Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 2QeeAnq57payXN9znazRdCFwiyUOgkmgXIsYCil9sF8=
Subject key identifier: F7:70:7F:43:C4:1A:91:16:D0:E0:FB:B1:F4:D2:9C:CE:1E:B9:A1:61
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019F9090D4E1765E0A194B288F03225B90C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 05AE
Signing time: Thu 23 Jul 2026 20:00:38 +0000
Manifest this update: Thu 23 Jul 2026 20:00:38 +0000
Manifest next update: Fri 24 Jul 2026 20:00:38 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: +eUPqkdGtrVUEza/3uksEMD3/M0NuDHGpfMTT05INDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d4:e1:76:5e:0a:19:4b:28:8f:03:22:5b:90:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jul 23 20:00:38 2026 GMT
Not After : Jul 24 20:00:38 2026 GMT
Subject: CN=f7707f43c41a9116d0e0fbb1f4d29cce1eb9a161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:a4:61:7d:fd:91:22:3d:71:36:e2:f5:57:
4f:82:1a:27:40:9d:18:42:23:c8:9c:d6:1c:c4:bd:
76:4f:00:c3:a3:f1:fc:fd:72:12:f4:4a:e8:ff:25:
c3:fb:58:0a:dd:4d:97:67:03:60:f6:50:de:d4:67:
56:dc:03:66:f7:70:a3:59:d7:b2:92:3d:17:18:18:
b4:9a:fb:0b:22:5b:bc:4c:98:63:47:26:41:7b:a8:
80:46:d7:2e:29:cf:66:1b:0c:6e:14:1f:90:94:2d:
26:b7:14:3f:6e:a3:d5:75:94:dc:77:90:64:e5:62:
87:2e:8b:3c:5e:54:16:ce:2c:c9:45:bf:c5:87:e0:
58:09:4a:09:d3:fd:58:79:2b:e1:1d:5c:9f:26:99:
97:56:ce:65:bf:22:25:70:77:59:52:0c:2d:61:c5:
17:8e:17:e9:31:bc:36:41:87:da:f2:81:40:8b:0c:
51:92:12:a0:00:22:6a:84:65:5d:cd:6a:11:ae:51:
d0:15:84:d5:41:31:e3:8c:d7:79:d7:e8:04:97:03:
74:13:49:3c:f3:a7:77:e4:8f:8a:9a:a6:3b:f9:18:
f5:53:e9:12:8e:e0:b2:cb:e3:79:ff:10:e8:e6:88:
e7:46:23:f0:8f:aa:8f:3b:5c:41:68:a4:f9:5a:fa:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:7F:43:C4:1A:91:16:D0:E0:FB:B1:F4:D2:9C:CE:1E:B9:A1:61
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:7e:3b:c4:86:bb:13:ea:90:83:e2:77:53:70:76:a0:46:
06:f8:38:34:08:67:48:69:a5:5b:9e:50:07:8f:6a:98:4a:cd:
8b:c9:d9:a0:06:63:29:50:c1:42:68:47:9b:b2:97:63:95:60:
e4:59:97:2e:9d:9d:32:30:bc:32:80:2a:ef:c3:70:a8:fe:26:
ea:7c:81:83:1b:0f:73:ea:08:bc:5d:f6:c2:51:7e:c0:76:d0:
95:c3:af:40:2c:58:ef:ff:60:8b:f2:be:2d:54:6e:08:2b:cc:
c6:e6:90:6a:0c:cd:20:b1:42:54:e4:47:bf:c5:f8:31:39:a9:
52:11:7c:0b:18:da:12:51:d5:8f:51:0d:be:a7:c5:59:91:45:
0e:85:63:8c:e3:af:e6:ac:08:a6:8b:d4:b6:da:fb:18:d5:d1:
d8:68:2f:23:fc:6e:36:2b:67:da:8a:75:c4:6e:4e:e6:4f:a4:
c6:f3:f4:59:18:8e:14:24:95:de:19:9e:87:b3:36:90:7b:01:
10:8e:ef:7f:70:85:fc:16:90:cb:5d:8a:76:79:00:f4:43:3f:
f8:ee:34:5c:64:6a:8c:b6:1a:1f:88:0c:82:0e:7c:41:22:b3:
7f:a6:13:27:db:8c:40:24:38:8b:94:03:4a:ae:96:86:06:8c:
81:97:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:45 2026 by rpki-client