Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: natD88OYDBbKSF9kB8RQt9skqrzL/d4MCxH7cJgj1Uw=
Subject key identifier: 08:FB:02:F8:29:31:38:7A:88:C6:B1:7A:E3:CA:9B:78:21:93:20:3C
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019FDACFA0F354A713D93E64ED1BF4BF73D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 19F5
Signing time: Fri 07 Aug 2026 06:01:07 +0000
Manifest this update: Fri 07 Aug 2026 06:01:07 +0000
Manifest next update: Sat 08 Aug 2026 06:01:07 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: AyzkfoMhqTYQTOQdhrY36bRhN3oxAQrTKcF9tIgDdvQ=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:cf:a0:f3:54:a7:13:d9:3e:64:ed:1b:f4:bf:73:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Aug 7 06:01:07 2026 GMT
Not After : Aug 8 06:01:07 2026 GMT
Subject: CN=08fb02f82931387a88c6b17ae3ca9b782193203c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:f7:ef:a3:98:02:c9:f2:58:ea:38:07:c2:
da:27:3e:ee:15:88:7b:86:57:6e:ac:62:6c:27:90:
21:db:b6:64:9c:5c:31:8d:c4:59:28:f8:af:c2:c8:
81:d6:3f:c5:51:44:46:ab:d3:06:1b:ef:3c:16:d5:
99:28:6d:ef:9f:0e:12:a5:58:c4:a2:13:3f:41:b3:
0a:c1:48:97:f8:62:c3:33:6c:22:e4:ea:a2:55:20:
5b:ac:9a:c4:61:d3:e8:8a:52:5c:a0:9d:0e:95:9d:
db:97:26:ba:22:be:d3:2d:63:74:05:d5:31:be:ac:
cc:1b:4a:7c:9d:fd:1d:88:e6:1a:9e:ff:ec:f8:d6:
fd:8e:a7:9a:6c:65:fb:aa:64:74:86:dd:5a:50:e9:
7f:4f:c3:73:c6:58:04:92:b5:92:67:e9:f0:3c:f7:
e8:ed:55:1b:5d:67:5c:2c:40:77:bb:ec:84:6c:2e:
a9:48:40:52:eb:6f:da:d4:63:be:fd:86:95:c5:76:
82:e4:08:04:64:01:51:2b:8d:b9:98:36:eb:12:9c:
a8:c8:59:41:e9:0c:bb:2a:a0:36:45:aa:bb:dc:2d:
72:cc:d1:c7:a6:b6:73:c6:0f:e5:34:b2:10:0e:56:
82:db:6d:ae:4a:ce:ea:b6:c9:a0:39:ce:6b:93:eb:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:02:F8:29:31:38:7A:88:C6:B1:7A:E3:CA:9B:78:21:93:20:3C
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fa:81:43:d4:eb:19:35:83:37:94:c6:41:df:f4:56:58:c2:
f5:2a:51:88:a5:a4:e5:f5:d2:99:2a:1d:71:97:88:10:d0:e6:
e5:32:30:0f:e1:3b:98:3f:2f:f8:b1:66:ef:46:45:ec:c1:ad:
82:a1:d9:1c:f8:b5:b5:ee:12:bc:d3:09:e9:b1:a4:bd:42:b6:
2b:84:48:48:1f:11:0f:f2:b4:a6:e1:d2:76:55:ad:00:16:de:
82:ac:5d:2c:8b:ad:79:3b:07:81:ab:78:ae:8b:61:48:57:1a:
7f:c5:d8:3c:fd:c6:13:76:cb:07:ee:c7:a0:dc:00:5e:af:2b:
d3:7a:6f:bb:96:c7:6d:f3:4a:78:02:14:4a:79:7c:65:ce:1c:
44:65:f9:57:b5:b5:2f:f5:46:de:c9:3a:10:30:3f:94:1a:43:
26:3b:21:f8:54:de:4f:f7:28:44:e4:5b:64:d7:d4:64:a5:f2:
e7:05:5b:e9:05:06:c8:77:f7:d1:c7:0d:ef:b0:68:ed:b8:93:
2b:12:17:01:97:76:e6:93:b5:38:d1:f5:9d:71:c1:00:44:76:
40:b8:71:f4:1f:ac:e9:e6:80:98:b8:0b:92:04:c1:58:82:9c:
a5:e5:dd:6e:27:0c:ed:8e:20:91:f2:44:61:91:63:40:c5:83:
73:98:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:34 2026 by rpki-client