Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier: Jn/auML/K52Ze+mw05KoemNsI5FuIFE/rmBHn35qKoU=
Subject key identifier: FD:25:52:D6:3C:08:A2:C6:D4:E4:FB:D7:E3:AC:35:BB:07:F7:85:3F
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 01A14B3CED15B3DA202A2A9313A191FB19E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number: 1AB0
Signing time: Sat 17 Oct 2026 19:00:46 +0000
Manifest this update: Sat 17 Oct 2026 19:00:46 +0000
Manifest next update: Sun 18 Oct 2026 19:00:46 +0000
Files and hashes: 1: 0pBVrnwaMrvHC0mWbltAonQIV6s.roa (hash: nBJhwfttH5k4hcqYR4xXAgBBGUVFInHTXZxBXLHIH+8=)
2: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: Gq2agaeFAuJ1SIRk1IM0z2p9vueVmZ4auQtTOC7Guek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3c:ed:15:b3:da:20:2a:2a:93:13:a1:91:fb:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Oct 17 19:00:46 2026 GMT
Not After : Oct 18 19:00:46 2026 GMT
Subject: CN=fd2552d63c08a2c6d4e4fbd7e3ac35bb07f7853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:62:40:13:0a:1a:74:57:4a:49:d5:f1:44:
22:5a:18:b0:15:fe:1f:a7:58:d1:73:8f:aa:b2:b7:
90:ac:23:4f:d5:cc:4d:2b:a8:70:f3:b0:bb:32:1f:
91:d2:fe:e8:3e:ce:77:c5:de:0b:45:1c:d0:33:a7:
3e:1f:be:8f:0d:c6:ac:0d:b3:a4:2c:9a:c4:ab:e9:
18:f3:74:26:0d:9b:85:90:58:9b:ac:e1:01:63:31:
64:ac:72:02:63:56:57:c0:ca:e1:2f:d0:e8:01:24:
25:27:f4:36:f9:f1:18:0d:c2:f4:37:3a:64:11:ad:
7b:15:61:6f:5b:88:3b:2c:39:39:a7:90:7e:6c:c1:
5c:ab:2e:90:f9:e4:1d:17:86:5f:56:3e:e0:ca:07:
c7:cb:bb:5d:2c:87:05:6e:59:01:3a:11:26:83:8d:
ea:e0:9e:aa:88:36:5b:72:e0:03:97:7c:4d:42:5b:
19:96:da:f9:fd:23:99:62:7d:e6:02:13:5f:df:d0:
5f:f5:21:6b:7b:44:38:ec:08:84:9e:eb:b9:a4:10:
af:35:dd:81:fe:3a:5a:f0:86:3f:22:72:49:98:08:
40:1b:2c:e9:ab:97:ea:d3:a0:01:02:86:21:e9:88:
1d:31:76:f5:43:5e:67:44:93:eb:b0:db:b8:9b:64:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:52:D6:3C:08:A2:C6:D4:E4:FB:D7:E3:AC:35:BB:07:F7:85:3F
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:43:92:88:66:87:fa:cd:2e:a7:b1:03:0a:ed:eb:51:19:
58:bf:f2:9c:bc:0f:1e:df:94:40:ed:1a:4f:49:a6:ae:df:a6:
ee:98:c6:0b:c5:12:81:fd:05:24:d5:cd:b8:90:6c:b7:b3:18:
b4:62:76:42:6e:85:3e:e0:de:39:63:2c:5a:cc:62:71:65:67:
ce:66:51:34:54:07:99:f5:62:8b:bb:64:57:4a:c3:43:90:d5:
cc:86:3d:aa:03:1d:3e:88:4b:c9:11:97:ac:16:49:49:fb:7f:
22:4b:5b:a6:22:21:cf:5e:65:73:b9:4f:3a:d3:cd:f1:33:f6:
ca:21:0d:95:63:3c:3e:a0:25:62:8a:df:30:d3:a1:67:2b:bd:
d6:74:d7:86:d7:24:44:18:52:22:32:43:ce:14:e8:14:a9:f7:
61:41:f2:a1:71:56:f8:a9:87:75:99:47:4c:03:00:b4:51:d4:
8b:84:cc:d1:97:38:e6:12:5b:be:67:d7:ab:84:f2:62:e5:53:
9c:e8:1d:fe:c4:ed:22:b4:81:8b:5d:2d:f9:fd:0e:30:1c:a5:
bc:3e:f0:36:e6:8f:78:c3:eb:56:54:48:af:8a:7a:f3:65:9f:
a5:25:b7:a7:28:5e:d0:80:2a:fb:23:e4:f4:fa:9e:b1:c3:53:
ae:83:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:24 2026 by rpki-client