Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: 16CwghtAavO1yWcPhmMBq5Ox9RYK8dXmHHrE/GEnKlw=
Subject key identifier: CC:E1:75:FF:2D:6B:0A:39:1E:91:88:5E:D8:A6:7C:44:5E:15:2A:02
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 01A0D192083909288DD82F51DDB9EF394CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 05C7
Signing time: Thu 24 Sep 2026 04:00:03 +0000
Manifest this update: Thu 24 Sep 2026 04:00:03 +0000
Manifest next update: Fri 25 Sep 2026 04:00:03 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: 8+Ci0CVcTXgG+fiDC9V31zXoqb9dWITCIwoH2zR1FkA=)
3: _bFSWkVNyyV-JG00IdO9DOc1tJQ.roa (hash: w+Qxdy9l318WPVe4tQ0sejDpt2qVThufOQLUi1qDqSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:08:39:09:28:8d:d8:2f:51:dd:b9:ef:39:4c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Sep 24 04:00:03 2026 GMT
Not After : Sep 25 04:00:03 2026 GMT
Subject: CN=cce175ff2d6b0a391e91885ed8a67c445e152a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:5a:c8:04:26:0d:12:ca:99:c7:47:26:53:
a3:ff:e4:24:7a:fe:65:6a:05:91:b5:8f:dc:81:17:
4a:bf:a3:2d:39:7f:1d:44:cc:fd:0f:c1:89:fa:07:
23:01:75:19:33:47:ee:fc:5a:53:90:9d:56:5c:45:
57:5e:43:88:e5:68:80:3b:9f:f6:81:d4:48:00:cf:
1f:48:ce:a0:40:38:fa:e0:d7:c6:3f:63:a0:f0:69:
44:86:77:f8:02:b3:54:72:01:ce:8a:0c:bc:76:f7:
81:0b:b4:6c:e8:a9:88:d0:82:ed:fb:ba:38:2f:16:
dc:20:07:9a:35:3f:d4:24:c3:ca:44:db:4b:49:55:
b1:7e:ac:68:45:8e:2b:5a:06:34:26:5c:81:36:48:
e3:0a:f3:d7:76:d5:36:1c:20:0c:d5:06:63:89:60:
60:bd:f1:57:dc:e1:0c:75:4b:98:1b:b6:4c:32:50:
9c:48:5f:f9:c0:72:f4:85:98:3d:0e:b4:da:7d:e7:
39:9a:97:ea:14:6f:7f:5c:ec:da:8b:ef:df:c0:ce:
37:29:61:17:1d:ba:38:03:c0:42:da:52:f0:58:50:
66:67:42:59:09:8a:c6:d0:36:ee:8b:a8:c1:ec:af:
b2:0e:fb:98:df:7f:43:a0:22:46:60:d6:f5:fa:ad:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:75:FF:2D:6B:0A:39:1E:91:88:5E:D8:A6:7C:44:5E:15:2A:02
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:51:30:e5:38:be:03:b3:81:b9:74:d0:04:21:32:67:57:35:
07:d1:ce:6d:b2:ce:57:53:8e:09:de:bc:eb:2a:5c:ec:6a:6f:
2c:1e:ce:cc:4d:87:b4:ce:e8:db:3c:3d:15:fc:a8:02:0d:36:
28:14:e5:4a:2f:a7:69:52:38:50:d7:21:bd:65:ac:d5:d8:7f:
a5:3e:f6:58:95:2a:77:4b:92:42:14:b8:da:66:00:74:27:b1:
71:90:d3:f7:d6:73:33:2f:0c:48:3a:f7:d4:48:a2:2d:1f:4d:
28:e1:14:22:94:35:a8:0b:d6:fa:36:a6:d0:62:77:e0:26:a2:
a3:48:30:50:67:f5:ba:c9:c1:e7:43:cb:02:11:17:d3:eb:2d:
df:86:cc:83:70:e7:ee:38:6f:fd:c0:db:36:07:8a:b5:bb:aa:
0d:31:e8:cd:6a:40:66:ba:af:38:d2:b0:a2:77:c5:ee:d6:ce:
a7:e1:6d:3f:29:f2:40:9c:24:cf:e7:ea:f2:01:11:ba:41:bf:
dd:3a:b5:df:8e:1f:ae:72:92:61:b8:cb:1b:80:89:be:07:fd:
4a:33:78:5b:19:30:67:44:7f:cf:10:35:b0:86:9b:01:87:ad:
4d:1f:90:12:b4:4a:75:af:bf:1a:76:51:2e:7b:a7:7c:96:0e:
b4:79:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:51:58 2026 by rpki-client