Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: ha+e8seO6PgIPhQDUpXxAiRXyU8fwMWAC6kiBal4dOg=
Subject key identifier: 54:A7:82:E4:48:A4:E3:F2:39:73:D1:47:F1:82:DA:8F:EE:EC:11:DE
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 01A0024AFE26F1BD7F15C39384CFD34A7397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1A0B
Signing time: Fri 14 Aug 2026 22:01:04 +0000
Manifest this update: Fri 14 Aug 2026 22:01:04 +0000
Manifest next update: Sat 15 Aug 2026 22:01:04 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: nxWQo/aFDghncat2gLaiPSMM8jOvk1b/jxFgKrmx5KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:fe:26:f1:bd:7f:15:c3:93:84:cf:d3:4a:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Aug 14 22:01:04 2026 GMT
Not After : Aug 15 22:01:04 2026 GMT
Subject: CN=54a782e448a4e3f23973d147f182da8feeec11de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:22:78:4f:e9:64:0b:27:b7:e6:7c:96:23:
69:35:b6:3d:bf:41:44:fc:3a:93:a9:45:5a:03:69:
d0:c3:b5:da:42:f0:fb:fb:87:76:7b:22:8a:3c:8e:
26:9c:ee:4e:30:b8:1a:e4:ba:14:40:10:a9:87:c4:
67:19:11:fa:35:a6:32:69:6c:6e:6f:69:68:fe:54:
7c:35:88:6e:eb:3c:65:1c:71:27:72:84:c3:ee:2b:
0d:d2:3c:68:65:a7:b1:56:11:18:7d:ba:ae:d7:45:
ee:d9:b4:14:16:ff:6b:c8:1d:93:b4:08:fa:4c:ca:
14:81:97:02:c1:80:fd:33:eb:4d:33:08:c6:02:68:
1f:2c:1a:8a:46:4a:98:ba:00:0b:9d:ba:ff:dd:6e:
18:69:73:0a:39:39:56:75:63:78:50:c3:e6:b6:61:
91:ab:ea:28:a5:13:40:25:73:58:f3:8a:9b:16:f9:
66:41:5a:80:26:f0:e5:cb:1c:1b:c5:c9:12:d9:7a:
28:30:64:ff:56:9d:43:87:d3:15:e7:e7:41:1a:b7:
ec:fa:62:ff:54:aa:a2:ad:3b:ea:30:10:3a:56:e3:
a9:fd:01:8c:e4:d1:e9:8c:39:ca:b2:8d:08:27:1e:
cc:13:91:f2:55:bc:91:2a:b6:10:ca:2d:d6:2a:bd:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:82:E4:48:A4:E3:F2:39:73:D1:47:F1:82:DA:8F:EE:EC:11:DE
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4f:f7:6f:4c:d4:81:28:9e:44:62:f3:2f:5f:ed:d4:73:1b:
57:78:18:60:00:63:58:c0:84:a5:59:19:c1:4f:e4:29:a0:65:
8b:82:5b:0f:bf:13:da:21:0b:6d:11:51:87:92:99:94:98:36:
ec:1d:d9:a4:9f:eb:a3:8b:4a:1a:50:9c:db:41:f3:f2:e8:44:
6e:eb:a2:ae:a5:a5:ef:55:d5:25:f1:b5:d0:ab:ff:0b:40:eb:
3c:dc:39:90:2b:21:67:08:47:e8:f0:c6:ff:e5:e9:34:e8:df:
17:f2:06:61:b4:54:be:e0:15:70:9e:29:fa:32:4f:25:a9:3b:
41:54:f6:c9:8e:5d:09:e5:51:7f:15:03:bf:9a:91:d7:69:2d:
48:d3:94:f9:bc:f0:c5:eb:4c:81:1c:38:62:45:f1:f3:1a:ea:
5c:3c:23:2a:d7:69:6c:76:d5:50:c7:d0:2f:b5:b5:00:9b:60:
1a:b1:cf:b2:e1:1b:eb:28:a5:95:97:da:82:71:07:83:0f:9a:
d1:5d:5c:9b:0a:6a:d6:d8:48:43:f7:08:b2:49:32:81:d0:da:
3c:c9:2f:32:0d:4f:ee:fb:40:42:1d:b9:2b:73:22:62:83:59:
e1:13:da:5a:07:79:c8:26:8e:d2:8c:12:9b:b6:c5:ed:c3:13:
53:95:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:28 2026 by rpki-client