Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: 9goCBeW5yYiYRbrdG+BqJ9x2VUJElTfcNCDGvaezCnA=
Subject key identifier: 23:F6:4D:9C:71:55:D4:87:7B:A9:0B:45:03:C1:85:07:8E:05:36:78
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019CAED9CF912B0D59B169964ED5D56D74D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 80
Signing time: Mon 02 Mar 2026 14:00:35 +0000
Manifest this update: Mon 02 Mar 2026 14:00:35 +0000
Manifest next update: Tue 03 Mar 2026 14:00:35 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: SEceElockFjDtKMLgUmZ3wZYJ3UprqA/PvLuSoWTPNY=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:cf:91:2b:0d:59:b1:69:96:4e:d5:d5:6d:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Mar 2 14:00:35 2026 GMT
Not After : Mar 3 14:00:35 2026 GMT
Subject: CN=23f64d9c7155d4877ba90b4503c185078e053678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:17:81:93:82:0f:c8:91:a0:1d:da:98:37:0e:
c1:39:4f:64:0c:b0:07:5f:75:8d:16:61:5e:39:e1:
7e:34:73:69:ee:6f:fb:4c:24:e2:e3:98:07:df:5b:
90:8d:42:d1:17:cc:4e:5e:63:63:77:d9:90:39:a9:
89:44:a3:ad:0c:89:37:08:e7:19:a9:31:16:29:50:
90:ed:59:f4:8c:31:03:50:13:d1:74:c6:17:b9:c8:
a6:2f:5a:72:f8:43:60:ca:50:37:db:d9:ca:e1:12:
02:0f:9c:b2:2a:7d:0f:03:2c:ce:e5:c3:cf:86:a4:
ae:cf:02:ee:43:07:c2:73:4c:3b:2a:d1:d6:75:39:
ac:8d:71:2b:b0:36:e0:3f:13:2f:cf:59:f2:e0:24:
61:9e:d6:be:d2:b2:16:64:64:aa:dd:4c:db:fb:b4:
26:3b:3f:5d:7d:f6:61:11:8a:da:7a:1f:a7:42:70:
a8:c6:03:6f:89:ed:5e:9a:af:6a:48:05:1d:2f:2d:
8d:18:40:0a:85:33:8a:ec:85:8e:00:a2:1d:af:35:
2e:e4:67:36:9f:8c:4c:d6:37:56:67:31:f0:bd:82:
51:d4:ce:31:68:5f:8b:7c:d1:3a:89:82:9e:43:2f:
d2:95:2b:aa:96:d9:a0:c6:89:1e:78:b2:da:cb:ae:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:4D:9C:71:55:D4:87:7B:A9:0B:45:03:C1:85:07:8E:05:36:78
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:59:61:4a:74:64:31:69:1a:f8:52:cf:7f:aa:51:15:8a:fc:
7d:62:a1:b0:f2:3b:64:34:e9:1b:3f:81:54:9b:0e:d3:ed:4a:
33:68:30:47:9f:7e:96:c3:c2:17:91:12:c0:dd:05:3c:13:0e:
34:b2:9e:fb:33:f9:d9:db:2e:e6:b1:da:66:a0:8f:f1:44:b2:
2a:b7:3d:4b:71:54:6b:7c:a4:8e:e6:e8:f8:5e:e0:ae:f9:de:
bf:4b:04:ef:bd:42:be:99:c0:a8:1f:7a:8a:0a:3b:32:78:f9:
6b:56:fe:bc:c2:e6:32:47:6a:50:1d:b0:7f:c8:98:1a:ee:76:
6d:a4:3c:27:2b:d9:e7:0d:91:5d:09:5e:5c:71:a4:fe:07:6b:
e7:e1:04:0a:03:30:f2:61:2f:fb:3d:82:9c:cb:21:9c:14:22:
64:8b:71:cb:6e:9d:5b:54:1a:db:ee:42:9d:02:2e:bb:99:7e:
84:ef:8a:08:8f:e8:ac:ec:eb:62:e3:c5:9a:8d:76:5e:a1:f9:
c6:8b:a3:fb:e3:7d:04:55:e7:53:8c:a1:1d:67:5b:74:7b:59:
82:c7:3d:93:5c:15:31:c8:ba:3a:67:d2:75:18:6a:0a:a2:9c:
5e:59:19:71:6a:9f:b6:87:a6:da:04:b2:7b:b9:df:de:c0:cd:
dc:ee:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:25:07 2026 by rpki-client