Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: YDeuP5KcE4z93C3pY9MB8Jq6Qc8dSAQBE91KWpFPYRE=
Subject key identifier: 1C:48:E8:3B:CB:7F:5F:E5:33:D5:C2:83:BE:D7:73:96:EB:75:6B:FC
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 01A13F38F6BE29D75C0AA528463917391FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 02DD
Signing time: Thu 15 Oct 2026 11:00:59 +0000
Manifest this update: Thu 15 Oct 2026 11:00:59 +0000
Manifest next update: Fri 16 Oct 2026 11:00:59 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: +A357pNyopr/Ndh9ZL1dUGwv+DpaWXeC6uWVaO/h9uA=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:38:f6:be:29:d7:5c:0a:a5:28:46:39:17:39:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Oct 15 11:00:59 2026 GMT
Not After : Oct 16 11:00:59 2026 GMT
Subject: CN=1c48e83bcb7f5fe533d5c283bed77396eb756bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:13:cc:ab:08:5d:2e:6f:09:44:dc:85:f6:
a3:39:5a:ab:98:63:21:c4:e6:8b:9d:40:6e:59:e8:
82:0f:2f:9c:81:c0:e6:ee:f5:55:0e:b2:ae:6c:22:
cb:b7:0a:cf:e8:d4:1a:c5:3c:8b:01:23:a7:1b:89:
db:f3:58:af:fc:06:75:94:8b:99:06:ad:ef:61:f2:
24:06:87:bf:6d:56:ed:16:a1:39:59:c2:3a:7a:3e:
9f:13:5b:5e:06:0d:a7:4c:e3:66:b5:fe:9a:62:2f:
e1:2d:52:bb:db:34:2f:89:a4:2e:a9:30:50:53:0f:
47:96:f6:25:a9:0b:92:57:4c:48:95:b6:de:6b:50:
9c:cf:54:d5:95:f4:33:81:49:e8:74:0f:df:07:4b:
e5:b3:af:10:0a:d2:57:4f:39:00:0d:ef:84:5b:05:
ef:bd:01:a8:0c:b3:a4:67:bf:79:a2:22:c6:8e:6a:
0d:7d:9c:08:de:5d:6b:5e:f2:7d:20:f9:bd:49:dd:
8a:40:ea:e7:1b:2a:db:16:ce:b2:5d:65:22:1e:f2:
68:bc:7c:46:62:9b:45:fa:5b:d3:2e:74:5d:39:db:
bc:ba:65:da:ab:d0:24:c0:e6:3e:f1:fc:20:d2:39:
8a:eb:95:2c:e2:c7:d9:e4:6b:57:0c:d6:18:2d:6a:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:E8:3B:CB:7F:5F:E5:33:D5:C2:83:BE:D7:73:96:EB:75:6B:FC
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d1:4d:df:b0:12:48:a7:46:75:52:71:25:22:51:30:87:bc:
f4:6f:11:76:2a:1b:64:8d:b3:a1:ed:af:31:1c:ee:53:ad:b2:
02:b3:41:a9:55:36:91:89:1a:5b:6a:a5:07:ab:dd:ac:ab:a7:
ea:5b:f4:4b:c0:7a:e6:51:6a:77:1e:6d:1b:ee:2f:1a:4c:76:
d8:4e:1d:c1:8a:14:ac:4c:31:60:19:ee:42:97:92:4d:53:a5:
fb:7e:d3:50:4e:1f:b3:4d:bb:d1:1b:d9:53:7f:1f:99:01:ee:
08:8a:12:3c:be:75:74:cd:6e:03:1f:1f:13:3b:97:b1:54:6b:
25:76:c6:35:d3:1e:a0:51:ec:97:f3:71:93:23:d5:7f:86:eb:
40:5a:ba:d2:86:3b:37:b4:f2:4c:ad:47:34:9d:43:85:7c:d6:
e2:15:d0:46:6f:1c:b5:22:3d:0b:f8:ad:1e:4c:e5:7c:aa:64:
66:ac:a0:1b:71:fa:d0:84:3f:9c:81:4e:bd:2e:5e:cf:12:a6:
88:8b:59:b7:52:e2:34:1c:c9:69:3a:30:27:21:11:52:b5:d4:
9c:52:fa:28:e4:38:59:ed:68:be:57:9b:9f:be:34:d7:ef:60:
7f:0e:47:34:29:44:da:98:5d:7e:9b:50:ac:17:bc:8b:09:11:
f2:a3:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:29:57 2026 by rpki-client