Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: 8zjP4FQtYTQrCLhHtUH/yig9sWDlbzHwNSvfUF5b/28=
Subject key identifier: 60:7E:7F:75:B9:C4:1A:1E:F4:0A:3C:3C:37:81:45:1A:DE:52:B2:4E
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 019FAA877A57F6BEABA49C81B8CBE34E00A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:33 +0000
Manifest this update: Tue 28 Jul 2026 21:00:33 +0000
Manifest next update: Wed 29 Jul 2026 21:00:33 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: JlozWxXtcuskEi4/x6KbBc9yFjSTPFSc1Hex6tHsEyA=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:7a:57:f6:be:ab:a4:9c:81:b8:cb:e3:4e:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Jul 28 21:00:33 2026 GMT
Not After : Jul 29 21:00:33 2026 GMT
Subject: CN=607e7f75b9c41a1ef40a3c3c3781451ade52b24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:5d:0a:88:a3:76:8b:39:1e:3d:1e:06:6b:
81:dd:51:b1:8e:6a:d3:46:2a:f1:23:0f:f8:fc:5a:
6b:b1:5f:1c:1b:d6:97:78:1c:1e:88:13:7e:a7:98:
df:27:99:5f:6c:ea:2f:bd:16:73:44:5e:fd:4a:11:
f5:38:4f:6d:41:60:d9:f0:b9:3e:6b:5f:40:37:cf:
2d:bd:b7:c3:a7:99:c2:da:fd:37:de:1c:47:20:2d:
3a:28:76:58:07:e0:e2:75:f2:5d:c7:c8:53:c7:a3:
52:4d:e6:2b:a0:15:dc:f7:24:7e:eb:fe:18:08:7b:
95:94:49:2a:48:4b:9f:45:0e:95:51:03:7d:9a:b9:
d9:ae:ac:24:de:b4:96:e0:df:b1:e0:e9:23:85:4f:
96:18:9c:64:5f:ef:a8:9a:7f:56:d2:90:e5:d3:f5:
67:24:3f:c5:6c:0b:b4:7c:76:73:e4:cc:d1:a5:d5:
ed:96:fa:2c:cc:c4:13:96:9e:cf:14:c4:b4:06:1f:
db:a3:8e:fb:84:d8:6a:2b:28:33:92:6a:05:b7:80:
ef:c0:1c:84:70:f0:78:4f:5a:85:fe:48:ad:51:36:
69:75:36:bc:6c:a2:de:77:41:e3:1e:26:32:5b:97:
72:f3:bc:83:ab:74:05:92:d4:1e:36:52:2b:f9:37:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:7F:75:B9:C4:1A:1E:F4:0A:3C:3C:37:81:45:1A:DE:52:B2:4E
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:4b:e3:99:04:90:55:c2:92:7e:38:60:4c:dc:f1:f0:15:
71:d2:e8:71:6c:c7:b0:c5:5d:fa:3f:28:b3:82:46:b3:b8:4e:
44:8c:15:37:f3:b7:3b:05:8c:c2:de:4d:f6:35:5d:ec:b5:90:
00:b5:26:4c:ad:63:ac:44:b9:fd:d6:de:97:6e:86:6c:04:3e:
8d:84:67:49:52:78:0f:05:e4:59:d1:a1:67:10:a1:2e:9d:a7:
f4:e2:c6:9a:13:32:d2:cd:fb:49:21:c5:12:ef:5c:87:93:1c:
05:54:39:c2:4f:31:ea:cd:3c:29:6a:e3:1d:04:6c:48:80:9f:
54:6b:cb:bb:55:1d:bd:47:51:39:38:bf:70:83:29:8e:e3:d4:
3f:25:ee:4f:ad:b4:77:86:a3:5c:6e:f1:2f:fe:59:77:1b:81:
47:5d:7d:d2:f7:66:5e:7c:f5:cb:dc:d5:b2:b4:ff:b9:09:22:
97:6f:dd:cc:fd:69:df:f0:e2:84:c3:96:d5:09:fb:cd:03:de:
18:cf:7d:0c:d2:71:f9:e7:65:80:0a:4a:8d:76:01:e1:b6:12:
8b:d9:c2:35:4c:98:be:24:3a:3b:5d:4b:3a:08:85:1b:34:41:
06:28:f0:a8:e0:91:9d:e4:86:ac:45:29:cb:4b:69:b5:63:6a:
d6:1d:f2:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh3pX9r6rpJyBuMvjTgCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MmI5NGU5NmQxOWZjZTExNWM2MmZmYTg5Y2NiNmYyY2Ux
MDZjN2EwHhcNMjYwNzI4MjEwMDMzWhcNMjYwNzI5MjEwMDMzWjAzMTEwLwYDVQQD
Eyg2MDdlN2Y3NWI5YzQxYTFlZjQwYTNjM2MzNzgxNDUxYWRlNTJiMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RddCoijdos5Hj0eBmuB3VGxjmrT
RirxIw/4/FprsV8cG9aXeBweiBN+p5jfJ5lfbOovvRZzRF79ShH1OE9tQWDZ8Lk+
a19AN88tvbfDp5nC2v033hxHIC06KHZYB+DidfJdx8hTx6NSTeYroBXc9yR+6/4Y
CHuVlEkqSEufRQ6VUQN9mrnZrqwk3rSW4N+x4OkjhU+WGJxkX++omn9W0pDl0/Vn
JD/FbAu0fHZz5MzRpdXtlvoszMQTlp7PFMS0Bh/bo477hNhqKygzkmoFt4DvwByE
cPB4T1qF/kitUTZpdTa8bKLed0HjHiYyW5dy87yDq3QFktQeNlIr+TfglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB+f3W5xBoe9Ao8PDeBRRreUrJOMB8GA1UdIwQY
MBaAFDQrlOltGfzhFcYv+onMtvLOEGx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkN1VTZXMFpfT0VWeGlfNmljeTI4czRRYkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt
MDkzOTYxZDM4Yzg2LzEvTkN1VTZXMFpfT0VWeGlfNmljeTI4czRRYkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2
LzEvTkN1VTZXMFpfT0VWeGlfNmljeTI4czRRYkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrFL45kE
kFXCkn44YEzc8fAVcdLocWzHsMVd+j8os4JGs7hORIwVN/O3OwWMwt5N9jVd7LWQ
ALUmTK1jrES5/dbel26GbAQ+jYRnSVJ4DwXkWdGhZxChLp2n9OLGmhMy0s37SSHF
Eu9ch5McBVQ5wk8x6s08KWrjHQRsSICfVGvLu1UdvUdROTi/cIMpjuPUPyXuT620
d4ajXG7xL/5ZdxuBR1190vdmXnz1y9zVsrT/uQkil2/dzP1p3/DihMOW1Qn7zQPe
GM99DNJx+edlgApKjXYB4bYSi9nCNUyYviQ6O11LOgiFGzRBBijwqOCRneSGrEUp
y0tptWNq1h3yzg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:59:09 2026 by rpki-client