Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: NOA44uFpdc/rPqNqVXMLo21gju0Stf5VmQYUSkVZmfQ=
Subject key identifier: 76:3D:47:9B:32:FB:A6:D5:C3:E8:77:CF:2F:E9:07:F5:A5:46:6A:D2
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 01A0D7CC243E204F6F11B633F0F7AF356A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:14 +0000
Manifest this update: Fri 25 Sep 2026 09:01:14 +0000
Manifest next update: Sat 26 Sep 2026 09:01:14 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: fDVLpDOw0EV5MwLPwFT2o+grDHxeA4p9He5o48wQtr4=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:24:3e:20:4f:6f:11:b6:33:f0:f7:af:35:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Sep 25 09:01:14 2026 GMT
Not After : Sep 26 09:01:14 2026 GMT
Subject: CN=763d479b32fba6d5c3e877cf2fe907f5a5466ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:d3:90:0d:65:c8:a4:f2:1a:75:5a:4c:ed:
96:92:c0:a9:9b:02:fc:ed:b8:0e:ce:bf:47:65:90:
65:4f:2d:46:9c:8f:0c:6e:8d:ba:35:3b:4b:f3:04:
60:38:b5:e0:e8:54:ae:8d:ee:b9:eb:80:fd:be:f4:
72:7f:1c:63:70:7f:be:a4:31:1a:47:01:a7:c7:6c:
01:61:bd:c4:ba:d8:d5:09:71:be:cc:c5:26:37:79:
b6:45:c7:d1:bd:f1:02:e3:69:6b:a2:de:b7:78:f1:
0c:eb:4f:a6:04:0d:8a:b4:9e:c9:50:2e:ed:59:f0:
8e:71:8a:25:a9:4f:9d:7e:61:7c:bb:64:6a:5b:6c:
da:9e:db:a9:75:06:b5:c5:68:34:2b:1d:a0:01:28:
6c:09:70:0c:23:db:22:65:93:c2:cf:25:b5:7f:3f:
45:44:7a:c3:4e:07:3c:c0:c3:ac:f8:54:eb:16:86:
47:cb:c6:49:25:41:90:2e:85:e5:2e:e5:df:ce:48:
a6:0a:46:e5:aa:36:38:cd:f6:2f:d6:aa:c5:96:54:
77:e7:ca:4d:c4:ef:34:15:23:20:a6:67:37:cf:ef:
6b:88:7f:15:38:51:41:30:4c:b5:56:4a:46:3a:c3:
fc:27:aa:90:ac:fb:44:57:18:b8:45:23:a2:cd:93:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:47:9B:32:FB:A6:D5:C3:E8:77:CF:2F:E9:07:F5:A5:46:6A:D2
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:44:d9:c8:cd:72:ce:76:b2:0f:92:9c:e0:7c:ca:25:38:
e1:0a:3f:f8:93:7b:d0:6e:cd:00:c1:23:a6:4d:cd:da:f6:36:
b8:56:8a:cb:61:54:3b:84:de:c0:27:b3:91:a4:61:12:b7:98:
a9:f4:32:82:70:a5:91:7f:12:99:34:37:cc:02:57:15:7e:33:
c2:f0:7d:cb:2f:23:18:43:16:6a:72:a6:67:cb:b2:52:ee:f2:
0d:a2:96:5e:05:6e:a5:52:a7:66:69:73:da:24:54:ae:be:76:
6f:91:7a:57:96:12:3f:39:b4:0b:da:9d:e1:d7:c5:e2:93:8e:
ed:e8:e2:da:72:80:7f:c3:b5:ac:27:53:a3:93:cf:11:f8:bf:
e1:69:c6:db:08:94:0f:2d:3b:55:7b:9b:ad:fd:6d:e4:8a:82:
a6:db:43:06:4d:6b:13:9b:b7:46:7b:bb:aa:d5:ec:b3:d3:88:
27:be:25:ff:94:21:02:28:b9:de:26:a4:72:58:71:7f:9a:d3:
46:7a:0d:b2:b5:7f:82:b8:2c:77:e1:ec:bd:81:6c:fe:fe:7f:
4c:25:59:96:ee:97:f3:46:85:f0:87:c4:1f:be:11:74:2a:1d:
37:75:70:95:b6:ce:50:a4:a1:51:e2:ee:0b:4f:2c:c9:05:2f:
e7:8a:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:22:33 2026 by rpki-client