Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: Ql7gvmhZ766970KRhxCKNW5eYJQmlOuvDjRff5rOgB8=
Subject key identifier: B5:4B:F4:86:75:93:E1:5E:31:A1:32:2B:D2:F6:0D:13:4E:A3:23:1D
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019DB1A1BE4A010ED00C5A4B0C1BCEC72F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 0106
Signing time: Tue 21 Apr 2026 20:01:00 +0000
Manifest this update: Tue 21 Apr 2026 20:01:00 +0000
Manifest next update: Wed 22 Apr 2026 20:01:00 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: d6SYJp8WYA9EJ1KZ5U5Q5vy5+WDzVvJwuDHjS7nYkpE=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:be:4a:01:0e:d0:0c:5a:4b:0c:1b:ce:c7:2f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Apr 21 20:01:00 2026 GMT
Not After : Apr 22 20:01:00 2026 GMT
Subject: CN=b54bf4867593e15e31a1322bd2f60d134ea3231d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:2f:c9:bf:42:78:f1:d1:9a:20:80:72:29:
ff:4a:33:cc:0d:9a:8b:b3:45:55:73:e5:ef:be:86:
7e:6e:b0:a2:8d:96:6a:45:c8:55:4f:45:5d:c2:b2:
ae:80:7c:94:a5:a8:74:c0:55:6a:38:d2:75:d5:86:
8e:a8:9a:a6:b1:a7:ba:fd:f3:dc:50:6d:0c:d5:fe:
82:ba:c6:e6:40:95:95:40:9b:b7:e7:c0:1f:ef:d8:
2a:6d:17:d0:13:8b:e3:c6:a5:a1:10:fe:13:3e:a1:
98:d2:24:25:84:4b:95:95:78:27:5a:68:9e:7b:08:
1c:f0:9c:75:9c:65:a9:56:8e:d1:96:07:96:51:0e:
5d:54:cd:fa:24:f0:51:2c:ed:b4:8c:fc:9e:e0:99:
3b:cf:9d:01:3c:6d:29:e2:6b:04:94:75:1b:d5:fb:
55:15:44:e8:c2:c9:a0:6b:55:6e:87:40:06:18:04:
10:4b:99:f0:fe:8a:60:6f:fd:10:d6:38:74:57:b3:
41:16:07:0e:02:4f:67:e8:1f:59:1c:28:ce:02:95:
45:28:03:a1:85:69:bd:86:77:af:12:c3:81:40:d3:
cd:c7:ea:e3:96:8b:c6:23:90:e0:bb:4e:88:d8:94:
43:01:a0:88:05:1f:7b:ed:f7:2a:a5:28:57:eb:1a:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:F4:86:75:93:E1:5E:31:A1:32:2B:D2:F6:0D:13:4E:A3:23:1D
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:5a:1b:a0:03:4a:ae:59:d0:dc:ee:96:b7:f3:35:bc:89:
6a:7c:32:77:b1:bb:d9:4e:30:f1:fe:b7:30:5b:83:7e:11:82:
57:1f:c1:90:c0:9f:1c:cf:64:d9:85:83:55:8f:b2:01:1c:97:
14:79:b3:60:52:5f:83:5e:db:65:81:0c:16:5e:fa:62:d8:36:
db:83:78:56:1c:a6:b0:90:fa:fc:01:8d:26:cd:da:00:1c:e1:
e5:6f:94:95:d4:fe:ad:24:23:b6:41:64:1f:39:f7:9e:79:ba:
69:40:ab:37:12:a5:11:02:ab:30:f5:ca:f3:97:cf:91:92:49:
d5:db:c5:62:e2:38:78:18:c3:8d:a6:ff:37:df:ea:d4:67:30:
51:aa:b1:5f:a1:ee:bb:f7:28:40:00:b2:bf:03:7e:76:a0:6b:
18:de:cd:06:16:19:19:17:29:d1:b4:bf:a7:33:45:b5:ea:af:
6e:b1:2b:4d:81:1e:bf:51:42:98:95:38:ae:b7:91:68:a0:fb:
a2:41:b8:22:18:41:53:b7:89:f2:83:68:cd:73:61:d9:bf:42:
49:9d:69:23:82:0b:7e:e3:c2:d0:5a:70:04:4a:ae:b1:2a:d7:
77:37:a5:86:96:79:14:22:99:e1:65:ac:65:e8:80:ca:02:0b:
46:f0:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:41:02 2026 by rpki-client