Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: h3mHDdhtY03sA3aMBSsnX89nnx+68dMTnUB6kyErTdw=
Subject key identifier: 6F:1D:0D:7A:5E:B3:AF:44:98:B4:70:67:C5:EC:38:D2:43:CF:88:5B
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 019D37C01B39DDD2F35A28617745B70E4542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: aLUKZF6pJg79VEUsxnvzB4s5ilNB6qsayAGKvS76WbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1b:39:dd:d2:f3:5a:28:61:77:45:b7:0e:45:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=6f1d0d7a5eb3af4498b47067c5ec38d243cf885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:67:07:51:97:a7:ad:e2:69:9b:2e:b2:35:
41:3b:b0:56:bf:cc:f6:9b:56:b3:0d:d6:2f:75:18:
5c:17:e7:8a:d4:df:7c:35:f0:20:4e:81:a5:bd:8c:
f6:91:76:68:a2:c6:a3:78:a8:92:6d:9f:cd:d3:98:
64:fd:83:ee:2f:bc:35:71:08:4c:40:01:10:af:6a:
f6:82:5d:f2:6b:50:67:a5:11:57:fa:ec:57:db:9b:
d7:b5:e3:08:1b:3e:98:fa:15:ce:cc:6d:ee:7b:6c:
c6:9d:c5:ed:15:1c:ea:8d:b1:8e:45:34:35:e7:5e:
85:6e:13:68:dd:1b:90:bf:df:c9:20:46:34:3a:9b:
a1:06:61:32:95:59:d4:73:4b:72:87:6e:be:5b:07:
05:3f:4a:c5:4c:05:89:69:8c:89:ee:fc:90:d9:70:
3d:40:b9:0a:25:cf:5c:35:53:15:75:e1:83:16:95:
34:6f:62:02:3e:ca:81:b8:fc:4f:6b:bf:5b:6c:cd:
bc:65:bc:89:11:17:9f:ee:b4:e6:74:98:97:d6:55:
4c:aa:fd:5b:5e:d8:cd:74:7b:18:a0:d0:69:37:f4:
3a:c6:3e:53:9b:1f:5a:d9:cc:fe:71:ed:ba:3e:6e:
51:d4:be:d0:01:b0:a7:15:be:86:42:c4:43:2b:4f:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:0D:7A:5E:B3:AF:44:98:B4:70:67:C5:EC:38:D2:43:CF:88:5B
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:ad:c3:f9:d9:36:c2:8c:d2:da:80:a2:87:ff:4c:8e:e6:
f5:9b:f5:c1:7a:1e:35:02:a5:9e:05:bd:8a:95:6d:1c:21:82:
4a:14:ff:e6:03:bd:30:9f:91:25:46:dc:37:a7:f7:32:d1:b5:
3c:34:56:49:46:55:da:7e:18:4a:72:32:29:eb:50:3b:c7:6a:
91:c7:81:15:e1:bf:07:9a:14:47:1f:11:3c:bc:ae:3e:91:d0:
ab:7f:8f:bf:02:95:5e:82:95:f5:4f:3e:23:82:24:3b:02:07:
c0:c3:2b:cf:c7:c7:84:2a:b8:40:92:4c:57:ae:0d:5e:de:11:
e0:75:68:91:b9:26:1d:ff:62:45:78:db:02:ce:f4:70:e7:56:
fb:03:8a:26:af:de:30:80:8c:6e:31:40:aa:b2:4c:fc:69:f0:
3d:9b:19:bb:0c:b8:5f:d1:01:b5:7f:06:eb:da:08:9d:c6:cb:
e4:06:cb:29:80:5d:3b:9c:e5:91:22:48:a1:88:64:95:36:9b:
06:ee:a1:86:f7:fd:fb:23:c6:51:b0:a3:6c:2f:82:3a:28:90:
73:17:9e:9c:a7:3a:a5:d7:4d:1c:85:73:09:cb:6d:ef:59:18:
98:a4:23:23:b0:a0:52:02:74:de:c0:6f:58:83:ff:93:44:6a:
fa:ff:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:08 2026 by rpki-client