Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: pyidJAojenzo9twndVoPUzk6vulgjiLMw4E1cwaREUQ=
Subject key identifier: D8:85:8C:D4:95:D8:44:1A:33:48:97:58:5B:1F:C9:67:02:BC:76:33
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 019F916CD7C40F9F897925BD8CD51408CCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:57 +0000
Manifest this update: Fri 24 Jul 2026 00:00:57 +0000
Manifest next update: Sat 25 Jul 2026 00:00:57 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: +paaSXhMLJVvWBvGaYrSi3m8S1pLFy0AaqjhOmd0rLA=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d7:c4:0f:9f:89:79:25:bd:8c:d5:14:08:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Jul 24 00:00:57 2026 GMT
Not After : Jul 25 00:00:57 2026 GMT
Subject: CN=d8858cd495d8441a334897585b1fc96702bc7633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:11:e7:f4:61:34:5e:5c:9f:b2:2b:42:83:
45:46:39:21:15:7d:f5:de:82:0f:5f:8e:ec:aa:9c:
41:3c:34:74:2f:13:e8:b0:3d:6d:b2:77:5c:8c:4e:
51:6b:90:66:8f:d0:ce:6a:7c:e6:e3:94:f9:35:af:
50:2e:2d:1f:b6:ad:71:bb:52:7b:dd:43:d9:40:05:
75:c9:7e:be:52:7f:d6:5b:85:8b:88:65:26:7b:b7:
f4:11:a5:dd:9c:f9:ca:a6:3d:5a:8e:07:40:72:67:
8b:4d:1b:7b:a9:14:cb:eb:a8:d4:97:39:d5:ad:c5:
d1:a1:23:02:3b:1e:fd:09:ac:d7:62:bb:20:8d:83:
89:76:65:22:55:82:53:70:1e:cf:28:05:eb:7a:6c:
1d:ce:62:32:37:ce:3f:9e:77:9e:96:c0:13:34:fa:
fb:63:b6:fa:af:47:8c:8f:0b:ce:88:25:b4:62:9c:
86:5d:b6:b7:7b:f3:c5:54:d5:68:c6:88:03:6e:5a:
da:18:56:84:30:32:5a:c7:6c:00:a0:d1:6b:41:af:
ae:ee:96:53:ff:3e:cb:a5:50:e5:b0:81:b0:b1:85:
a2:bd:7c:ec:49:70:84:c1:b5:9b:d9:f1:3d:eb:3b:
f6:9f:8a:dc:4b:80:3e:90:f1:a0:4b:7a:14:b3:bc:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:8C:D4:95:D8:44:1A:33:48:97:58:5B:1F:C9:67:02:BC:76:33
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f2:9c:7a:e0:b4:7e:d6:dc:95:e3:04:80:6a:d0:d1:23:5b:
b9:b3:cd:35:5d:40:34:cd:6e:21:df:68:32:c9:07:2d:2e:0c:
83:d7:ee:57:bd:97:84:e3:5b:48:74:3b:7a:fe:14:75:64:6f:
fe:c4:09:96:ba:1a:48:1e:30:34:4f:a6:03:7c:44:e7:d3:d5:
a9:e6:62:c5:2f:74:21:03:a3:a8:3c:8a:de:33:99:01:71:54:
f7:be:a6:c7:34:de:25:da:b3:67:0e:7c:7e:57:8e:45:81:68:
cb:a3:1b:a6:2f:43:3e:ab:92:d9:b2:12:8d:11:d5:b2:af:5a:
07:4a:e8:06:93:10:02:9d:eb:80:d1:e2:56:ae:bb:62:c7:83:
59:47:e0:d0:f2:0e:11:11:17:2c:b9:b8:8d:34:91:6f:a8:5e:
6a:50:d0:6e:5e:ef:00:29:96:b5:8a:ad:3e:e3:37:4a:69:e1:
d7:52:ca:5b:dc:8c:1b:f7:05:87:3f:78:88:b2:5e:87:45:be:
c0:0b:c6:ba:be:33:b9:1b:ad:ec:20:80:1b:4b:4b:6d:06:9c:
b5:75:fc:b6:88:cf:a8:3a:45:6b:d5:23:f4:d5:12:79:d4:dd:
4c:10:8b:9b:f5:47:52:42:ef:16:73:d2:9b:8d:99:8b:f2:36:
f8:d2:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:04 2026 by rpki-client