Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
File: NCaXqC8hT41Snij1tQA9K7ojbIY.mft (raw, json)
Hash identifier: GLuO0qlsH7udRrJmGxZRbSQd3vXRWwk8DXf3AI3WsOg=
Subject key identifier: 19:44:0C:C1:9E:64:05:8B:CC:14:65:DB:2F:36:3C:03:A2:44:35:B3
Authority key identifier: 34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
Certificate issuer: /CN=342697a82f214f8d529e28f5b5003d2bba236c86
Certificate serial: 019F84FA98E6A137E58FA7EFF2E4A0D3EED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
Manifest number: 01F8
Signing time: Tue 21 Jul 2026 14:00:43 +0000
Manifest this update: Tue 21 Jul 2026 14:00:43 +0000
Manifest next update: Wed 22 Jul 2026 14:00:43 +0000
Files and hashes: 1: NCaXqC8hT41Snij1tQA9K7ojbIY.crl (hash: hNBYWesHRqnDnCr7cBDqrpf9ZXjWt59HnmzCweCmOWo=)
2: wac8HuFAOI-SfZPjuMnpfnmiLcw.roa (hash: Gbt5Dg2xQXxutS7Oid+1a/Q1oM3HHS7hgE1kaFGg12o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:98:e6:a1:37:e5:8f:a7:ef:f2:e4:a0:d3:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342697a82f214f8d529e28f5b5003d2bba236c86
Validity
Not Before: Jul 21 14:00:43 2026 GMT
Not After : Jul 22 14:00:43 2026 GMT
Subject: CN=19440cc19e64058bcc1465db2f363c03a24435b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:cd:ed:bd:5f:e9:d7:e2:5e:05:d5:ad:0d:
42:09:49:ab:f6:b7:f7:4e:21:23:0a:90:db:7b:82:
d8:a9:29:cc:bb:52:6d:67:9d:3f:6b:2e:bb:89:5e:
a9:c1:ae:25:6a:ae:72:eb:29:b5:54:1d:0e:62:8c:
12:a2:b5:ee:72:d5:78:c6:5f:5c:ea:9c:cd:e0:18:
8a:cf:c4:7c:e1:da:d3:47:d2:e8:d3:a2:0e:32:62:
f5:57:0e:ba:fd:55:a8:83:bc:88:65:fa:90:3b:65:
ff:3a:b2:5a:29:ca:4b:1d:33:b6:64:45:f0:cf:a7:
10:7e:1b:58:6e:7b:c3:7a:17:1b:22:a5:86:90:9a:
38:e3:6c:c1:d2:3c:7b:b0:77:0a:f4:0d:d1:39:00:
51:0d:43:b5:3b:ec:62:db:21:7d:35:b6:a9:25:a2:
e7:b4:49:55:1a:6a:e0:6e:23:dd:eb:60:fa:a4:77:
7f:11:95:1c:32:0d:8c:79:23:42:42:c4:25:a8:dd:
55:49:33:82:d3:58:1f:64:32:09:07:65:69:09:70:
c0:61:1d:c0:d1:f8:9c:92:01:9d:87:5f:e3:05:15:
11:77:d0:94:1b:1f:61:c9:15:7a:0c:f0:75:55:e2:
82:95:8a:5c:8d:c2:d2:05:49:8a:b8:34:35:96:3a:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:44:0C:C1:9E:64:05:8B:CC:14:65:DB:2F:36:3C:03:A2:44:35:B3
X509v3 Authority Key Identifier:
keyid:34:26:97:A8:2F:21:4F:8D:52:9E:28:F5:B5:00:3D:2B:BA:23:6C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCaXqC8hT41Snij1tQA9K7ojbIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c758ac-f591-4689-98f9-79046f90c542/1/NCaXqC8hT41Snij1tQA9K7ojbIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cc:23:4d:72:8e:6b:98:5f:5c:08:27:7a:0a:7b:aa:5a:89:
18:aa:2a:39:de:10:3e:3f:da:13:f3:8c:60:67:12:25:c1:dc:
64:7d:14:c4:52:78:84:3d:0f:84:d4:68:b2:72:bb:95:a2:78:
45:a4:d0:10:2b:d3:29:58:b3:41:6e:ec:63:26:8e:07:0a:df:
39:32:d5:46:ac:bd:a4:dd:de:28:bb:cd:8e:01:a5:f0:27:02:
69:dc:b9:1f:eb:7b:2d:54:8c:b6:b2:5a:5a:41:08:8b:76:ff:
af:3c:dc:4e:83:3c:b4:4a:2c:0b:7a:79:bc:20:a2:b4:e5:9b:
e5:91:3c:91:09:2c:15:e3:a1:ff:01:04:fd:b8:a6:fd:bf:50:
69:2a:8e:18:c8:16:7f:46:b9:b2:5f:01:73:04:a8:a3:42:58:
17:9d:0c:ab:8f:72:87:d1:02:82:19:9f:18:c3:63:ea:a8:7c:
15:77:e4:e7:40:ef:00:9b:79:2a:93:04:0a:31:0f:d0:ee:43:
a3:14:50:fb:bb:f9:04:88:fb:0f:32:6b:a4:1e:f9:42:84:69:
53:6a:b5:7a:c8:21:da:09:c7:d4:01:09:6e:c8:9a:c0:2d:12:
f2:79:78:3b:50:79:02:50:d8:fd:ef:a9:ae:0a:f2:7f:9f:c2:
2d:40:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:24 2026 by rpki-client