Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier: l6NxWC6zGULX0ruwHDTpp4d2ptftQ9zs6rW4623DNP8=
Subject key identifier: 85:95:4F:46:A6:0D:2C:87:34:5B:7E:D7:4B:09:75:70:4D:A8:3A:62
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019EE1B000987A016D8E1DEA17E2099DB27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number: 1974
Signing time: Fri 19 Jun 2026 21:01:08 +0000
Manifest this update: Fri 19 Jun 2026 21:01:08 +0000
Manifest next update: Sat 20 Jun 2026 21:01:08 +0000
Files and hashes: 1: 2iY3MyeinbufDI6WOOq2tthxozA.roa (hash: xiIrVQ2/8ifPFmSG2WbNiztS4C0IkNX7PvvXCQM3lyc=)
2: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (hash: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI=)
3: Fq9xTbJtwVAtCUczHqUqNnrTedI.roa (hash: 3b8qrDVQ2Nx+qFo5YhHUGqlMlouA6w7aD5kO327P+jw=)
4: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: D/ZpUeyjuvnd9kD6SAo8oahzsyglGZku1bazNowyaFs=)
5: TD9lzm9KUe_e5n1f_Fb3-sJTnRo.roa (hash: T+dSaMmRTaUbIwStUrgetw2GK2yQHfquJKmozICZ2fQ=)
6: XEAUGZpMH4JdbEqAP-QziU_QJro.roa (hash: MZsVBftbv0GE9cNTpB1NdtaxrhS+DGkJwB1gUClDAOs=)
7: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (hash: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g=)
8: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (hash: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g=)
9: vc9mebf-t-YuHW3WYa4U6wdKjF4.roa (hash: F9MCC0mZkNTsWchvWWx54xagntBXF8HaiQabKMjv974=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:b0:00:98:7a:01:6d:8e:1d:ea:17:e2:09:9d:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jun 19 21:01:08 2026 GMT
Not After : Jun 20 21:01:08 2026 GMT
Subject: CN=85954f46a60d2c87345b7ed74b0975704da83a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:66:96:c7:b1:cb:b8:e8:d0:07:7d:59:dd:
e1:25:83:6d:22:c3:65:c0:29:bb:c6:cd:dd:5d:02:
33:e4:d5:0f:69:de:12:3a:a8:29:3f:23:88:d5:5d:
ff:0f:c1:30:44:fc:8d:bb:f1:ce:28:3a:11:86:ae:
6f:f8:1c:7f:16:0d:11:33:bd:c4:47:53:fa:c8:ba:
29:ff:f2:fb:d5:31:da:04:1c:d2:ad:59:28:6a:f8:
f7:46:16:d9:8b:66:d4:c7:b5:df:46:ed:58:bc:55:
f5:c7:92:42:0e:b0:bf:09:89:a3:89:48:f3:f9:06:
db:08:32:15:7a:cf:b2:57:db:34:50:cd:55:a9:f8:
b1:3f:05:03:df:69:28:45:b3:f2:02:ee:bb:10:71:
f7:b7:58:2f:51:6f:3d:13:20:94:de:72:59:5c:89:
57:ad:ea:0a:2c:ea:72:29:d0:d5:ea:e5:ed:b2:dc:
26:bf:6a:06:f3:a9:21:be:97:58:df:47:76:67:29:
68:55:24:7f:c4:f1:98:26:fb:fc:7e:0e:5a:1e:ed:
bd:15:72:ca:c8:de:2f:fd:df:18:f4:eb:d7:4f:04:
84:b1:f9:db:e6:6f:9a:ae:8e:3f:d3:a6:8b:35:6d:
15:9a:71:9c:c2:a9:d3:c0:7f:9b:89:78:bf:15:68:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:95:4F:46:A6:0D:2C:87:34:5B:7E:D7:4B:09:75:70:4D:A8:3A:62
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cd:2a:b1:4b:b9:bd:62:02:9f:f0:f8:87:1b:bf:34:d5:40:
8b:17:06:45:fd:0b:dd:9a:cf:a4:23:52:7a:05:6c:0c:6a:ad:
f3:e2:fc:65:70:28:ab:54:bb:e8:14:e2:eb:ab:5d:16:92:8f:
e6:4d:92:d4:d3:7a:e9:c5:7d:dc:13:e5:44:3c:09:46:9c:34:
67:63:67:cf:a4:d4:e1:78:bd:b0:4f:71:8f:43:c8:80:66:f0:
a6:8c:e7:62:35:a6:8a:07:68:9c:4c:8f:1c:80:48:a5:c0:e4:
14:c3:13:d4:38:0e:ab:0b:a3:29:59:13:a6:ca:2d:78:97:34:
92:cb:a2:34:b5:86:dd:59:df:0c:10:13:53:d0:6a:c7:16:05:
c1:2f:25:83:2f:8e:cb:f8:58:8d:66:c5:da:c3:ae:28:5d:95:
9e:09:e8:7a:b8:bd:65:86:49:16:d5:78:7e:f1:f0:33:3c:ca:
d0:98:22:bd:bd:f4:07:7a:5b:b7:74:03:dc:0a:c1:50:b4:37:
54:55:fb:77:91:99:14:26:2d:50:d2:21:e9:73:95:0e:13:25:
23:06:47:bd:7d:2d:81:c2:52:28:69:36:d7:dc:20:4b:6d:0a:
81:42:ea:72:39:f2:9d:9a:0b:72:23:45:91:cf:d2:76:a5:65:
29:99:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:54:50 2026 by rpki-client