Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 6HAPT2+RjqgSzbdRBmT8sTgZsI+KNdCbapPs6E8QaZ4=
Subject key identifier: 49:56:5E:39:1A:87:37:4C:EA:02:01:EA:B4:48:2A:A9:EA:2E:9D:AF
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 01A0F832AC30C489F33DA45F758BF5338157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 05DB
Signing time: Thu 01 Oct 2026 16:01:05 +0000
Manifest this update: Thu 01 Oct 2026 16:01:05 +0000
Manifest next update: Fri 02 Oct 2026 16:01:05 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: Sokx2QUhq/JkISrHpmJO6Euvej0W7/pFt2uNLimYoZI=)
3: _bFSWkVNyyV-JG00IdO9DOc1tJQ.roa (hash: w+Qxdy9l318WPVe4tQ0sejDpt2qVThufOQLUi1qDqSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:ac:30:c4:89:f3:3d:a4:5f:75:8b:f5:33:81:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Oct 1 16:01:05 2026 GMT
Not After : Oct 2 16:01:05 2026 GMT
Subject: CN=49565e391a87374cea0201eab4482aa9ea2e9daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:de:56:fa:69:54:cb:ff:0f:cc:bd:0f:46:
0d:69:93:31:8b:52:8c:4c:23:50:6f:d5:f2:29:5d:
b0:a8:e9:55:cd:a6:68:2a:cc:84:fa:0e:6a:49:b7:
9c:ee:34:f7:44:de:2a:e1:73:89:f4:74:9d:97:29:
7f:6c:fa:9f:7e:2a:45:0c:e2:36:e5:95:69:94:44:
63:4c:38:76:d3:4f:53:d2:9d:0c:33:61:cd:20:72:
b3:5c:a1:26:78:55:8c:de:43:01:1f:ab:9e:e9:f1:
5e:87:76:81:99:c2:09:12:4e:33:8e:62:d5:a8:37:
b9:4f:55:34:91:0a:e6:b7:f6:b4:1c:7b:bd:24:b6:
85:38:6c:a6:7e:28:71:4f:51:e2:08:b2:aa:d0:a2:
c4:06:d3:40:cc:58:38:f3:23:18:07:83:76:4d:13:
1a:b8:99:6a:82:b3:2c:24:8c:d0:a1:fe:44:30:ca:
6a:56:f2:9b:d6:94:02:22:ca:91:45:8f:64:35:53:
db:bc:b9:4b:9b:01:d0:32:85:cf:fb:a6:b6:9d:8f:
1e:05:7e:02:99:df:5e:2c:2e:54:7d:96:6a:b4:4e:
d1:9c:6e:4e:41:b8:8c:7c:0f:3a:0b:c7:d6:50:c8:
26:ec:e3:49:86:76:df:d3:c8:5a:a5:75:12:4e:a2:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:5E:39:1A:87:37:4C:EA:02:01:EA:B4:48:2A:A9:EA:2E:9D:AF
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:8a:3e:bd:2c:1b:9b:a3:23:2e:5a:14:4f:7d:2b:09:bf:
29:a4:fa:91:1e:e7:83:f6:cd:0f:b6:2e:00:68:c0:32:8b:df:
bb:36:50:aa:c7:d7:d0:d2:1c:2c:f5:c8:03:e0:c6:e6:5f:cc:
7e:f8:56:d0:91:94:a5:7e:fd:14:f9:e5:c8:50:d9:cc:74:6e:
25:22:33:e0:4c:b4:69:8c:8f:30:b3:91:ce:7d:20:a7:9a:40:
1a:fb:14:35:51:95:c0:c6:ac:c3:8a:14:57:25:da:82:59:71:
60:8e:f7:dc:a0:35:27:a3:03:8d:c4:34:3c:5c:66:92:2f:1d:
d8:54:e3:4e:39:e7:75:34:a0:80:9b:5b:ae:67:b2:80:f9:b8:
71:a1:d4:3d:f3:6a:5c:22:91:fd:3c:c7:7f:ca:79:f8:f0:16:
27:12:42:c5:d5:9f:a2:e8:c1:16:e4:f5:11:9a:df:19:d7:d7:
56:e9:a1:8f:c3:d3:ee:6a:94:65:c9:ec:d2:b9:83:d3:2b:f5:
96:b9:8b:1a:6a:2a:f8:ac:ac:f0:e1:b2:ed:1b:b3:a5:cb:e6:
95:e3:f3:4d:3b:2f:9b:68:28:ef:9c:8b:a4:00:28:fc:45:0d:
56:cc:60:aa:42:78:03:9b:ac:f7:07:99:24:af:ee:78:b8:ca:
03:23:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:43:57 2026 by rpki-client