Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: ijXKsXDbv5+jkl3HIfc80yNFP0ZOdHUzMw8eJAFokLc=
Subject key identifier: C7:B1:20:2D:E1:CD:80:AD:0D:E7:90:D3:60:CA:1C:F9:B8:EC:87:1E
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019E1DC6F17DE7C57C8AF1D56456FFDD7D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 04EE
Signing time: Tue 12 May 2026 20:00:37 +0000
Manifest this update: Tue 12 May 2026 20:00:37 +0000
Manifest next update: Wed 13 May 2026 20:00:37 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: M7N15OxgTDx9thBt46iu7PEdCX5ApKD0WAJJ1ibY55U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:f1:7d:e7:c5:7c:8a:f1:d5:64:56:ff:dd:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: May 12 20:00:37 2026 GMT
Not After : May 13 20:00:37 2026 GMT
Subject: CN=c7b1202de1cd80ad0de790d360ca1cf9b8ec871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:28:d9:68:d7:9c:92:ce:a2:63:6a:76:b9:
19:94:78:50:ae:d3:22:94:05:00:5a:4c:c3:a3:fa:
85:84:0e:3e:86:6c:8c:e2:50:c5:c8:d8:ec:1d:82:
6b:dd:e1:fe:4f:e2:fd:43:bf:59:f3:70:63:0c:51:
a7:c3:08:dc:16:0d:cc:3d:0b:9f:32:40:da:6a:e0:
d6:9a:4d:ae:b0:5a:05:27:e9:8c:11:29:3e:f6:78:
c9:b1:d1:44:62:21:18:d1:90:6d:45:86:3b:c7:24:
e9:f4:5d:c1:b1:e5:41:34:32:db:d7:e0:43:e4:43:
a0:ae:c4:28:e5:04:4a:8b:38:af:6c:12:82:b5:ff:
3d:97:1d:f5:7c:68:a1:88:e1:66:7f:d8:ac:0e:7a:
8f:aa:89:af:c2:3e:08:be:1b:f6:99:bb:6c:0e:e8:
60:88:d2:38:bd:de:36:9d:eb:65:71:ec:1d:45:33:
e7:88:d4:10:9f:af:fd:59:00:07:2f:fd:b0:c0:0a:
c2:a2:83:bd:49:47:7c:c6:ce:8e:72:d7:21:46:94:
05:52:8a:b7:79:04:97:78:ff:65:b7:84:fd:5a:f7:
b1:bb:f0:3a:b2:7b:59:82:3e:af:81:e5:27:7d:14:
3d:b6:53:d3:2b:bd:c3:0f:4f:c3:90:11:10:98:bc:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B1:20:2D:E1:CD:80:AD:0D:E7:90:D3:60:CA:1C:F9:B8:EC:87:1E
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:1d:d3:1f:ab:a8:e0:b6:b2:c4:a2:72:8c:3e:69:0b:b8:
91:ae:63:b7:55:f1:16:c2:e9:4f:6b:9a:6b:8e:27:eb:b5:f3:
53:c9:d3:f0:a6:e8:46:5e:e3:9f:10:0c:ee:ed:6e:25:1f:c2:
3e:c3:0d:c1:86:00:2f:0b:1c:bb:69:80:d2:8b:80:e0:63:55:
ea:64:77:c1:f3:5d:7c:c7:98:f5:e3:28:b9:2b:66:09:7f:73:
47:e7:5b:00:30:04:e2:a5:0a:d7:84:bf:bd:8e:02:0c:67:8c:
7b:90:b4:d9:c6:da:aa:18:88:0b:35:e8:d9:11:a8:27:d9:4c:
c1:2d:15:45:97:01:06:d1:7f:82:15:1b:ad:97:21:c5:53:9b:
25:bd:7d:d7:c4:ae:19:00:47:ca:42:46:81:4e:70:d0:21:07:
68:f2:f1:df:44:f6:a9:4a:09:2c:f3:37:89:7a:f9:e5:a1:5a:
d8:0a:9f:41:e0:41:63:72:0c:e0:04:e7:e4:f9:a3:4b:bd:87:
bd:29:68:03:69:8a:0e:4c:6d:74:13:5a:e5:e5:07:a5:40:03:
6c:6b:92:22:62:5e:ce:b8:d9:f9:4b:26:13:8d:06:22:b5:bb:
93:9c:91:82:bd:d9:1d:0d:9b:2e:4e:a4:ca:db:ad:5e:c6:ec:
13:45:3e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxvF958V8ivHVZFb/3X0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjUyOWE2MDkwMDU4MzRkYzEwYjViODAwZmU1MzEwYzU4
Y2M0N2UwHhcNMjYwNTEyMjAwMDM3WhcNMjYwNTEzMjAwMDM3WjAzMTEwLwYDVQQD
EyhjN2IxMjAyZGUxY2Q4MGFkMGRlNzkwZDM2MGNhMWNmOWI4ZWM4NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kso2WjXnJLOomNqdrkZlHhQrtMi
lAUAWkzDo/qFhA4+hmyM4lDFyNjsHYJr3eH+T+L9Q79Z83BjDFGnwwjcFg3MPQuf
MkDaauDWmk2usFoFJ+mMESk+9njJsdFEYiEY0ZBtRYY7xyTp9F3BseVBNDLb1+BD
5EOgrsQo5QRKizivbBKCtf89lx31fGihiOFmf9isDnqPqomvwj4Ivhv2mbtsDuhg
iNI4vd42netlcewdRTPniNQQn6/9WQAHL/2wwArCooO9SUd8xs6OctchRpQFUoq3
eQSXeP9lt4T9Wvexu/A6sntZgj6vgeUnfRQ9tlPTK73DD0/DkBEQmLzQbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMexIC3hzYCtDeeQ02DKHPm47IceMB8GA1UdIwQY
MBaAFDQlKaYJAFg03BC1uAD+UxDFjMR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMt
Y2FlYjFjMjgwOWE4LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jM2U2ZGYtMDgxNS00ZDMzLWIwOGMtY2FlYjFjMjgwOWE4
LzEvTkNVcHBna0FXRFRjRUxXNEFQNVRFTVdNeEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBUd0x+r
qOC2ssSicow+aQu4ka5jt1XxFsLpT2uaa44n67XzU8nT8KboRl7jnxAM7u1uJR/C
PsMNwYYALwscu2mA0ouA4GNV6mR3wfNdfMeY9eMouStmCX9zR+dbADAE4qUK14S/
vY4CDGeMe5C02cbaqhiICzXo2RGoJ9lMwS0VRZcBBtF/ghUbrZchxVObJb1918Su
GQBHykJGgU5w0CEHaPLx30T2qUoJLPM3iXr55aFa2AqfQeBBY3IM4ATn5PmjS72H
vSloA2mKDkxtdBNa5eUHpUADbGuSImJezrjZ+UsmE40GIrW7k5yRgr3ZHQ2bLk6k
ytutXsbsE0U+QQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:12:15 2026 by rpki-client