Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: l8eVOsdJj5pjanPQYI6XaOvHF8fgTKBpyCZ8MnFsqqQ=
Subject key identifier: 6D:80:8C:A0:A2:C1:68:B4:F1:52:4A:10:D9:2D:B2:E3:D4:C1:FF:F8
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 01A13590BCF33218B0160C45AE0C2A2EE1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 02D8
Signing time: Tue 13 Oct 2026 14:00:40 +0000
Manifest this update: Tue 13 Oct 2026 14:00:40 +0000
Manifest next update: Wed 14 Oct 2026 14:00:40 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: vSZR9StMmZKBoGtIqBMJ9BnZnxJXFwzyHZJLIKcF/eI=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:bc:f3:32:18:b0:16:0c:45:ae:0c:2a:2e:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Oct 13 14:00:40 2026 GMT
Not After : Oct 14 14:00:40 2026 GMT
Subject: CN=6d808ca0a2c168b4f1524a10d92db2e3d4c1fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:83:68:75:53:b1:4b:80:3b:10:98:77:9d:
63:fd:3b:ce:d1:a3:50:b0:b3:41:95:51:a1:bd:a2:
08:c7:49:6a:7c:ed:6c:4c:d8:d4:33:f1:79:21:d3:
82:83:f0:25:a6:2d:3c:73:ef:09:45:92:2a:bf:57:
ca:60:eb:08:e3:db:cf:d4:09:34:f3:70:44:ab:63:
fe:91:23:68:c0:79:65:60:28:b8:35:9e:aa:0e:67:
3a:db:27:7d:e0:0c:8a:01:ff:3b:38:25:40:bb:e0:
20:d2:7d:e6:4c:dd:86:3a:33:91:fe:06:c3:03:b5:
dc:14:93:75:fa:20:0a:95:b5:e3:43:bc:10:51:96:
31:82:4b:aa:f2:1b:5b:1f:65:6b:02:84:b2:86:df:
ea:56:b2:e0:b9:af:f9:04:6e:68:05:f0:54:f5:dd:
85:ab:cb:c5:a6:01:fe:59:28:6b:75:be:f0:ab:73:
e5:26:08:57:09:fe:96:9f:3a:47:30:76:8e:32:e7:
27:86:d4:0d:1a:64:92:d7:33:cf:e0:dc:0f:9c:87:
a2:a5:36:73:54:94:3b:29:26:07:a0:23:00:68:3a:
10:a9:e8:fd:f3:a2:69:df:12:ea:91:4d:25:ba:12:
06:39:a6:02:c5:f0:26:3b:85:13:72:f7:60:84:f1:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:8C:A0:A2:C1:68:B4:F1:52:4A:10:D9:2D:B2:E3:D4:C1:FF:F8
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:eb:06:f6:e7:ce:7c:aa:7d:16:48:07:b2:2a:34:66:39:4a:
63:fa:80:65:63:4a:30:74:91:a2:be:04:dc:6c:37:9c:1b:db:
24:45:bf:57:b9:da:e9:78:ed:6c:51:99:83:6e:f5:3b:67:cc:
05:7e:c3:c0:eb:3f:67:1d:b9:92:38:e0:ae:e4:d1:04:dc:42:
a6:87:af:e9:cf:95:12:9d:d1:28:df:b7:55:97:3f:32:31:c5:
05:ac:c5:68:cb:b7:6a:cd:cd:34:3c:fe:31:a9:66:be:07:3d:
57:d1:2c:db:2f:a7:d0:ea:84:c4:36:f5:f8:b2:3f:c0:67:0e:
b5:51:07:64:e9:f0:ba:ff:06:69:43:2f:8a:85:bd:36:d3:7e:
d5:6d:ba:01:7a:6f:5b:a8:3d:c2:18:36:a4:54:f4:64:59:a9:
52:68:b0:00:2a:c8:3d:fd:fa:7a:8d:65:fd:30:1e:4d:34:77:
c6:14:b8:a1:7d:61:25:e4:54:20:9a:e4:36:62:b8:1b:63:9d:
2c:07:54:40:b1:1d:6a:6d:b0:52:dc:e8:4b:ac:d4:0f:2a:45:
1c:43:fc:d9:9a:c2:fb:2e:1d:9e:a2:63:2d:b5:99:43:9f:ef:
60:91:18:d9:f3:a0:39:26:87:06:c6:64:ce:7a:7a:5d:73:22:
84:77:97:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kLzzMhiwFgxFrgwqLuHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjY5N2E4MmYyMTRmOGQ1MjllMjhmNWI1MDAzZDJiYmEy
MzZjODYwHhcNMjYxMDEzMTQwMDQwWhcNMjYxMDE0MTQwMDQwWjAzMTEwLwYDVQQD
Eyg2ZDgwOGNhMGEyYzE2OGI0ZjE1MjRhMTBkOTJkYjJlM2Q0YzFmZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMKDaHVTsUuAOxCYd51j/TvO0aNQ
sLNBlVGhvaIIx0lqfO1sTNjUM/F5IdOCg/Alpi08c+8JRZIqv1fKYOsI49vP1Ak0
83BEq2P+kSNowHllYCi4NZ6qDmc62yd94AyKAf87OCVAu+Ag0n3mTN2GOjOR/gbD
A7XcFJN1+iAKlbXjQ7wQUZYxgkuq8htbH2VrAoSyht/qVrLgua/5BG5oBfBU9d2F
q8vFpgH+WShrdb7wq3PlJghXCf6WnzpHMHaOMucnhtQNGmSS1zPP4NwPnIeipTZz
VJQ7KSYHoCMAaDoQqej986Jp3xLqkU0luhIGOaYCxfAmO4UTcvdghPG/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2AjKCiwWi08VJKENktsuPUwf/4MB8GA1UdIwQY
MBaAFDQml6gvIU+NUp4o9bUAPSu6I2yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNzU4YWMtZjU5MS00Njg5LTk4Zjkt
NzkwNDZmOTBjNTQyLzEvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNzU4YWMtZjU5MS00Njg5LTk4ZjktNzkwNDZmOTBjNTQy
LzEvTkNhWHFDOGhUNDFTbmlqMXRRQTlLN29qYklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsusG9ufO
fKp9FkgHsio0ZjlKY/qAZWNKMHSRor4E3Gw3nBvbJEW/V7na6XjtbFGZg271O2fM
BX7DwOs/Zx25kjjgruTRBNxCpoev6c+VEp3RKN+3VZc/MjHFBazFaMu3as3NNDz+
Malmvgc9V9Es2y+n0OqExDb1+LI/wGcOtVEHZOnwuv8GaUMvioW9NtN+1W26AXpv
W6g9whg2pFT0ZFmpUmiwACrIPf36eo1l/TAeTTR3xhS4oX1hJeRUIJrkNmK4G2Od
LAdUQLEdam2wUtzoS6zUDypFHEP82ZrC+y4dnqJjLbWZQ5/vYJEY2fOgOSaHBsZk
znp6XXMihHeX7A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:47:11 2026 by rpki-client