Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: lB3YVuqSuQ//vqG+YRkbxUS0cRyYAJgla3PjL6gkCTM=
Subject key identifier: A2:8B:F7:81:96:AF:E7:37:BD:FF:D5:74:C3:14:7D:46:6F:21:52:5C
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 01A17FCFEC1EA14C9F00E2D7330F89C43F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:35 +0000
Manifest this update: Wed 28 Oct 2026 00:01:35 +0000
Manifest next update: Thu 29 Oct 2026 00:01:35 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: WiHZNAxsvXNezJyx+umEiVz846Gb21wUGghkoKpPvQc=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:ec:1e:a1:4c:9f:00:e2:d7:33:0f:89:c4:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Oct 28 00:01:35 2026 GMT
Not After : Oct 29 00:01:35 2026 GMT
Subject: CN=a28bf78196afe737bdffd574c3147d466f21525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:13:3d:18:1c:f2:7c:06:17:bf:9a:89:ff:
60:28:8a:6c:bf:8b:09:63:d3:e2:d9:28:ab:63:03:
18:8f:84:da:8e:30:a2:d4:c5:19:9d:67:3b:91:17:
82:9f:35:a9:75:8c:c1:25:cd:11:eb:68:5a:0e:8f:
c3:73:61:04:b8:e3:77:7b:e4:7a:78:63:5b:f6:39:
8f:f4:ad:bc:de:c2:df:48:60:d9:fd:79:c9:6e:a4:
a1:42:17:7a:44:d7:44:6e:c8:a3:30:83:4f:27:7a:
07:15:4a:bb:8f:f5:5f:54:06:c4:80:0e:00:0a:d9:
87:0b:e5:62:df:59:ea:99:dd:f7:bd:8b:60:a9:fc:
3d:c0:2f:d8:a1:a6:1c:4f:ad:1a:b4:6d:a4:62:32:
36:8f:38:d4:c2:4e:31:8b:1e:65:d4:57:a7:2c:1c:
d3:f2:66:32:41:78:09:51:90:b2:b8:f1:9b:ab:d4:
19:1e:14:66:92:5e:c8:b1:25:9c:a6:b0:ff:c4:7c:
ef:2c:1e:1d:20:0a:d7:f3:16:31:85:8a:88:51:1f:
d6:e9:04:fb:85:ca:c1:15:86:24:88:22:87:57:45:
ae:33:d4:8b:29:9a:a8:1e:1e:fe:58:65:5b:c6:16:
b0:e2:23:18:b3:0d:20:48:3e:9e:16:fa:9a:2a:16:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:F7:81:96:AF:E7:37:BD:FF:D5:74:C3:14:7D:46:6F:21:52:5C
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2d:b4:8d:74:06:8c:e1:fc:2f:fc:e3:b0:0f:93:2c:e7:89:
08:5e:a6:46:09:2f:11:cb:3e:e6:78:55:b8:f4:8f:65:e2:0d:
94:30:da:af:6e:3c:fc:fc:c7:e4:11:3b:68:d8:97:2f:60:b0:
50:2f:5b:24:1d:b3:ab:d1:eb:45:93:73:d8:73:73:eb:f2:99:
f6:ea:42:f1:de:a7:53:52:4f:b5:c6:9a:8b:92:62:f0:50:70:
13:40:26:25:ce:c8:83:c6:1c:fb:ef:89:97:f8:db:74:e6:80:
6e:9b:d9:5a:4d:78:07:50:ef:56:bc:86:11:a1:fb:45:9b:00:
41:2d:f3:ee:b9:a2:c0:55:97:3c:38:82:fd:c7:c6:43:99:ca:
a6:90:49:6d:41:2f:4f:a8:82:4f:c7:a2:7d:be:c3:85:89:72:
ff:fb:8c:82:b0:5f:6b:b6:53:9a:a1:e1:28:7c:61:ac:23:71:
fb:d6:42:bd:81:a5:82:93:d1:11:8c:54:8d:70:2b:dd:5d:01:
5b:7c:6c:e7:74:4c:76:4a:b4:3d:b4:41:d3:c9:26:f4:66:ed:
4a:1f:69:a7:06:65:7c:92:e8:10:2c:c2:e7:a7:a4:fc:95:42:
e3:ec:c1:a0:fb:1e:d0:94:3c:61:2f:e8:17:cf:36:73:71:c2:
6d:94:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:17 2026 by rpki-client