Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: pC5upIkCK7R/wJlGdPHbqRvKnGoHwgmEpzxdogxN+Vw=
Subject key identifier: B9:28:6A:D6:23:24:88:5A:4E:38:B2:0C:62:B5:91:BF:0E:CA:E1:49
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019E21A3C33666EB2F6D2C5807D97A1F1EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 0140
Signing time: Wed 13 May 2026 14:00:40 +0000
Manifest this update: Wed 13 May 2026 14:00:40 +0000
Manifest next update: Thu 14 May 2026 14:00:40 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: OAPF2Cw1xYxYDEAO75Fxs9iIaVyKA7z3bdmTQoMvuYk=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:c3:36:66:eb:2f:6d:2c:58:07:d9:7a:1f:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: May 13 14:00:40 2026 GMT
Not After : May 14 14:00:40 2026 GMT
Subject: CN=b9286ad62324885a4e38b20c62b591bf0ecae149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:a3:d4:15:cd:31:f0:56:36:e6:79:84:3c:
bb:3a:e1:3e:f9:f7:fa:11:f3:b7:ea:e8:36:47:e3:
5b:bb:01:68:53:ac:15:33:93:c9:38:5f:30:16:24:
ca:8b:10:de:b9:2d:62:73:db:6e:9f:2b:56:76:67:
cd:bb:35:41:b8:41:df:97:f9:63:92:14:39:20:df:
d3:3f:a9:62:03:db:69:18:3d:4f:bc:c1:9c:43:94:
27:74:d8:f7:40:07:8e:a8:e9:13:60:96:7b:7b:79:
b2:c7:99:19:16:10:fb:ee:11:bd:04:aa:e1:14:c0:
0a:c3:df:b2:94:ab:c0:b2:d6:b7:b1:0a:df:c8:73:
73:0e:17:94:cc:f9:56:0e:86:74:13:f8:dd:7b:c8:
36:76:3f:b4:be:ee:b7:de:76:33:79:af:8e:54:02:
de:99:d4:25:0c:db:15:3f:ec:e4:af:d0:54:b9:72:
e8:cb:33:41:d6:c5:99:a7:e6:34:3e:2b:41:bb:de:
c9:00:f6:86:75:36:b3:33:2e:0e:57:e5:5b:79:e8:
c7:bc:ba:e5:16:7f:f9:77:f9:10:49:9b:18:fb:f1:
d2:2f:ef:fe:36:d3:de:22:d2:62:6b:d3:6a:9c:bb:
df:4a:a0:b1:87:c4:80:3d:98:88:69:d6:bf:85:4f:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:6A:D6:23:24:88:5A:4E:38:B2:0C:62:B5:91:BF:0E:CA:E1:49
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:75:a1:ce:90:b7:3b:f1:0b:49:77:d4:89:97:6c:8e:4e:
28:45:dc:4c:8d:60:e7:08:05:05:3b:db:d5:32:03:23:99:11:
a1:15:80:53:99:ca:51:72:9b:34:e7:ac:4c:41:0e:39:7c:96:
b0:62:aa:c3:ce:34:ac:4e:ab:3f:67:4b:28:81:f7:d0:fe:ba:
8c:0a:a4:65:ea:aa:1b:b0:4b:e1:a0:7e:86:37:23:ad:f2:bd:
0e:fd:18:aa:87:95:eb:e5:5e:12:02:2c:08:8d:08:2c:8a:f9:
5e:f8:12:49:d3:f9:14:00:21:2d:9d:ab:2f:67:44:6b:a1:b4:
6a:6f:73:f4:55:f8:45:a4:95:2b:3e:19:fc:c2:8a:26:7f:57:
62:f3:1b:b2:97:79:9f:c1:91:7e:07:d2:32:f6:53:64:6b:1d:
d9:16:ce:95:dc:d4:e9:eb:86:3e:2c:fc:30:79:87:b2:1e:25:
9b:46:5f:f0:2e:60:fa:c9:05:13:3e:98:79:ae:b0:f1:b2:20:
4f:46:e3:cf:74:98:6b:83:79:03:1a:bd:c1:29:27:b6:1a:ec:
70:7f:f3:e9:a8:ae:ab:2e:29:d6:ba:ab:a1:42:c3:d4:70:47:
c9:44:59:6f:34:bf:28:db:f0:bd:3d:b0:54:5b:64:b3:6b:66:
d2:8f:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:40:29 2026 by rpki-client