Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: VJJKwt/HylaJ9uR9FK6PFoM2H+lX+OiJh5oTDJcg2e8=
Subject key identifier: E3:26:F7:31:79:99:E9:E5:81:1C:F7:D3:D2:10:EC:EB:E1:FC:A5:08
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019EC3DC8E299B6D676E6E7359D8056A326D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 0194
Signing time: Sun 14 Jun 2026 02:01:11 +0000
Manifest this update: Sun 14 Jun 2026 02:01:11 +0000
Manifest next update: Mon 15 Jun 2026 02:01:11 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: c6zCM2ADYXFZ+y2AOHnvmTRGHKIHkOCx1tLYr+aKGNU=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:8e:29:9b:6d:67:6e:6e:73:59:d8:05:6a:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Jun 14 02:01:11 2026 GMT
Not After : Jun 15 02:01:11 2026 GMT
Subject: CN=e326f7317999e9e5811cf7d3d210ecebe1fca508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:af:0c:de:5f:9e:68:60:87:f9:c5:09:ef:
95:a8:63:c3:a3:68:09:99:dc:15:3a:e9:89:2e:a7:
5a:ae:d9:a8:39:7f:e3:de:aa:f6:e8:aa:7e:84:f2:
a6:8b:d5:d1:5b:bb:37:9a:67:85:e8:a4:90:ff:70:
23:68:37:70:a2:c3:b5:bd:79:b9:3e:52:4a:47:bb:
45:1b:63:e9:93:f0:4b:e3:34:1f:ec:71:9a:37:27:
ee:3f:0e:2a:89:72:ce:a8:41:e4:c0:fd:ce:e9:45:
aa:10:74:4b:0f:c8:89:49:22:d0:3d:80:d2:c7:21:
1f:ca:0b:ff:b4:a1:2c:a3:9c:93:a3:bd:9d:de:38:
9c:10:ff:df:9c:e1:aa:9a:f0:91:6b:4b:d3:01:d6:
60:73:b9:44:2f:e9:ac:b9:ac:72:97:02:16:41:d2:
ae:a4:de:60:a5:b5:9c:19:97:d2:28:c4:b8:f3:72:
8f:e8:0a:76:a2:ce:33:45:d1:d0:75:5d:04:b7:49:
57:aa:ca:b7:c8:47:99:82:6f:04:04:73:48:e8:b1:
be:03:5f:bf:fb:36:be:21:b2:d8:08:7d:73:eb:92:
50:15:9b:8a:2a:b4:53:25:53:f4:a4:13:e0:b1:54:
52:92:7a:08:f4:a1:9a:72:ec:ca:b0:9f:45:65:95:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:F7:31:79:99:E9:E5:81:1C:F7:D3:D2:10:EC:EB:E1:FC:A5:08
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4a:b7:87:9f:32:f2:06:74:2d:78:b9:18:c9:b5:b4:dd:dc:
98:25:3c:66:5e:90:8e:91:46:04:93:1a:16:fc:1c:19:9b:cf:
0c:ff:bd:7b:ca:0f:29:d5:34:0d:c6:17:0d:43:a2:e0:a0:5d:
f2:1b:23:a6:48:0a:0f:bd:cc:5c:f6:69:3f:70:c9:b7:04:7b:
b4:41:62:29:05:ad:69:34:81:cb:28:1e:0b:46:72:7e:79:b8:
30:e0:67:dd:06:09:a5:f2:15:ba:51:f0:be:c0:e9:e8:9e:99:
31:90:88:43:ba:53:7b:ef:5b:8d:d6:6f:a1:9a:a3:1e:f1:d6:
99:3f:67:32:b4:1c:72:bc:5b:8f:3a:4d:11:d6:e4:e6:73:e6:
5b:67:45:4a:e2:2d:30:fd:b8:03:3f:85:55:24:a2:6e:7f:28:
28:ef:34:26:12:b9:c2:b9:c9:83:04:13:25:64:82:db:e1:f7:
cd:15:5f:02:7d:16:75:78:60:d1:f4:ae:91:02:c5:42:f0:4b:
43:f1:26:f5:68:b3:3a:f1:bd:27:d8:77:9b:21:56:ad:fd:c0:
43:a5:01:1d:97:bb:b5:35:c3:c5:68:3f:fb:04:9f:a2:cd:61:
29:ce:15:29:f8:9a:0a:8b:09:82:71:a4:82:ed:23:78:50:84:
1d:5e:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:12:47 2026 by rpki-client