Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: L3jvXups8eUSobayMfKwkgtGHPGKCGEBdc7ZbFkTJ7A=
Subject key identifier: BF:41:D3:14:01:73:68:6B:B9:1B:69:A2:88:4D:EF:F3:40:C9:52:A4
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019F965BF13984BAC97F4F91A4097DDBB55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 0201
Signing time: Fri 24 Jul 2026 23:00:35 +0000
Manifest this update: Fri 24 Jul 2026 23:00:35 +0000
Manifest next update: Sat 25 Jul 2026 23:00:35 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: YZFX13azLF+4eoryQxb0f41Hn9h0kHaIB7dXPPEn1S4=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:f1:39:84:ba:c9:7f:4f:91:a4:09:7d:db:b5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Jul 24 23:00:35 2026 GMT
Not After : Jul 25 23:00:35 2026 GMT
Subject: CN=bf41d3140173686bb91b69a2884deff340c952a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:79:ad:4b:af:3f:66:d4:5b:41:e4:e5:10:
e6:1f:53:7d:8e:f4:6c:b6:51:0f:1f:0c:c3:0a:48:
68:d6:01:4c:16:b2:ce:05:96:0e:65:55:ed:c6:d0:
c7:f2:ee:66:a0:1b:f6:59:28:e8:b4:5a:34:52:95:
ef:9f:36:f2:8a:46:60:06:4c:72:92:d9:57:8d:ac:
d5:87:28:56:9f:08:fe:0e:a3:e1:a6:41:94:3c:e4:
46:c8:a9:f9:11:1f:42:f0:29:59:6f:65:d1:bc:18:
ee:ff:b4:85:f4:b4:06:29:de:65:a2:81:0b:2f:ed:
d8:12:58:81:52:f8:c2:16:9e:36:cc:c1:c5:a8:c5:
3b:59:ba:98:89:46:36:d6:3c:91:f3:a2:94:9b:df:
3f:9e:3b:b0:60:54:af:de:80:a3:90:32:ae:4c:69:
25:ed:cf:44:f5:9a:8d:5b:61:e5:20:65:72:3e:f4:
4e:34:6c:94:f1:33:1d:b7:c1:17:76:3e:35:e9:87:
fd:ba:5b:7d:9f:bb:83:f2:ee:a2:45:d0:61:ff:65:
a8:01:0e:28:2d:3a:ae:5e:44:38:cb:f1:eb:18:84:
f4:1d:1e:91:ea:a7:76:48:16:2c:b4:75:88:ea:49:
6d:cd:83:d0:7b:29:8c:43:22:b8:9f:b7:97:f4:a3:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:41:D3:14:01:73:68:6B:B9:1B:69:A2:88:4D:EF:F3:40:C9:52:A4
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:28:e4:59:9e:ee:f5:a6:5a:d2:dc:ca:97:c5:07:70:ae:29:
6f:c3:f8:f6:c4:22:33:b6:4d:4a:9d:6c:08:99:12:ab:53:6d:
a9:4c:e9:4f:07:ad:79:c5:9c:04:7b:00:d6:20:32:e8:ba:95:
f2:fb:3a:8c:99:4a:3e:10:8b:ed:dd:93:0d:f0:f8:9d:d6:06:
88:99:a4:a0:0e:32:f4:d9:a7:10:ee:61:23:76:1b:ed:1d:d9:
12:74:59:67:4d:c3:e3:78:ca:e0:35:ef:d8:82:7a:e8:1f:88:
55:3d:e7:70:1d:f3:d9:2f:99:46:0c:0e:92:73:89:e2:45:ee:
f7:ea:73:5b:52:82:17:f2:8a:92:81:09:cb:89:d7:6c:97:61:
dd:76:99:75:b9:4a:2d:64:a4:ed:c7:0d:f4:81:82:75:83:6a:
e6:44:bb:2a:88:92:33:ac:2a:7b:e3:59:10:a2:d7:48:76:3e:
07:93:65:ec:47:ff:6b:76:b3:6b:4b:97:a1:84:eb:d4:84:bd:
cc:33:2a:5f:ec:82:02:9b:57:a9:0e:64:a9:f4:10:6e:21:ab:
ce:57:f2:cc:8b:11:c4:ea:8a:1f:75:17:f2:c9:97:54:d2:c2:
cb:8f:3b:e7:94:73:5b:0a:c3:22:30:31:b4:27:5b:7a:fc:3b:
7d:41:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:41:33 2026 by rpki-client