Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json)
Hash identifier: Rb4+tACjI/KTAnJ/tyd63jY6WsgeuIZPrGBnJCCUBcA=
Subject key identifier: E0:F9:E7:5A:15:FE:E4:CB:2F:29:A2:15:04:A2:57:E0:C4:14:31:45
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 01A13F021D1E10D2EADC502988584D43AE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
Manifest number: 1AAF
Signing time: Thu 15 Oct 2026 10:01:05 +0000
Manifest this update: Thu 15 Oct 2026 10:01:05 +0000
Manifest next update: Fri 16 Oct 2026 10:01:05 +0000
Files and hashes: 1: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (hash: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM=)
2: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (hash: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M=)
3: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: UjsWmfupkvH7KQqNW0tGnCst/LFpqId9bXfYQr4bfHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:1d:1e:10:d2:ea:dc:50:29:88:58:4d:43:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Oct 15 10:01:05 2026 GMT
Not After : Oct 16 10:01:05 2026 GMT
Subject: CN=e0f9e75a15fee4cb2f29a21504a257e0c4143145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:a4:07:c0:e8:6f:aa:a2:4e:2a:e2:cd:05:
c2:86:f9:b6:c2:db:20:bd:df:4c:f4:01:17:c7:03:
78:9b:00:63:38:8d:9b:61:c7:bc:75:81:43:b9:fd:
02:26:70:8b:be:6a:50:f8:34:19:1e:27:57:76:eb:
9e:38:82:e0:5d:65:36:0b:0e:38:9c:0f:6f:46:d2:
73:fd:cc:30:c0:b8:35:36:c1:d4:c9:fe:2f:6a:b7:
e0:b8:6f:25:b8:81:52:48:db:5b:c5:fa:b3:4a:6b:
d3:d0:e8:92:54:83:b7:83:05:e0:46:45:c7:2c:80:
f9:91:bb:ed:d0:54:ef:b2:58:74:0e:63:9b:df:d8:
33:29:c8:47:cc:43:c1:6c:b5:43:c8:b1:a2:49:fa:
8c:b1:d1:7e:b0:62:03:10:95:9b:6a:81:65:67:22:
ba:62:f3:c7:46:90:9f:1c:4c:ed:10:cb:08:2d:82:
03:dd:21:c7:f3:55:ee:43:d3:84:fb:ae:f0:4a:df:
e9:07:04:92:33:28:f8:ff:6b:e3:ec:3c:d3:92:55:
9d:a4:03:ce:af:e3:99:98:aa:b5:76:be:80:96:35:
d3:0e:60:91:27:6e:46:8d:d1:c8:9c:da:24:d6:f9:
5f:e4:72:0f:40:38:5e:6b:c0:8e:53:b8:fb:62:92:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:E7:5A:15:FE:E4:CB:2F:29:A2:15:04:A2:57:E0:C4:14:31:45
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:39:80:8d:57:a5:4b:fc:cc:cc:13:5e:bc:65:74:10:bf:da:
25:d4:9c:9a:8e:6a:b3:d8:93:3c:1c:fb:75:82:ae:18:e0:07:
35:8e:f4:d4:f2:42:ac:23:24:ab:5a:18:79:8b:5b:6c:ed:28:
51:e3:19:a1:87:f8:79:14:7d:fb:0a:08:7a:f5:15:63:49:5f:
8d:00:11:da:75:0c:fa:33:c6:20:89:75:c6:22:11:07:c3:62:
00:e1:05:a9:d2:12:18:28:00:78:08:46:6b:7b:b2:fc:40:3b:
bd:22:06:a0:52:70:c2:71:36:ae:59:a9:aa:45:b0:0b:64:df:
8c:f0:6a:25:bc:a3:f0:dc:6d:70:a1:4c:b8:d3:a3:cc:2b:fc:
8b:15:7d:11:88:55:5a:12:32:e0:b1:d2:d1:c0:d3:57:0a:36:
bb:43:f0:fc:67:16:d0:d1:20:6c:2b:50:b5:f8:31:3e:2b:46:
8d:c7:a3:5f:6d:82:ca:01:6b:21:9a:db:f8:fa:c2:13:57:77:
74:ce:07:ea:ca:f5:b5:54:38:14:bf:22:ea:58:e4:98:54:43:
50:46:e0:44:c0:7d:01:c0:71:4a:af:fc:5a:cb:a7:64:01:77:
ad:09:ef:c7:ad:94:c3:55:a5:3d:09:10:ef:a5:fb:80:73:41:
90:35:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:07 2026 by rpki-client