Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: uQAvTI2CTsNYdh/lohyiC80W6T0gwrUVtDsJNzgY5mw=
Subject key identifier: 44:20:1E:29:88:EB:27:4C:98:74:8D:83:DE:16:AC:E0:06:55:9B:FC
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019F92B604C29978E331D15B6EF7749C1C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 0521
Signing time: Fri 24 Jul 2026 06:00:30 +0000
Manifest this update: Fri 24 Jul 2026 06:00:30 +0000
Manifest next update: Sat 25 Jul 2026 06:00:30 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: t+VIZh//xajvlJIQF9a4p62VsIVqoFMlb+d3TqBVX28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:04:c2:99:78:e3:31:d1:5b:6e:f7:74:9c:1c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Jul 24 06:00:30 2026 GMT
Not After : Jul 25 06:00:30 2026 GMT
Subject: CN=44201e2988eb274c98748d83de16ace006559bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:d0:c2:5a:13:4d:3a:4e:04:a0:11:7e:60:
58:6e:09:97:97:09:79:bf:f6:cb:46:00:e3:b5:74:
52:53:cf:bc:bc:eb:72:0f:74:e1:42:22:6f:39:e6:
eb:61:92:43:3d:1e:11:4d:28:93:d8:35:78:e0:58:
70:89:47:21:0c:b2:be:d0:7d:3f:9d:9f:5f:a3:ee:
43:83:10:00:1c:7e:e4:c5:64:3a:4b:59:ec:7d:70:
cb:ff:94:11:70:52:d1:02:a7:41:f9:15:69:82:b5:
c9:4d:0f:a3:e3:9f:cb:70:cd:77:8d:b2:b2:36:24:
1d:aa:5e:fb:44:a1:6d:d3:a5:39:fa:62:7b:ef:ab:
a9:99:ad:61:ca:28:a4:d2:0e:1b:27:58:7d:77:64:
bf:91:ed:40:27:e4:89:c5:3e:56:38:a1:ef:d2:99:
98:1b:42:74:82:6b:24:80:f8:a5:2f:a5:49:16:33:
4d:df:da:35:5b:07:47:63:b4:0f:43:b4:87:64:e3:
fd:55:45:04:c1:cc:72:e7:9b:c1:2c:9f:c0:57:05:
c5:fa:5d:bb:0a:8c:b3:32:7c:04:c5:7d:03:bb:3f:
88:cd:a1:f9:2d:bb:c9:cc:37:7f:ad:81:c3:c5:1f:
72:fb:1e:88:bb:f4:46:ed:28:db:8b:14:ce:89:aa:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:1E:29:88:EB:27:4C:98:74:8D:83:DE:16:AC:E0:06:55:9B:FC
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:81:ba:e4:13:83:8e:c3:fb:5b:f7:b6:5f:dc:86:15:9f:
c3:73:04:d0:ed:82:ec:a9:1b:d1:60:8d:91:82:23:99:d3:3b:
59:b6:da:db:4b:20:7d:7f:3a:bd:99:a7:eb:21:06:da:52:6b:
7b:49:25:39:25:aa:fb:4a:14:9c:1a:7a:75:49:bd:6c:33:1d:
b0:74:af:28:aa:06:b7:ce:34:2a:90:d2:14:ed:4c:45:66:2c:
7d:7e:6b:18:f8:9e:1b:eb:af:6e:22:c9:9e:e2:ec:46:ca:40:
cf:23:09:50:52:ae:f0:f3:97:97:7c:00:0b:1b:83:a6:15:5f:
68:c8:df:b4:65:5f:53:1e:fb:e9:58:e3:da:ac:eb:5a:c7:36:
76:7c:5b:5a:2e:58:da:53:eb:02:0c:55:cd:fd:4c:9d:e8:fe:
5b:7e:9d:bf:a6:53:91:d3:db:ee:61:c0:39:1e:b6:c2:ad:4e:
16:c5:75:4e:fb:36:13:cb:b7:4c:88:19:42:8e:da:19:9a:c1:
fd:a2:37:a7:97:2e:ac:ce:57:32:5b:88:d0:10:38:f0:3e:45:
e2:6b:fa:db:f5:8d:81:06:23:08:c5:2a:db:7e:4e:6c:77:84:
71:c3:7f:15:c5:96:ff:b5:44:a5:9f:7b:b9:4f:18:32:d6:0b:
4f:30:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:51 2026 by rpki-client