Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: NOuptYSy8Muf/su4yp75YdcIqaDT5qYWCZsK1GsM8KE=
Subject key identifier: F4:BE:45:53:21:7C:42:13:13:68:02:72:87:32:B9:27:39:8F:CA:91
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019FA9ABC8742E42623BCFF0743DBEB649FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 05BB
Signing time: Tue 28 Jul 2026 17:00:35 +0000
Manifest this update: Tue 28 Jul 2026 17:00:35 +0000
Manifest next update: Wed 29 Jul 2026 17:00:35 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: px8XW7L9C1r7vzgSzua5hv5qmPK/8t0R8coJ+eGKut8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:c8:74:2e:42:62:3b:cf:f0:74:3d:be:b6:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jul 28 17:00:35 2026 GMT
Not After : Jul 29 17:00:35 2026 GMT
Subject: CN=f4be4553217c4213136802728732b927398fca91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:b5:a1:7d:49:07:a1:0b:a7:87:53:ed:1d:
22:eb:01:39:45:57:7d:cb:23:81:21:1b:88:42:61:
88:f9:da:84:48:3b:9d:e2:35:84:ed:26:f1:35:37:
87:7c:03:65:27:f7:3a:1c:0e:83:98:3a:cb:23:3e:
04:4c:ee:2d:56:c6:03:ca:b3:a5:2d:e3:84:7c:4d:
fe:c9:62:5e:64:9c:1b:19:d9:1f:a6:20:87:dc:63:
77:23:a8:50:36:0a:b9:07:95:6c:0b:ef:92:98:5c:
87:34:ba:bb:f5:3d:11:4b:98:83:ca:42:4b:98:d9:
f7:28:55:8b:9d:36:e5:d5:f2:98:05:ab:3d:75:44:
77:53:39:d2:f8:8b:d3:81:db:63:ef:06:4f:a7:33:
b1:52:88:f6:47:4b:fb:0b:e9:e4:fc:e0:fd:d3:47:
d1:4b:f5:35:1a:92:19:cf:c4:4b:2e:44:ad:82:b0:
52:49:4d:0f:12:5a:69:7b:03:2b:f3:b4:23:4d:e0:
7c:67:ab:7d:3a:46:68:13:69:58:3c:68:4c:6e:11:
cc:40:84:4f:29:4f:6e:48:7f:cf:f1:92:75:0a:82:
8a:0b:21:9e:75:5a:94:84:8f:60:4d:df:77:2f:0d:
cb:f9:6a:61:86:a4:69:77:ee:d0:6b:9d:b7:34:08:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:45:53:21:7C:42:13:13:68:02:72:87:32:B9:27:39:8F:CA:91
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6a:12:61:8c:14:d4:1b:fb:3c:0f:84:70:29:cc:ac:28:ed:
cb:2f:f2:45:70:00:ba:18:b9:3f:db:90:02:56:55:7f:ec:15:
05:a3:a9:d9:9a:da:d4:ec:be:3e:69:71:f6:6e:3e:66:ae:f9:
69:80:5f:be:f0:66:b1:95:81:dd:f6:11:47:bf:ca:c2:4a:2b:
80:ce:f5:68:1b:78:d5:74:41:79:13:26:93:a7:0a:cc:12:ca:
1a:62:d9:e8:a7:4e:44:a7:71:f3:6e:b9:2b:f9:06:4d:28:37:
22:74:ce:e9:17:ae:f9:8d:c1:41:e9:a8:85:bb:51:97:ee:8e:
46:7a:69:8b:04:e9:1d:19:be:7d:b4:59:2b:ac:62:c6:3d:48:
ed:25:8a:76:18:2d:31:41:87:30:89:70:9e:69:dd:42:e2:a0:
ae:32:16:50:1f:be:c6:b1:32:70:b2:e8:bc:f2:cd:b6:0a:05:
dc:8a:4e:d6:54:f1:52:0a:b4:34:39:0c:0d:f1:82:6b:0e:c3:
bb:77:ed:4f:93:43:58:fd:f6:63:4f:b9:b8:e6:5e:10:55:77:
64:c4:44:b6:d8:50:b1:25:f7:6f:6a:5f:7b:9b:89:c1:fd:ad:
0f:44:e6:11:1f:4f:db:46:e1:2d:6c:59:4d:5b:29:f3:8a:ac:
5a:92:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:49 2026 by rpki-client