Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier: SpkzlvonVfu4pyQnR6r2VPzF1akvtFyyX4uQ0deLh0E=
Subject key identifier: 48:78:B7:C7:94:33:0B:5C:0A:11:FF:4C:F0:45:A6:DA:57:75:80:14
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial: 019F83E8B8039DB79536D4811AF2E3BE02A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number: 19C8
Signing time: Tue 21 Jul 2026 09:01:34 +0000
Manifest this update: Tue 21 Jul 2026 09:01:34 +0000
Manifest next update: Wed 22 Jul 2026 09:01:34 +0000
Files and hashes: 1: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: INgs4iOpXIudlCHnHktArPrq17WDlY2kbxyX0ifVJcI=)
2: iIogneQcOU_e3agO8kFzmWJA7XA.roa (hash: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4=)
3: n2OaMmsp7MYKOaOewrEjivY2pIQ.roa (hash: nsH89Jtej2NAT9EYUnKfsM/5OMThC9ekm0EHJ9HQ3HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:b8:03:9d:b7:95:36:d4:81:1a:f2:e3:be:02:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Validity
Not Before: Jul 21 09:01:34 2026 GMT
Not After : Jul 22 09:01:34 2026 GMT
Subject: CN=4878b7c794330b5c0a11ff4cf045a6da57758014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:5e:4c:4d:58:d3:dd:28:54:7a:e7:13:58:
5a:8b:ea:d8:4e:86:17:15:1a:10:f3:dc:20:85:33:
f8:78:31:98:ce:d6:fc:b0:fc:82:b7:ec:80:14:69:
d3:54:ee:f9:9c:9a:25:c2:20:37:ea:e3:82:66:37:
6f:f7:3a:75:45:17:02:26:33:d7:d0:37:16:0b:6b:
39:f1:8b:38:c5:92:5e:ba:47:67:5b:7f:3c:84:07:
ab:46:49:e7:a6:71:c9:66:82:dd:c8:1f:45:c2:0a:
42:dd:72:b9:9f:d8:c3:88:33:e7:a8:b5:b6:2d:ac:
89:16:07:ec:74:f5:74:79:50:38:b8:c2:1a:b9:5d:
44:d6:e6:a2:c4:a7:04:88:d2:72:9b:e8:b7:aa:f2:
e5:1d:4b:f0:56:4d:33:55:01:3c:d8:73:41:84:6b:
d2:59:05:a1:50:ce:19:05:10:b2:cb:55:c8:2f:15:
5b:80:02:6f:b2:71:55:3f:83:51:f2:ec:88:d6:2a:
41:47:c2:43:e6:88:40:4f:78:7c:30:91:59:d1:14:
7a:d1:a3:6b:73:d6:6a:1d:87:d6:04:98:1a:ac:c0:
b6:df:6c:df:fa:13:7f:96:fe:96:a6:2d:58:2c:b0:
20:77:63:f0:d1:b0:08:ce:c1:69:c4:2b:87:fa:7f:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:78:B7:C7:94:33:0B:5C:0A:11:FF:4C:F0:45:A6:DA:57:75:80:14
X509v3 Authority Key Identifier:
keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:32:30:7c:40:10:3b:53:1d:2f:58:f5:81:65:f3:95:77:39:
37:1f:74:51:93:11:cc:4b:b0:a6:6c:74:65:84:73:0e:58:a3:
ab:d1:7f:af:20:00:20:ba:0c:c2:10:b7:d7:46:da:70:84:a1:
32:7d:f5:95:36:c6:c2:2d:bb:45:52:08:9c:b0:be:85:16:3f:
1b:64:3b:31:fa:d7:79:7d:c9:89:11:3d:39:6e:ed:55:8b:c1:
87:83:66:d0:36:31:1a:40:6e:4d:57:ce:9c:aa:f1:3f:c5:ec:
2d:d1:76:97:20:e8:7b:19:23:f0:93:15:76:b9:be:f9:fb:1b:
ad:c3:5a:d3:7e:44:d2:ef:35:25:33:c3:41:81:6d:c6:78:1c:
11:49:79:f1:8f:f2:72:b4:24:10:cf:01:7e:7d:6e:1a:36:a6:
f3:56:d2:a4:10:97:f8:68:aa:48:1a:9b:1c:c5:98:42:f1:98:
fc:a4:2e:7e:ec:f3:9b:ee:18:a4:b4:0d:4e:a1:d6:f7:33:92:
5b:21:ae:96:8b:ba:7f:76:c5:12:15:d5:60:3c:91:a1:ed:2b:
6f:91:4e:1d:46:1f:08:33:58:74:02:96:bc:bc:30:ee:99:b7:
6f:f0:06:e5:5b:3c:2f:bf:6c:fc:7c:eb:8f:dd:59:76:86:e4:
b0:30:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:42:24 2026 by rpki-client