Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json)
Hash identifier: ad0dPc+8lGJ8K3ADVuE7MG+90hpgCA7Zx6E9wxwJ3OI=
Subject key identifier: 8A:63:E7:92:BE:2A:E4:1A:91:75:E5:C4:C2:4A:53:38:74:D4:39:98
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019D3909F88C68ADDC838DC60E7C11BEEB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
Manifest number: 0862
Signing time: Sun 29 Mar 2026 10:00:47 +0000
Manifest this update: Sun 29 Mar 2026 10:00:47 +0000
Manifest next update: Mon 30 Mar 2026 10:00:47 +0000
Files and hashes: 1: 0UIBS5-yp_HgF3ul5V_8sUFbmJ8.roa (hash: X8gXM4Et7DwBL6n3MCxosMtMRa/fbXbSkj6ESSoWPTQ=)
2: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: A2Z/yPn5/JltycJhQZDxAIMgMfSeazMflqBRJalU6oQ=)
3: RIniPxpajpUN5jZiEOQ6rHPG0BQ.roa (hash: SsfgyzQKdx0THkyWEG2SQtmE73Hp/r/I7miQEdE9ZkI=)
4: Z0h4r8Cw7__xchKsVvU8nksAU0w.roa (hash: eVMH7lIJbIBD17QayaS20VTBZM68VJbN4Trnh4+uUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f8:8c:68:ad:dc:83:8d:c6:0e:7c:11:be:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Mar 29 10:00:47 2026 GMT
Not After : Mar 30 10:00:47 2026 GMT
Subject: CN=8a63e792be2ae41a9175e5c4c24a533874d43998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:28:03:24:85:ef:09:7c:35:49:5f:c6:40:
31:78:7f:62:c9:9f:36:97:e4:2d:0c:0d:7b:be:88:
d0:1a:6d:2b:9c:77:80:ce:1a:43:09:b8:48:6c:18:
36:eb:94:85:7c:5b:fb:da:c3:25:c3:46:f6:25:7d:
be:3d:8c:10:84:62:d8:ca:fa:e4:19:e7:a3:7b:a4:
2f:5b:fb:7f:62:a4:94:b1:6d:e6:7c:62:61:7d:08:
5c:37:e9:92:cf:fa:71:3e:4d:f6:11:51:86:2e:73:
43:30:32:34:00:bb:3b:00:43:65:1d:da:2f:49:50:
7e:e1:53:ca:51:10:a3:4b:21:c8:9e:60:cc:64:20:
2d:7d:ec:03:57:b6:65:84:cd:eb:51:04:a4:b7:53:
03:6e:16:49:62:00:28:0c:61:6c:04:d1:d4:56:fa:
a0:97:89:ac:4b:b1:cf:ea:eb:d8:96:1b:63:ee:64:
29:14:b9:98:4b:38:31:2e:34:ba:1f:bd:7f:c5:02:
06:5d:31:43:70:88:44:14:13:5d:6a:a9:b4:79:47:
b6:6d:7f:2e:55:c9:95:9a:ba:22:fc:0f:b6:67:3f:
22:9e:38:92:e6:2e:e4:09:60:e1:ec:e7:75:dd:01:
d4:12:ca:cc:6a:cc:a8:d3:ba:3a:89:bd:dd:bc:36:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:E7:92:BE:2A:E4:1A:91:75:E5:C4:C2:4A:53:38:74:D4:39:98
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:ee:9c:78:7d:13:26:df:42:7c:da:fd:6a:ab:cb:25:91:
57:a1:6f:2d:10:c2:bf:57:41:dc:bb:18:52:3a:cd:5a:ce:71:
11:03:5b:cb:ba:56:cb:38:1a:d5:23:fd:09:d7:0a:16:c1:b7:
a5:12:e6:78:1d:e2:5d:18:6a:94:fa:96:72:ff:bb:ee:cf:a5:
13:4b:1d:be:c9:bb:39:0d:99:01:36:28:e3:20:2f:4d:a7:ba:
40:f6:b8:96:75:69:4a:cb:8a:be:5b:00:39:e5:91:1d:40:ff:
ba:91:8e:3b:b5:42:e3:a8:0a:94:b9:70:93:68:d2:1a:c0:bf:
34:0e:78:33:f7:31:49:e4:e7:7a:93:a0:c3:d8:d1:81:fc:13:
da:e4:34:c8:d2:cb:91:1a:e0:80:3c:2f:9e:23:53:0b:cf:60:
cf:2e:ef:bd:11:15:b4:e9:60:5a:b2:5c:cb:3e:aa:47:e0:bf:
dd:f7:f5:20:75:cc:52:ee:64:79:d3:52:c8:5e:65:c7:b5:93:
b6:28:6a:19:3b:51:c8:da:52:fa:41:7f:ec:a7:b1:8d:54:e6:
dd:90:d9:cb:5f:61:38:7f:3b:0e:3f:75:75:6e:43:40:f5:f9:
39:c6:9a:94:9e:ae:a5:a4:db:a7:17:0c:7c:4e:90:dc:56:9d:
c8:5d:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:15 2026 by rpki-client