Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: YmkIrn3+rXC/nmp3kK4idKygah1eKMClwP71Tp+w1Cc=
Subject key identifier: AC:FB:D6:DF:E4:C3:35:E6:B1:AF:21:4D:61:6C:FA:21:85:4E:73:3F
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019EBE10ADAA5CFA6307FDC3FC25B90C2B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0541
Signing time: Fri 12 Jun 2026 23:00:24 +0000
Manifest this update: Fri 12 Jun 2026 23:00:24 +0000
Manifest next update: Sat 13 Jun 2026 23:00:24 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: o+MpsbMMrfxUxoMPtv9aR164tG+AQMbSqof+MaHq5Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:ad:aa:5c:fa:63:07:fd:c3:fc:25:b9:0c:2b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jun 12 23:00:24 2026 GMT
Not After : Jun 13 23:00:24 2026 GMT
Subject: CN=acfbd6dfe4c335e6b1af214d616cfa21854e733f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:34:1e:d0:b7:56:99:e4:64:14:53:7d:0f:
43:92:94:36:3f:08:29:bc:31:e9:1e:23:60:a6:23:
f1:86:3f:24:6e:65:98:cb:a2:1b:cc:18:1f:5b:1c:
eb:56:3f:62:e4:9a:75:1a:63:49:02:3a:a5:8d:65:
d1:22:d9:d0:c8:d2:64:4c:2e:86:68:60:5d:7a:58:
d5:ba:38:cf:bd:14:3b:31:68:17:10:72:65:dd:2c:
6e:16:44:83:17:f9:d6:85:0b:08:99:82:33:fc:a3:
ff:a8:bc:71:5c:e7:3c:4c:65:d0:fd:9c:7f:31:35:
b0:e2:4a:00:c3:47:85:41:10:df:b3:dd:8c:3a:56:
6c:cd:50:d6:68:69:45:0d:aa:f9:ef:5f:2b:46:37:
42:12:65:63:09:bc:9a:43:da:65:88:28:67:cc:26:
85:de:30:46:59:ac:96:ff:1a:2c:7f:87:1c:96:82:
5e:9a:bf:ad:7e:8d:8a:74:92:93:72:63:6d:41:35:
11:69:1b:ef:76:d3:44:1c:07:25:34:50:a2:e9:6d:
31:07:f4:bc:ac:9d:1f:72:70:02:a4:11:e6:5a:8b:
c0:8e:d6:f9:7e:a8:b1:1c:58:26:be:c2:62:f6:44:
9c:ff:9d:a3:c9:d7:5e:3b:a0:28:4a:f0:c3:f4:36:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:D6:DF:E4:C3:35:E6:B1:AF:21:4D:61:6C:FA:21:85:4E:73:3F
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:be:66:86:73:c5:73:37:64:e6:4f:1e:21:65:71:5c:25:8e:
99:a6:d1:f2:88:fa:3a:e5:55:92:10:d3:c4:43:83:66:71:13:
c3:65:47:c3:1f:2d:37:07:d9:34:3d:f7:92:c1:dc:c3:49:74:
f8:58:37:83:fa:21:76:77:bc:49:77:11:fc:7f:36:ae:05:03:
25:6a:86:cc:ef:f2:4e:a6:d0:32:57:0a:e6:fb:07:14:b0:bd:
b2:a2:09:9d:c7:b1:bd:4f:05:0a:e6:1b:60:91:28:70:0e:27:
03:2c:fe:a5:2e:99:0c:bd:4b:27:41:50:e5:32:bf:2d:90:d1:
5f:f0:63:bf:17:f4:cc:ba:c2:21:c8:3d:ea:dc:5e:a2:06:e7:
66:fe:2e:a3:6e:cf:1b:1a:62:cf:34:e1:70:2d:cb:5f:8d:9d:
5e:8c:75:3c:b2:af:f0:3f:83:b1:9a:72:a2:f1:01:4f:35:08:
cc:3f:b1:bd:e6:70:c1:37:99:3d:a8:74:ef:80:8f:d7:d0:ce:
3c:fb:73:3a:85:77:e7:98:27:43:e7:16:63:21:f9:91:dc:72:
4e:b0:d0:10:d1:2a:e5:e3:52:0f:6d:4d:d6:3b:2d:9e:8a:1f:
7b:b5:21:b2:50:c4:a8:8c:1f:3d:95:2a:aa:86:74:77:6c:18:
9e:d8:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:08 2026 by rpki-client