Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: cuGseZgh8JEVMkBtBJ2RwxpK9ZRDBQ7stonOVkoV0b8=
Subject key identifier: 6E:28:50:15:C2:2D:81:7D:69:1C:A3:BE:BC:1A:60:BD:B3:6D:01:D2
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019D9C63787BB6B9911B6B3CDE845F6E6782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: FB
Signing time: Fri 17 Apr 2026 17:00:57 +0000
Manifest this update: Fri 17 Apr 2026 17:00:57 +0000
Manifest next update: Sat 18 Apr 2026 17:00:57 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: aylQsIjt03S/9R5rvWFfrKhnZwEqB4qzgxvWaL3NLwU=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:78:7b:b6:b9:91:1b:6b:3c:de:84:5f:6e:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Apr 17 17:00:57 2026 GMT
Not After : Apr 18 17:00:57 2026 GMT
Subject: CN=6e285015c22d817d691ca3bebc1a60bdb36d01d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:0a:62:38:25:9f:62:4a:ee:cf:72:28:5e:
73:d1:7d:19:6e:4f:17:89:eb:49:44:c4:ee:0f:53:
e4:f5:c3:a8:9d:06:41:ba:d9:6d:d9:42:52:60:fa:
37:74:e2:26:54:4b:d4:5b:9e:23:5a:70:59:72:23:
25:7a:70:12:e3:79:ad:30:31:c3:a3:f5:96:2d:f5:
f7:3e:6c:3d:b3:c1:f5:f9:07:26:79:ed:d3:ff:d8:
f7:62:3f:44:7e:05:8c:60:77:ab:c3:16:20:3c:fe:
05:46:d8:a4:01:85:08:10:fa:f5:00:25:c0:dd:b5:
66:16:f3:78:da:1b:96:ec:31:88:2a:0e:1b:fb:26:
6b:2c:b0:42:f8:a2:5c:3b:9d:66:7d:4f:26:5c:6c:
bb:c5:88:9f:d6:79:83:f9:3d:8a:b2:6a:8c:13:b2:
04:78:fa:af:1e:9e:f0:71:62:39:8a:ab:8d:58:af:
2e:55:f6:8d:23:74:c7:9c:c2:98:53:f6:d5:6e:ad:
b4:a6:4d:1e:06:fa:32:11:50:1d:cd:9d:77:d8:f9:
cc:10:41:53:9c:31:9f:b5:0b:98:e8:61:af:2c:ec:
42:25:10:bd:7c:4a:7f:ce:6d:4e:7f:06:89:97:20:
6c:69:a9:45:e3:fe:dc:6d:1e:20:d3:82:47:6c:59:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:50:15:C2:2D:81:7D:69:1C:A3:BE:BC:1A:60:BD:B3:6D:01:D2
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:39:98:7d:b0:ba:d8:da:b1:91:24:2c:dd:83:4e:b0:97:4b:
c7:ca:74:85:52:22:9b:df:ec:3e:df:0f:9b:b4:0f:b3:a8:38:
e4:ce:34:6e:be:20:00:95:a2:86:e0:b8:41:01:2c:d5:11:af:
65:72:13:7b:5d:16:79:fb:2d:b8:3a:b8:dd:d9:25:6c:9c:29:
ad:da:64:3b:fd:06:31:49:c1:d6:2d:c9:b3:45:bc:f1:7c:42:
8e:c1:9c:3d:e7:10:e1:26:f2:ad:fb:b4:b2:52:8c:ac:34:85:
cc:2c:7a:10:07:00:f2:83:7f:aa:4b:6c:3d:e4:5b:0c:6f:a1:
b2:99:a2:67:8d:12:6a:b7:56:1c:4a:93:d9:23:a4:1d:af:7b:
f6:9c:bf:c9:e1:f6:7e:d8:c0:01:ea:58:05:cc:bf:f0:11:73:
58:ea:32:36:a1:3b:7b:67:78:be:7f:1d:f4:a7:d3:ce:c6:ce:
69:a6:eb:5f:55:54:8e:03:eb:4a:db:a2:39:7f:e1:d1:fe:e7:
ef:86:8e:0b:d9:86:84:12:2f:4e:a9:da:09:47:17:59:e7:1e:
9c:02:94:b9:6f:c0:8e:3d:0e:b0:e7:c8:ac:74:b6:42:f2:67:
2a:f8:95:71:87:57:cb:99:8a:8a:36:49:7b:64:b0:af:9c:85:
f0:2c:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:25:01 2026 by rpki-client