Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: KrZRH8sTs3JNPFV3kED3CF+hFS0HGSL+x0ESF8FYCqI=
Subject key identifier: 19:21:00:D9:2A:D3:DA:31:9C:6B:DA:6F:DB:F3:8C:C5:92:67:C5:B4
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 01A08A8CEC8CD78AD8FDB820A556818B68C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:26 +0000
Manifest this update: Thu 10 Sep 2026 09:01:26 +0000
Manifest next update: Fri 11 Sep 2026 09:01:26 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: Mz4of5goHCd968QTP1Xe9dUYN2ZSFee3Gw26X3G07Z0=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:ec:8c:d7:8a:d8:fd:b8:20:a5:56:81:8b:68:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Sep 10 09:01:26 2026 GMT
Not After : Sep 11 09:01:26 2026 GMT
Subject: CN=192100d92ad3da319c6bda6fdbf38cc59267c5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:43:a3:55:31:61:0f:f3:ba:88:e4:37:8a:
59:a3:e5:c0:92:0d:56:8f:2d:11:45:21:2f:5d:61:
3f:98:2c:8b:5f:fe:56:bd:bc:c9:ea:b7:c7:0e:f4:
ec:f1:92:17:01:a7:17:a2:25:59:c7:9d:79:51:c8:
72:e8:38:25:a2:31:ed:93:6f:bc:bc:64:d9:21:c7:
1d:49:79:86:ef:44:d1:1a:1b:77:1b:31:d3:81:d2:
d4:38:d7:f6:71:98:78:a0:a4:18:f0:8b:58:ec:03:
22:46:7c:3f:4d:8b:61:9f:51:5c:81:c9:31:2c:71:
67:8d:41:2c:a2:6b:38:37:da:27:98:82:42:04:ad:
ec:46:c3:a5:ed:a8:04:23:2c:7a:29:d8:3a:d4:17:
cc:66:48:ac:a3:df:5a:b2:0d:fd:08:f3:48:70:1a:
ed:12:de:e0:8d:ab:e9:5b:c2:3a:51:e1:46:ab:0b:
cf:44:db:b9:8e:b7:53:49:01:ed:ed:4f:68:bd:01:
8e:34:25:a2:a8:08:a6:1f:4e:4b:fd:39:c7:75:f0:
76:44:35:6a:3a:82:83:4e:63:87:ac:b1:cd:ba:78:
f4:5a:75:50:c3:16:a3:08:12:2c:b2:a5:e7:c7:fe:
9f:62:06:80:70:35:af:13:61:02:06:a4:63:4a:e2:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:21:00:D9:2A:D3:DA:31:9C:6B:DA:6F:DB:F3:8C:C5:92:67:C5:B4
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:25:58:bd:5c:bd:a7:c8:7f:d9:c2:4f:b2:6b:87:24:23:28:
bb:fe:d9:ca:b8:a1:33:c7:8b:94:a0:1b:63:46:48:97:f2:bb:
58:92:e2:4f:5d:c8:78:71:9f:96:5d:9b:c1:6c:73:39:af:45:
ce:63:1e:52:7c:0c:d5:8f:41:4c:15:5b:be:c5:7d:9b:93:2e:
a1:7d:b4:13:9b:78:80:4b:93:fb:a8:50:c6:76:45:23:33:f4:
02:17:68:f2:17:a0:13:b7:e8:40:e5:50:88:66:0f:b7:da:c7:
a6:99:c9:a4:a7:d5:07:90:dd:d2:ba:53:44:3c:ea:4b:8b:be:
92:01:a2:e2:3f:c3:ea:68:0c:a5:37:ee:0b:c7:93:3c:bc:d1:
65:48:69:2a:10:be:97:61:4a:9a:f4:85:f1:dd:e5:2f:7c:d9:
6a:f9:d3:2b:f8:aa:71:40:27:11:67:ba:8d:9a:cf:89:d3:0d:
a3:8d:a8:73:49:b4:ba:f1:8d:40:a5:96:14:a7:e2:25:de:30:
d6:79:0d:41:ed:82:b8:29:24:26:1e:d8:42:49:d5:8d:c6:ee:
27:5c:ac:79:0d:05:96:28:ee:e5:98:a2:82:75:0c:f2:52:e4:
da:28:6b:76:00:df:d2:5c:a8:f3:19:10:01:29:3d:0a:5f:42:
f1:53:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:04:24 2026 by rpki-client