Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: /GKhRxs7/VGesJusbtJ/EqROtNlJNN9qXDa6et8FGxk=
Subject key identifier: 49:0C:14:9C:38:0B:7A:FB:96:6B:69:0F:DA:77:8F:B6:55:21:9B:3E
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019EC035E4D40B518FF8492B22FCF9A64ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 04B4
Signing time: Sat 13 Jun 2026 09:00:17 +0000
Manifest this update: Sat 13 Jun 2026 09:00:17 +0000
Manifest next update: Sun 14 Jun 2026 09:00:17 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: U8SrkuBt/Qzc5/oRBYZkCiFehcPx8n19Vo2JTkEAY9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:e4:d4:0b:51:8f:f8:49:2b:22:fc:f9:a6:4e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Jun 13 09:00:17 2026 GMT
Not After : Jun 14 09:00:17 2026 GMT
Subject: CN=490c149c380b7afb966b690fda778fb655219b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:06:82:36:ec:06:0f:7d:5e:22:42:49:9a:
7a:57:7f:02:0e:dc:e2:8c:aa:39:0b:ec:15:0a:cc:
3c:c0:da:3b:23:8f:fb:3d:98:55:2b:ae:d2:34:cf:
e0:fd:50:20:13:f1:4c:bd:e9:4c:37:19:d7:ed:f0:
d4:60:25:15:db:f4:18:dd:88:a2:19:90:95:3b:63:
f2:b2:4c:8e:7e:fe:9a:98:9c:d8:19:5a:78:5f:49:
e4:e0:69:3b:c4:62:4b:17:0a:4e:16:68:52:20:9a:
2a:8a:2a:a9:29:70:2a:67:80:7f:5b:c8:42:92:66:
fa:56:3d:4f:69:91:ad:2e:54:70:fc:c5:54:50:eb:
cc:d8:a8:9b:2b:80:81:4d:04:79:9a:c4:59:32:9d:
a4:8d:79:4f:41:92:17:d1:c6:12:86:44:f8:18:63:
80:05:89:f7:10:4e:43:7e:73:1b:e2:e3:76:a5:17:
c7:fd:26:89:58:59:7e:cc:95:31:f3:e9:ea:8a:f7:
15:b1:bf:06:5d:75:62:7d:74:76:3d:5d:9e:75:6a:
fd:12:0f:30:be:3a:8c:82:06:02:53:d2:b6:7c:df:
b1:80:4c:12:33:5c:67:a5:10:91:9b:b6:92:a8:3b:
1e:71:a2:da:e3:7a:7b:74:c5:d6:45:47:27:bc:d1:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:14:9C:38:0B:7A:FB:96:6B:69:0F:DA:77:8F:B6:55:21:9B:3E
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:a9:90:6a:6f:89:3a:0a:1e:26:7b:d2:54:7a:f6:82:60:
dc:7d:42:ab:fd:3c:00:dd:0f:7e:10:91:7e:ac:61:2e:d6:05:
fd:39:e8:05:cf:09:4f:24:00:44:d1:42:a7:df:65:cd:89:ee:
f6:40:67:84:d8:87:84:b6:39:90:61:9d:c8:26:11:69:ba:b2:
23:a0:0d:7a:8e:26:18:31:b3:19:d5:3a:c1:50:93:ef:bd:67:
2e:9e:27:b3:3d:d6:98:21:75:da:86:1a:2d:1b:f0:6f:ba:8e:
87:8f:ef:bd:36:87:7e:46:18:b9:19:ef:6d:81:2e:f5:8a:74:
6a:f7:d8:1b:21:31:21:36:2e:47:80:d4:69:b2:42:89:74:23:
71:1d:53:17:ad:af:47:2a:28:72:94:1b:2a:3a:62:25:5e:02:
53:e9:7d:c5:d5:d6:c5:4a:b6:01:19:a8:e6:f7:ec:e4:df:5e:
50:99:33:e1:09:ed:ae:a2:62:c6:31:4e:8b:3b:05:ad:6a:b3:
16:b3:fc:c0:6e:7a:40:14:fe:dd:76:f8:24:c1:0e:1a:ae:a4:
3d:40:4e:7d:52:a5:dd:31:ff:8b:e3:b4:88:46:4d:0e:83:c0:
a1:b3:b5:bf:bc:dd:58:81:06:62:e8:e0:f1:ee:b3:27:57:99:
69:3d:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:48 2026 by rpki-client