Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier: w2Uw8WQpFLUaPyLastUuBN3oAGTc3o0RnCVpKjDELmE=
Subject key identifier: CD:CF:AB:26:76:44:94:F5:0E:08:B0:B8:CF:53:45:50:56:96:57:47
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial: 019D371BAFC17AB8FC0D6BB22CCFAF7A98BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number: 1113
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: LjhJq6z0EutkdYUDvjPf54YMQCY.roa (hash: UJ/E0MSAhlopMBAQ1Fn4sYzS7IPnJ8HsG+SPAcDqln8=)
2: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: h50HwIIcTbzZOatnJHdv8/ekPVX9WMZCVWGk/ejcwNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:af:c1:7a:b8:fc:0d:6b:b2:2c:cf:af:7a:98:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=cdcfab26764494f50e08b0b8cf53455056965747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:a5:e5:fe:33:11:f1:da:45:1f:1f:40:86:
b8:a5:76:d7:10:18:7e:87:4d:48:dd:52:65:17:ee:
00:fc:ea:9a:cb:4f:83:f4:36:fb:78:b8:7c:f5:2c:
a0:44:5d:38:f5:fe:51:77:b2:e0:aa:21:f7:9d:e1:
9b:92:f5:ac:3d:9b:20:54:8a:3e:fb:76:1a:37:53:
6d:2f:3c:2c:63:d6:3b:11:d3:1a:be:30:ec:b2:25:
89:c5:6c:93:a4:ac:10:ca:c1:e8:75:ce:9f:cd:4c:
93:20:5a:09:73:7f:25:69:70:56:91:2c:9e:21:6e:
c8:fb:d8:17:66:9e:7a:79:c2:c5:84:8d:98:25:97:
01:ad:ed:77:72:4f:26:df:40:46:07:d2:c2:b0:15:
c4:c9:54:61:2c:17:8b:93:7d:26:dd:46:58:91:cc:
ad:29:80:df:92:ab:81:eb:58:85:9a:f7:78:9a:a9:
b9:ec:10:9c:dc:21:09:fd:57:32:d3:9d:4d:2a:29:
58:46:b4:89:07:3e:ee:0e:6d:6b:b8:e8:65:d5:17:
42:bd:c0:ec:82:e6:fa:21:e8:50:93:99:a3:aa:2c:
f1:c9:4f:42:83:f2:4e:99:6e:29:7f:e4:3f:20:82:
b4:b7:23:52:c3:c2:00:cd:ea:65:dd:8f:81:86:13:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:AB:26:76:44:94:F5:0E:08:B0:B8:CF:53:45:50:56:96:57:47
X509v3 Authority Key Identifier:
keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fd:84:dd:df:33:40:d4:a7:64:40:98:24:32:48:0b:96:91:
4e:52:c0:9b:5f:e7:aa:7c:2a:c0:ef:b8:41:db:fe:9f:94:23:
1d:ba:ac:a8:7d:c3:9c:66:50:59:2e:c5:3c:fa:d4:b3:69:37:
40:73:16:02:4b:0d:62:68:1a:05:b1:b8:53:44:5b:58:bf:27:
5d:74:4f:38:29:78:23:41:5e:0e:3f:3c:b3:04:d8:59:97:0a:
21:4c:e2:db:24:51:41:df:5a:ab:f0:e5:9d:5e:2c:af:95:f2:
36:0b:26:08:a0:00:11:4c:96:13:2b:df:22:ce:ba:5b:d3:bf:
91:15:6c:3f:da:49:48:cc:8a:fb:3f:53:ee:ef:94:f6:df:29:
2b:57:ee:e7:0e:b6:2d:72:bc:b4:ae:5d:c0:ea:30:47:7c:e4:
39:93:48:4c:c8:23:fb:a4:54:d1:d4:eb:b3:23:3e:2d:34:08:
03:5f:e4:16:e1:53:19:97:6e:4b:0a:61:c5:12:4d:a7:18:d3:
c6:57:4b:84:e1:58:4e:72:d4:a7:65:89:2c:5c:88:23:5e:6e:
6f:02:94:19:85:c7:ec:87:47:d5:4b:1c:88:80:9c:1a:97:00:
98:ac:37:eb:0f:96:9b:98:82:a3:20:b0:d9:a4:15:86:ca:1c:
a4:1b:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:37 2026 by rpki-client