Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: 6nCpWeWWSG+V1xqENWpXTr7CHdwoRKMnJydNaJJdB/M=
Subject key identifier: 3D:0D:C2:E7:14:2C:65:07:FF:03:16:C6:D9:20:44:92:AC:C1:4E:2F
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019CC6069D7E3332BBF2F52948A0A3E68586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 8C
Signing time: Sat 07 Mar 2026 02:00:47 +0000
Manifest this update: Sat 07 Mar 2026 02:00:47 +0000
Manifest next update: Sun 08 Mar 2026 02:00:47 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: s3ZgQu76g1CrvZN5PF4i7qeQOHVGb0XJheOxUEWGv7A=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:06:9d:7e:33:32:bb:f2:f5:29:48:a0:a3:e6:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Mar 7 02:00:47 2026 GMT
Not After : Mar 8 02:00:47 2026 GMT
Subject: CN=3d0dc2e7142c6507ff0316c6d9204492acc14e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:3b:c0:39:b3:84:4d:40:76:e7:8b:46:93:
f8:9b:49:12:c4:ec:4d:6e:09:9f:24:50:22:86:4e:
9f:df:a6:cd:46:ec:b9:c5:7c:a2:d9:4d:e7:70:f1:
af:3e:04:5e:ce:52:4c:22:de:de:1a:26:01:3a:07:
ab:91:91:b8:f6:0a:9b:94:a2:b0:d3:63:9d:13:ae:
d5:d3:39:4a:11:d0:7d:63:bf:33:7a:29:d3:28:72:
66:9e:79:f5:0d:b8:d4:c2:76:c6:54:8d:ae:3e:4c:
27:89:1c:89:5d:30:df:eb:8a:57:30:00:eb:4f:fe:
3e:61:f7:43:a7:b3:09:0b:06:a7:c8:9a:3f:b3:50:
cc:47:d1:a5:c5:63:71:bc:3d:41:4d:f3:e6:87:f1:
06:47:4c:e0:b7:20:e3:f0:85:29:5e:a9:e7:b0:52:
a3:9f:80:67:6c:31:11:88:f5:45:e0:81:ef:fc:3b:
89:05:2c:74:b5:97:d6:88:18:39:12:1a:c5:84:9c:
f3:6b:b8:74:f3:f7:81:6e:dd:5e:7f:54:17:b7:53:
9f:d1:f4:98:a1:89:1e:a6:46:fc:7e:9a:91:17:93:
64:b4:fb:de:72:31:7e:c7:45:80:42:c6:c8:d2:63:
56:61:68:3e:8f:6d:4f:3e:a9:d3:ec:32:7f:12:ea:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:C2:E7:14:2C:65:07:FF:03:16:C6:D9:20:44:92:AC:C1:4E:2F
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ed:54:6e:7b:93:1f:2b:7a:46:b5:a8:f6:8c:fc:7a:c4:0f:
03:85:9c:a8:32:5b:75:a3:c0:5a:b1:2c:7d:f9:65:24:70:a1:
3c:2f:2c:b4:82:23:19:1a:cd:30:c8:97:7a:a1:79:66:18:06:
66:fb:d7:0d:f5:12:e1:6a:f7:e9:76:95:d4:1c:b4:77:2c:88:
e8:ef:03:40:6d:58:19:03:1d:3c:5b:03:e1:8d:91:9f:55:35:
f2:d8:b9:b1:6f:c9:ca:16:31:39:29:8a:7f:13:44:0b:1b:91:
41:87:9a:41:35:93:17:38:28:7e:7b:6c:7e:26:af:83:25:ff:
0d:40:e5:36:a6:7e:8c:6c:9e:5b:92:1f:ea:1a:f2:ae:cf:c3:
ac:a0:ed:5d:b8:fe:ab:db:75:f4:ca:2f:14:b6:20:df:54:39:
67:a0:bc:65:86:1d:26:a2:b7:98:51:73:c9:6c:91:c7:2a:5a:
3b:fd:31:4c:e7:08:8b:69:c8:45:28:40:51:57:fa:f0:f5:84:
9e:35:6a:b8:2d:93:f4:51:86:b0:e6:7f:56:c3:c8:60:2c:3c:
34:7d:f7:0b:a6:38:62:ec:17:62:d5:51:64:da:21:e7:73:dd:
a2:67:eb:a8:23:e5:b5:05:20:70:5d:f4:2c:29:65:fc:cb:86:
69:e7:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:50:04 2026 by rpki-client