Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: pg7Vs4x+9a184LT675Gf7KkbJynoY3MGvGwFmLy1jp4=
Subject key identifier: 40:9E:96:A5:17:A1:31:AA:52:94:1E:B4:4E:5B:42:D3:71:CF:88:31
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019FA9E2B69ADBD2574F8668A8CAE861EF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 052D
Signing time: Tue 28 Jul 2026 18:00:35 +0000
Manifest this update: Tue 28 Jul 2026 18:00:35 +0000
Manifest next update: Wed 29 Jul 2026 18:00:35 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: gLZMNVMZ4fNycOmFul//Zn2X3MZSe8ngV0jc/IURI9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b6:9a:db:d2:57:4f:86:68:a8:ca:e8:61:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Jul 28 18:00:35 2026 GMT
Not After : Jul 29 18:00:35 2026 GMT
Subject: CN=409e96a517a131aa52941eb44e5b42d371cf8831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:f4:a8:c2:2e:a3:30:39:b6:b7:2f:38:f6:
35:f1:6a:56:d1:de:da:c8:28:3b:80:35:c7:20:b2:
59:32:81:77:8b:93:8a:1e:0f:84:6c:fa:5e:eb:28:
85:52:8d:cb:c1:e0:95:36:ab:a4:4c:66:59:b5:26:
eb:87:a0:24:5c:66:46:aa:13:22:bd:d5:27:c2:e0:
2a:fd:47:e9:af:7a:ed:16:e8:c9:c8:f4:3b:53:6e:
00:14:12:b6:ec:d9:fd:53:56:c6:cc:ac:bc:0f:ee:
3d:5a:5c:8b:24:c8:70:3a:85:9e:4d:3b:45:ff:34:
9b:00:94:87:43:eb:8d:5e:cf:87:dc:cc:69:24:ba:
b9:20:cb:eb:4c:db:94:e0:dd:1a:eb:fb:d8:b8:f4:
fb:3c:eb:8d:dc:00:23:6c:2a:d5:c3:1a:60:f0:d7:
dd:6d:ea:bb:84:bd:f7:c4:45:bd:b3:eb:b5:b5:cf:
8c:5a:9b:8e:31:51:22:ac:c2:51:cf:60:b9:59:6b:
8b:03:59:5d:88:12:e1:45:cb:08:43:dd:54:f2:0b:
2a:c5:5f:34:67:e2:be:fc:8f:76:21:51:4b:35:a4:
41:c4:f4:af:28:02:29:60:ad:e9:bf:80:20:7a:af:
01:a4:8d:c4:85:11:c4:f8:48:35:36:3d:31:4b:6b:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:96:A5:17:A1:31:AA:52:94:1E:B4:4E:5B:42:D3:71:CF:88:31
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:ba:9e:c3:07:21:ac:77:ba:6f:9f:d0:77:c9:89:b9:27:
f3:42:f0:24:88:0b:96:62:ed:f5:12:bc:5b:eb:51:c1:3c:03:
af:04:c3:f3:61:d2:11:ac:ab:27:ae:c9:13:a4:67:41:0b:0e:
90:1f:5d:d4:b1:c2:ad:f3:1d:36:16:4d:6c:ab:0e:f6:72:6f:
db:8b:34:80:74:af:c0:d1:a9:eb:2f:6f:a3:44:d5:d3:99:5d:
cf:bd:48:5d:51:33:81:72:c2:f5:9c:3b:45:20:d3:5a:e5:c3:
d5:e5:56:ff:ae:18:3c:29:90:52:fb:b2:1a:09:69:35:59:b1:
54:25:92:8f:75:9a:33:1e:ec:6c:1f:f7:31:46:43:34:7c:c8:
8f:02:54:44:06:22:7c:d8:a2:db:1f:e1:0e:14:c4:8e:cc:d2:
94:ef:fc:b3:c5:b2:6b:7f:46:61:46:6d:3e:12:f4:70:02:d1:
bb:1c:58:96:6f:00:6a:30:29:af:25:0d:43:a8:4f:70:b7:3d:
6c:1a:9f:fa:79:7a:a4:ac:3d:ee:f8:84:ae:e6:a9:7b:b5:d8:
29:47:a6:86:a8:da:69:6c:33:8d:de:ba:49:a4:91:9c:0c:6c:
36:26:fc:7f:90:12:b1:0c:6d:00:4e:d7:12:b4:c2:47:a0:a3:
a0:d3:4c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4raa29JXT4ZoqMroYe+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw
ZjNlZDYwHhcNMjYwNzI4MTgwMDM1WhcNMjYwNzI5MTgwMDM1WjAzMTEwLwYDVQQD
Eyg0MDllOTZhNTE3YTEzMWFhNTI5NDFlYjQ0ZTViNDJkMzcxY2Y4ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9j0qMIuozA5trcvOPY18WpW0d7a
yCg7gDXHILJZMoF3i5OKHg+EbPpe6yiFUo3LweCVNqukTGZZtSbrh6AkXGZGqhMi
vdUnwuAq/Ufpr3rtFujJyPQ7U24AFBK27Nn9U1bGzKy8D+49WlyLJMhwOoWeTTtF
/zSbAJSHQ+uNXs+H3MxpJLq5IMvrTNuU4N0a6/vYuPT7POuN3AAjbCrVwxpg8Nfd
beq7hL33xEW9s+u1tc+MWpuOMVEirMJRz2C5WWuLA1ldiBLhRcsIQ91U8gsqxV80
Z+K+/I92IVFLNaRBxPSvKAIpYK3pv4Ageq8BpI3EhRHE+Eg1Nj0xS2s1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECelqUXoTGqUpQetE5bQtNxz4gxMB8GA1UdIwQY
MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt
ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy
LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7e6nsMH
Iax3um+f0HfJibkn80LwJIgLlmLt9RK8W+tRwTwDrwTD82HSEayrJ67JE6RnQQsO
kB9d1LHCrfMdNhZNbKsO9nJv24s0gHSvwNGp6y9vo0TV05ldz71IXVEzgXLC9Zw7
RSDTWuXD1eVW/64YPCmQUvuyGglpNVmxVCWSj3WaMx7sbB/3MUZDNHzIjwJURAYi
fNii2x/hDhTEjszSlO/8s8Wya39GYUZtPhL0cALRuxxYlm8AajApryUNQ6hPcLc9
bBqf+nl6pKw97viEruape7XYKUemhqjaaWwzjd66SaSRnAxsNib8f5ASsQxtAE7X
ErTCR6CjoNNM7g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:31 2026 by rpki-client