Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: Xf71FCmzhX6LNEF5kFbtkN9MENPdn8yYmeUeBz9GWEw=
Subject key identifier: 09:33:66:99:A1:1C:51:2C:11:9A:F1:F0:BD:13:65:29:4F:99:F6:68
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 01A0E92E39CBF17E85A1AAC8E1B83B222B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:55 +0000
Manifest this update: Mon 28 Sep 2026 18:01:55 +0000
Manifest next update: Tue 29 Sep 2026 18:01:55 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: ObPdzbHCMareOemrXPR18y+d+mhBrDKl+bkzjXbP2ss=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:39:cb:f1:7e:85:a1:aa:c8:e1:b8:3b:22:2b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Sep 28 18:01:55 2026 GMT
Not After : Sep 29 18:01:55 2026 GMT
Subject: CN=09336699a11c512c119af1f0bd1365294f99f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:66:35:84:62:50:1f:4f:4c:c3:2e:d4:20:
7e:b3:d1:b8:9b:70:f9:78:19:62:91:09:10:34:df:
36:21:ef:64:18:9a:df:83:35:32:3d:bf:8c:78:31:
a5:d9:cc:25:9d:99:62:6a:fb:f7:4a:58:23:a4:9f:
97:13:ab:8c:34:de:e4:38:aa:cd:58:68:9f:f7:87:
9a:ff:1a:e6:27:6e:18:38:ce:08:14:ab:a4:c5:6e:
5f:2c:ee:9d:97:82:a1:9f:93:c2:38:ee:b6:f3:20:
4c:ec:95:84:1f:33:6f:9a:f5:05:51:97:8a:62:db:
ef:ca:e7:79:66:a1:e1:cf:7c:72:ed:30:ca:e5:55:
d7:49:ab:6e:4c:dc:b6:ad:65:28:c2:41:50:62:f5:
9f:30:16:ef:12:36:b8:77:55:96:79:2f:ee:de:35:
45:09:40:bc:7c:c7:4b:6b:51:08:14:fe:97:59:e2:
74:d7:73:e9:2a:24:05:e0:e4:8c:17:b2:fb:55:90:
1a:ae:df:b5:71:a5:bb:46:3a:e7:33:97:d3:b4:31:
c4:f2:8f:c4:eb:6a:4e:a0:60:d6:50:eb:1a:9d:bd:
73:3e:b7:96:31:a9:9e:d4:53:1a:35:71:81:ef:64:
5d:e7:e6:1f:06:79:b0:2c:7e:58:be:52:6b:81:76:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:33:66:99:A1:1C:51:2C:11:9A:F1:F0:BD:13:65:29:4F:99:F6:68
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:05:01:f8:6b:71:04:bc:3a:cd:6e:36:6e:f6:d8:a7:6f:20:
17:0d:7c:73:62:3d:b9:74:01:e6:5e:c7:2a:b7:20:53:63:59:
1d:42:de:7e:b9:6e:40:26:70:23:e6:55:9a:8e:77:92:a6:4e:
14:73:de:40:ab:e1:94:7d:c3:2a:89:74:c9:10:ea:4f:db:af:
3c:08:fa:3d:11:29:ce:e8:6a:89:08:38:15:f5:fe:54:92:96:
2b:a6:47:f0:e8:b6:c8:6d:47:fa:8a:3e:e7:e2:23:c0:a7:64:
2b:49:50:74:76:9d:42:9b:92:d0:9a:df:e4:7a:1b:e6:3f:72:
10:4d:7a:f3:84:ec:f3:1f:88:c9:e6:af:5e:84:9c:1b:19:72:
8f:80:55:80:7b:bb:46:f8:b8:a7:8e:8a:dc:95:41:58:90:cb:
e3:db:a5:01:61:fb:24:5d:4f:89:d8:ab:df:68:c6:1d:1b:3f:
ec:35:6e:59:5c:2a:b1:98:48:59:2c:b3:f5:bf:32:a3:50:bb:
14:ab:30:4c:f0:62:c5:c3:f0:73:cf:20:09:1c:d5:c8:f6:c3:
7b:76:e3:4d:75:0e:e1:48:d3:f0:38:4f:a4:d0:06:08:3d:09:
b4:d9:3e:2e:e9:61:e1:1e:ad:d7:65:a0:97:70:e2:aa:e1:fc:
2e:bd:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:46:26 2026 by rpki-client