Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: pbJkSOiKjfMlhY2XiyFu4O7BS/9BzTa5xdF7Wz0N/jU=
Subject key identifier: 01:EA:A6:02:0D:34:AD:37:1A:5F:F8:5F:C3:8B:39:2F:57:5D:2A:B4
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019E1DFE959365DB744DB507776F618A1449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 0460
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: /AFJGAm86fzELVxS7WZgCAcEGmaVllGurXPkCVDer5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:95:93:65:db:74:4d:b5:07:77:6f:61:8a:14:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=01eaa6020d34ad371a5ff85fc38b392f575d2ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:94:43:7e:23:fd:e0:9c:54:0c:6e:8c:10:
92:61:e1:25:02:6b:b9:bb:c3:5d:5c:b6:fc:96:cb:
a6:7b:1a:58:e4:bd:c5:cc:e1:59:61:08:e3:74:92:
93:75:42:50:f7:75:ce:5b:38:5b:75:6f:69:ee:22:
0a:c2:96:05:05:b0:84:1a:9a:90:27:df:a7:6a:c8:
de:ed:d9:0d:d4:69:2b:e2:31:59:b6:44:91:78:51:
10:ca:6b:45:d8:88:0b:92:a8:c9:1e:49:29:1d:f0:
98:62:e4:c8:b7:aa:60:ee:0d:d1:2d:e0:c5:d4:5b:
95:0c:1b:5c:21:c8:07:65:ee:e0:e5:ba:50:ae:79:
9e:96:b7:5d:ca:d3:47:bd:d0:c6:c9:ec:24:75:fd:
97:58:3d:37:38:bd:64:99:fa:56:0e:3d:6b:db:8e:
01:2a:94:37:f6:8a:49:25:f3:e2:6f:31:d1:42:38:
3d:06:a7:fe:57:cf:67:79:87:a7:08:f8:30:d2:d7:
01:30:4b:bd:67:ea:57:fa:18:d1:fd:ba:50:68:12:
78:bd:58:4e:99:a8:b3:30:ab:f7:b2:92:98:f2:cb:
c5:2e:3b:19:10:56:e1:9a:9c:a2:e6:e1:fe:6d:b4:
0d:31:6a:af:35:9b:d5:52:05:6e:f4:45:63:2a:47:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:A6:02:0D:34:AD:37:1A:5F:F8:5F:C3:8B:39:2F:57:5D:2A:B4
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:b8:a1:0a:87:dd:79:30:51:64:e8:85:38:07:ab:17:5e:
dd:60:53:9b:96:ac:ea:b0:83:b8:59:c9:6c:2e:1b:a8:fd:1e:
24:56:47:c8:5b:2e:cb:0a:03:e1:84:a7:5b:18:f9:50:bd:4f:
16:14:5b:e7:1f:1b:3f:68:a3:34:69:90:03:fb:19:6d:66:6f:
0c:3e:5a:4d:f9:eb:86:99:19:ae:5f:19:b4:19:f1:9f:03:24:
f4:14:84:80:1b:69:d9:14:9f:2f:00:c5:d0:ec:f4:1a:8d:47:
b3:bd:97:2c:54:ec:23:af:2d:a2:53:d1:78:b7:7d:36:a8:6a:
2c:bd:62:c8:25:ce:66:e2:3f:b6:de:1d:ca:3f:69:1b:13:82:
5c:56:0f:25:a0:3e:f6:f7:31:ea:63:89:31:d2:1f:00:c3:82:
be:74:fc:b5:d1:09:5a:a9:fd:13:3c:21:de:f2:84:ea:fb:2b:
fd:55:c9:d4:64:62:40:43:6f:e2:ac:cd:0f:ba:b3:4a:8f:73:
cb:e5:d6:99:32:f7:9e:37:09:96:d1:db:b3:13:4c:44:0e:7d:
7a:f1:95:17:9e:1c:47:46:6e:ea:70:e8:7f:aa:48:3e:16:6c:
c3:88:ba:61:06:96:ef:1d:0e:3e:43:27:43:84:ba:3f:c4:da:
67:a0:68:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/pWTZdt0TbUHd29hihRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw
ZjNlZDYwHhcNMjYwNTEyMjEwMTI0WhcNMjYwNTEzMjEwMTI0WjAzMTEwLwYDVQQD
EygwMWVhYTYwMjBkMzRhZDM3MWE1ZmY4NWZjMzhiMzkyZjU3NWQyYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkKUQ34j/eCcVAxujBCSYeElAmu5
u8NdXLb8lsumexpY5L3FzOFZYQjjdJKTdUJQ93XOWzhbdW9p7iIKwpYFBbCEGpqQ
J9+nasje7dkN1Gkr4jFZtkSReFEQymtF2IgLkqjJHkkpHfCYYuTIt6pg7g3RLeDF
1FuVDBtcIcgHZe7g5bpQrnmelrddytNHvdDGyewkdf2XWD03OL1kmfpWDj1r244B
KpQ39opJJfPibzHRQjg9Bqf+V89neYenCPgw0tcBMEu9Z+pX+hjR/bpQaBJ4vVhO
maizMKv3spKY8svFLjsZEFbhmpyi5uH+bbQNMWqvNZvVUgVu9EVjKkeMZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHqpgINNK03Gl/4X8OLOS9XXSq0MB8GA1UdIwQY
MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt
ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy
LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQiC4oQqH
3XkwUWTohTgHqxde3WBTm5as6rCDuFnJbC4bqP0eJFZHyFsuywoD4YSnWxj5UL1P
FhRb5x8bP2ijNGmQA/sZbWZvDD5aTfnrhpkZrl8ZtBnxnwMk9BSEgBtp2RSfLwDF
0Oz0Go1Hs72XLFTsI68tolPReLd9NqhqLL1iyCXOZuI/tt4dyj9pGxOCXFYPJaA+
9vcx6mOJMdIfAMOCvnT8tdEJWqn9Ezwh3vKE6vsr/VXJ1GRiQENv4qzND7qzSo9z
y+XWmTL3njcJltHbsxNMRA59evGVF54cR0Zu6nDof6pIPhZsw4i6YQaW7x0OPkMn
Q4S6P8TaZ6BoFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:08:10 2026 by rpki-client