Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: wjQqzC0qiuuoEUL8OXmBerVeMHew5OQKcdg0IKOUrsw=
Subject key identifier: 29:1B:2C:D5:E2:B5:89:84:C5:AD:48:B5:55:92:F3:AB:EF:38:28:68
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019D2695BA4A2020332094AA848F34DDCCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: BE
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: RX0r6sWX/bDpvertPrxOiE+jaA5hjbk4kuwIze9sfoI=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ba:4a:20:20:33:20:94:aa:84:8f:34:dd:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=291b2cd5e2b58984c5ad48b55592f3abef382868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:4b:0d:8f:01:f3:9c:39:7d:e9:3a:14:17:
d9:08:ef:e9:33:d9:a6:d8:08:0c:a2:29:c0:99:20:
05:5c:2b:cb:d1:de:18:9e:85:1f:0d:30:ec:60:0e:
1c:8e:93:50:b4:36:78:99:78:28:63:24:d9:24:02:
33:09:04:ec:86:8b:e0:64:0d:6d:67:13:94:03:ba:
38:bc:87:71:2a:ee:0e:88:09:86:90:ab:54:55:1c:
dd:06:13:15:28:1a:f7:c8:62:2f:ef:c9:66:01:27:
9a:e0:b2:a8:90:10:d6:cc:13:0d:8d:6e:b5:74:1b:
a8:20:6b:dc:52:41:59:96:08:63:d4:aa:51:30:4c:
72:1c:58:6a:1e:29:b2:63:71:97:c2:3f:db:35:c5:
a5:61:52:c1:c5:26:0c:4f:12:1a:3f:a2:02:f6:3c:
ab:d6:a2:f0:41:b0:ce:5f:d8:8c:c6:1e:22:92:94:
74:e8:df:cd:aa:83:0c:9f:8e:da:0c:bc:5b:42:da:
a2:07:c1:59:58:e1:cb:cf:59:ba:41:53:36:97:1b:
de:16:16:d8:c6:61:de:d6:b3:fc:52:75:9c:da:fd:
9b:08:a8:af:3c:f3:63:98:a7:e6:f2:e1:5c:0b:71:
f4:cd:59:68:8f:2a:3a:48:4e:69:4f:8b:36:e0:fe:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:2C:D5:E2:B5:89:84:C5:AD:48:B5:55:92:F3:AB:EF:38:28:68
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:60:43:cf:d3:7a:5f:fb:d6:ac:af:47:57:7b:b9:e8:00:3d:
e2:8e:c5:04:6c:12:dd:67:79:32:83:38:8c:e9:68:4b:95:13:
bb:84:41:16:c0:1b:a0:d6:c2:ec:fb:57:82:b2:e6:28:13:0a:
c8:92:2c:ee:18:19:8c:a7:24:a5:c1:c3:e5:46:f0:e0:99:ae:
1a:18:29:f0:5b:0b:8e:4f:a2:7a:c3:06:18:26:a8:f2:ea:14:
d6:df:06:a4:35:8f:0e:a8:a6:2a:14:28:2e:65:6a:35:6d:78:
c7:42:a1:e1:3e:bb:35:c9:41:22:89:8d:b2:ba:d0:85:53:85:
0c:78:ce:56:1f:c2:e1:83:b6:05:df:9d:1f:b6:6d:d1:d5:62:
cc:78:32:6a:e0:6c:f7:15:41:da:03:cc:3e:f8:2c:c1:06:42:
5c:24:d8:91:a2:22:3f:8a:9c:48:2f:f0:3d:5e:22:2c:df:d9:
27:f3:78:23:30:2d:bd:6c:a4:5e:32:b0:89:fd:63:8e:e5:c8:
d3:7d:0d:f8:e2:96:ea:3f:04:3b:9d:df:c7:6c:2a:bf:64:3d:
64:2e:43:5f:94:fc:18:12:12:40:9a:52:7a:2e:a4:df:bf:17:
85:cb:17:5b:e0:d3:01:fa:af:ce:75:e6:dc:10:b6:e2:87:eb:
9e:76:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:10 2026 by rpki-client