f1:f9:6f:34:e9:6c:bf:db:6b:89:6d:ed:44:f7:d2:
0e:39:c2:ad:14:1d:3b:05:a1:ff:f8:6f:81:75:f2:
dc:6c:13:90:49:26:d5:29:cd:44:15:9c:12:ce:80:
02:22:50:40:9d:0f:9b:bb:1f:1d:f5:e7:49:bf:79:
ae:af:9e:ba:81:0e:5c:10:30:a5:bb:3d:b7:e4:e6:
36:86:30:17:b7:88:6f:5a:05:f0:7b:f3:21:1c:4c:
3c:39:44:4c:c2:21:87:c9:cf:73:bb:33:c4:96:af:
80:ae:18:3f:eb:f6:51:97:30:4c:44:79:77:3c:ad:
e5:9d:6f:b2:13:c3:75:db:81:4b:3a:25:16:52:28:
5e:88:12:dd:24:ea:91:9c:93:9e:1d:d8:ed:8c:b1:
ac:55:00:5e:bb:5e:43:3a:08:bc:fa:9e:bf:07:94:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:B5:30:55:94:45:22:E4:E9:D3:A8:EA:84:98:32:3F:EE:25:26
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c4:93:44:0d:0d:6f:1e:84:d1:71:f6:ca:e7:2b:28:e2:58:
85:4e:dd:c8:34:b0:45:e9:fd:5e:e3:49:d0:64:71:4b:14:f4:
0d:94:24:91:bb:58:08:a1:66:68:68:2b:0b:04:90:4d:17:ed:
2f:16:2f:fa:fd:52:ce:6b:08:61:81:4d:da:ef:70:33:38:4d:
53:ed:bc:66:23:58:3f:bc:b4:f5:72:9e:2b:9b:55:4d:96:e1:
3a:6a:3e:49:78:27:0e:73:7d:23:8f:90:fe:12:14:b8:24:76:
2b:29:b0:78:97:6a:cb:de:92:7e:9d:4d:b2:cf:fd:8e:62:f8:
81:0f:53:b8:d1:8c:4e:31:e4:76:b2:d2:ea:66:18:08:19:e8:
01:e0:a1:4d:43:7d:b5:68:45:23:5b:41:fa:c4:7c:91:a1:48:
20:ea:36:d9:b7:b7:6c:9d:1b:8d:bb:50:86:da:72:1a:8d:ec:
c9:19:84:0d:cb:39:c6:10:fa:4a:ad:52:7c:52:ad:66:fa:6e:
35:cb:ac:7f:c3:4e:70:7d:72:f5:58:3e:99:ea:30:50:7a:c2:
62:62:56:b0:6f:23:e8:36:59:c6:20:f0:8e:ad:0b:2b:ff:7e:
3e:0b:a4:47:f6:23:2d:a8:f3:77:49:44:00:5f:37:2b:be:4f:
f2:e8:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:27 2026 by rpki-client