Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: pl7t82oIpeypBtlsz1Qp3WA4k8/+6wtMzCMDEynrifQ=
Subject key identifier: 2C:41:4D:E4:08:2A:19:65:6D:58:89:57:FB:D5:2E:D3:F0:3E:AB:ED
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019DA453A1652A6B124B413684C320C37F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 0421
Signing time: Sun 19 Apr 2026 06:00:37 +0000
Manifest this update: Sun 19 Apr 2026 06:00:37 +0000
Manifest next update: Mon 20 Apr 2026 06:00:37 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: /dexvWQV3tYuPdcLjYm3bI2SjZjwFr9DrAyfmzeaiqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:a1:65:2a:6b:12:4b:41:36:84:c3:20:c3:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Apr 19 06:00:37 2026 GMT
Not After : Apr 20 06:00:37 2026 GMT
Subject: CN=2c414de4082a19656d588957fbd52ed3f03eabed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:ce:c9:7a:20:ea:f1:5d:ea:f4:28:fc:21:
4d:d5:7b:e3:46:69:12:6c:ad:ec:b8:3d:ac:9d:43:
72:7a:18:35:5b:f8:b6:82:82:ec:5b:5d:ff:98:7b:
15:74:38:c3:50:fd:c0:52:2c:73:bb:4f:12:66:21:
47:d0:e0:c1:d7:e8:22:82:1f:6c:f6:0e:9a:1f:c1:
86:49:c3:a5:fc:b8:be:5c:42:97:49:53:74:aa:3b:
78:e8:07:3d:80:9b:06:54:d4:94:ee:c0:f7:79:07:
51:5c:08:00:69:cd:ff:6b:c4:13:c1:f4:b9:af:aa:
e8:4b:e0:b1:60:6f:4a:74:30:38:cb:d8:13:fa:8c:
90:f5:8f:19:6b:5f:bd:67:45:ff:e8:73:36:e7:bd:
5a:1d:f0:ff:b5:6a:0e:b8:74:10:38:3a:71:c1:a1:
96:d9:3c:57:1a:5f:5e:1d:da:bf:a7:81:28:3d:84:
f3:49:eb:d5:9f:d6:19:ff:8d:3d:f7:4d:0f:95:7f:
34:ae:53:c9:a0:7c:3c:b8:49:bb:ad:5f:70:8c:04:
87:cc:11:a0:0c:0a:15:1b:a6:fd:8c:3a:35:f5:4b:
cf:b4:66:0b:33:5d:0e:1e:00:ea:21:e5:12:ff:96:
83:95:c6:bf:a5:b1:be:f7:ef:7d:54:46:28:ea:75:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:4D:E4:08:2A:19:65:6D:58:89:57:FB:D5:2E:D3:F0:3E:AB:ED
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:c7:ea:5c:34:0e:d9:6a:3d:45:13:42:35:89:6b:47:67:
8d:57:b8:8d:1a:d3:d5:9e:70:9f:71:90:88:a5:3a:51:ab:6e:
05:11:72:84:62:30:64:2c:9e:61:14:98:29:89:8f:ac:4b:58:
eb:1a:f9:97:52:41:a0:72:11:96:dc:b0:ae:19:92:2e:d3:27:
b3:3b:44:cd:92:87:a1:32:e3:83:36:60:a3:41:66:44:29:f2:
af:19:9a:33:1d:75:4d:c6:76:27:a5:cc:50:58:9c:c0:90:b3:
1c:9c:7e:e8:4c:36:54:33:82:2c:b1:70:d1:79:f6:43:25:54:
16:d3:e6:dc:ca:33:96:16:3e:f3:e3:a2:c7:14:70:3c:2c:ce:
d9:e1:d1:e0:4e:ee:f6:10:ce:a3:1e:94:fa:72:0f:2a:d1:bb:
f6:62:85:f2:ac:bf:7c:a2:86:d3:bb:07:bf:04:33:c2:df:1f:
4c:ee:5c:08:6b:71:7d:b4:15:63:b3:58:e4:03:b1:39:cd:62:
d2:c7:5f:38:7c:28:1c:e0:ee:bf:c5:e7:9f:0c:83:50:6d:c9:
e0:fc:45:98:0d:5b:ac:49:cf:a7:86:83:bb:8e:41:85:ea:d2:
c8:e7:d4:2f:05:cc:9d:22:de:24:3d:0c:73:e2:c9:a0:d0:75:
21:18:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:02 2026 by rpki-client