Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: vB06UvA5ogqAo2MPrLT7ODrto9wJYYeLkp0OCMZy0uA=
Subject key identifier: CC:57:19:86:88:AE:5F:E0:A9:26:25:37:E8:30:64:2E:83:5F:85:3C
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019DB46BE75EF44ACD2DACEA5EA013D26A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 18D8
Signing time: Wed 22 Apr 2026 09:01:03 +0000
Manifest this update: Wed 22 Apr 2026 09:01:03 +0000
Manifest next update: Thu 23 Apr 2026 09:01:03 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: b0f5x6mnI73Uv3IMGylFvc/+BMkYRRINwqNftXTmRZI=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:6b:e7:5e:f4:4a:cd:2d:ac:ea:5e:a0:13:d2:6a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Apr 22 09:01:03 2026 GMT
Not After : Apr 23 09:01:03 2026 GMT
Subject: CN=cc57198688ae5fe0a9262537e830642e835f853c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:ee:1b:ef:e9:23:c3:f4:04:09:46:6c:85:
0f:3c:97:c8:30:95:69:ca:af:62:90:f0:8d:f2:0b:
ac:7a:40:07:1b:08:53:09:0e:2a:92:2a:36:9a:9c:
f3:b0:75:58:05:7f:e3:4e:ba:14:e7:7a:ab:60:1a:
0f:04:8c:68:8e:bf:61:14:65:91:98:59:8f:2e:b5:
74:ff:9b:dc:f1:b1:9b:4c:77:55:4e:b6:1d:28:d9:
81:71:bb:88:ff:8e:9b:16:b5:26:15:0c:1e:91:06:
45:29:61:b8:0e:94:10:92:0e:34:2d:7e:ec:d8:a8:
0e:3a:c4:a8:a4:a3:fe:87:32:07:f9:9e:6e:f1:4d:
90:d5:f3:f4:90:03:c6:2d:dd:52:a5:13:99:65:67:
f7:1b:84:a8:e3:26:7d:e9:11:fe:52:a4:6c:39:56:
88:3c:96:ca:d8:b1:16:0f:33:a7:6c:6f:e8:4e:e9:
01:04:0d:ee:75:d3:96:d6:0f:92:5e:f1:7b:be:49:
34:b3:f1:a6:46:bd:a9:4c:66:95:a6:07:57:fa:77:
34:6b:c8:13:8b:e0:e4:b7:a6:cb:5e:6d:b4:35:c3:
8a:ff:34:f0:f0:0c:f8:81:4e:f9:65:dc:f2:8e:bb:
ee:40:0e:81:54:61:f0:f3:99:a8:f7:ab:b6:30:38:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:19:86:88:AE:5F:E0:A9:26:25:37:E8:30:64:2E:83:5F:85:3C
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:6a:20:32:99:13:9d:01:7f:db:7c:c0:6b:82:81:97:7e:
e1:70:5d:49:05:67:2d:f4:50:f1:a2:1a:78:b5:44:02:7b:46:
a0:f3:74:95:d7:f2:77:57:9f:65:4b:ce:c3:e7:03:40:6b:18:
84:38:5d:72:db:61:33:95:59:2c:1a:ea:61:e4:9a:20:67:98:
b2:81:bd:7f:54:94:3c:b6:47:d9:4a:e3:29:61:ca:18:2e:2f:
f2:e6:f5:d9:a7:78:ea:f6:8d:94:7e:f8:d0:9e:ef:fb:26:95:
1a:86:44:bb:8e:ca:26:ef:83:19:6a:1e:ff:1b:d0:66:ec:a9:
0e:3b:fa:b9:f6:75:50:ae:50:e3:aa:19:b6:f5:f6:cb:3e:6f:
48:f7:31:2a:31:77:8a:1f:d5:15:9b:87:46:62:9d:ca:50:4c:
44:99:22:67:13:0f:22:95:ac:1e:15:96:f3:89:23:fb:2f:e2:
3a:60:9d:54:03:cc:36:86:eb:f3:71:73:86:06:39:f1:6c:d9:
d7:28:cf:d6:cb:74:f7:07:7b:44:87:cb:b1:e3:21:9b:ec:64:
97:a4:5d:dc:46:0d:b2:34:29:9d:08:7f:df:c3:ba:1f:3b:5d:
a5:1e:21:90:d1:26:a6:18:09:f1:79:27:3f:f4:17:55:fa:4f:
09:25:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 14:49:59 2026 by rpki-client