Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: FTv5QD0IkpLaqlZNj3KHewdR9EdUllaZZzNO+4rdU4c=
Subject key identifier: 06:02:44:80:51:8B:01:62:E7:7B:B2:FC:C6:BB:41:79:AF:7A:06:ED
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 01A0CF35FD4D8A4C74456ECAB2D3C2EC5EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0653
Signing time: Wed 23 Sep 2026 17:00:17 +0000
Manifest this update: Wed 23 Sep 2026 17:00:17 +0000
Manifest next update: Thu 24 Sep 2026 17:00:17 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: 1oyiykwaFZzhcOK5Uprrd42DyIDDUBgUshlk0dT6M7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:fd:4d:8a:4c:74:45:6e:ca:b2:d3:c2:ec:5e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Sep 23 17:00:17 2026 GMT
Not After : Sep 24 17:00:17 2026 GMT
Subject: CN=06024480518b0162e77bb2fcc6bb4179af7a06ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:c2:e7:b8:02:22:f0:ec:43:c1:93:4e:fe:
d1:0c:52:a2:ad:25:8e:26:39:e2:91:81:dd:54:c9:
86:7f:07:13:be:61:ad:cc:c0:e7:26:57:a1:07:ac:
81:b4:b3:5c:e7:1a:69:8b:af:72:7e:42:a0:03:a8:
3c:0c:1b:73:af:25:4d:ac:6e:6d:27:92:ad:c9:0b:
db:a4:8a:01:5d:e0:b7:6f:2c:cb:a7:ab:d1:ff:96:
82:5d:c6:a4:f3:22:25:db:0b:eb:32:08:15:f5:93:
ee:92:d0:ee:d3:0c:83:38:cd:82:c8:31:4e:3c:1a:
67:17:53:ca:b0:51:45:4c:f6:44:02:da:f8:56:d9:
64:d5:e8:1a:6c:c6:31:ab:ac:e7:51:bc:d3:95:32:
33:16:9b:02:80:07:90:a6:90:33:5c:f9:ed:a7:c9:
f5:bb:b5:6d:14:23:83:66:e2:ec:6e:4b:1e:16:b1:
85:5c:2b:c8:a2:10:33:1b:fd:d2:04:95:92:8f:86:
2e:5e:35:01:25:bb:a1:ac:7b:5c:48:53:80:ef:19:
2e:d8:76:19:66:0b:18:49:74:ac:76:1f:a1:e8:b2:
2d:9c:63:13:ca:91:2a:61:7a:e6:48:b1:3d:a3:ce:
e7:60:32:5b:b7:02:d6:8b:4b:00:6a:77:22:b2:52:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:44:80:51:8B:01:62:E7:7B:B2:FC:C6:BB:41:79:AF:7A:06:ED
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:26:8f:81:e3:80:eb:d9:dc:d1:17:21:89:ad:60:c8:28:ac:
26:23:44:3b:85:9e:34:56:ac:fa:25:72:ef:88:75:af:5a:e3:
74:2f:8b:8a:07:07:e4:70:f4:cf:9a:c1:87:48:ba:d9:c0:49:
ac:c9:c9:a9:7c:bc:fb:c6:12:b0:98:31:11:34:bd:13:dc:6b:
53:04:4c:83:77:7d:3d:b6:75:4c:45:45:7c:7a:4d:6e:c9:71:
94:08:36:21:fd:fe:5e:c9:14:5f:34:0c:86:38:f5:da:bd:23:
29:20:60:22:b8:a1:cb:7e:b1:cd:cf:0b:e6:8a:44:ee:8f:8c:
51:37:ba:5e:73:bc:88:8e:33:d4:fe:4f:89:58:a6:74:fe:50:
4c:4e:47:85:73:5c:03:50:25:0c:ff:f3:89:d1:72:9c:03:65:
9e:69:11:3a:5c:2b:9b:de:9b:3f:43:1c:58:c3:84:9f:da:a4:
97:f8:74:18:e9:32:89:54:6c:f5:6b:6c:d4:b8:db:cf:97:de:
33:36:2a:e4:04:38:1e:0e:ee:23:d3:b5:5b:a3:78:9c:ff:04:
6b:75:c8:99:b4:7f:a8:d3:cc:97:c3:50:dd:75:11:86:8c:04:
8a:5b:80:40:00:3e:bc:06:1b:d6:e1:84:58:ec:43:45:7b:a9:
88:21:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:34:07 2026 by rpki-client