Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 42lmG9IiFJJf66PpvfAKCdbkqOVSKDOCAA0JUGMccXM=
Subject key identifier: C0:8D:88:FA:E6:B4:77:68:37:53:07:62:8F:71:1F:4F:96:C2:50:BA
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019CAAFD71D68947CBE06FBE2835EF46C915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 042E
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: 1pv4QhJKN9+tnQbQkDiltRQ2lKL3wiKgn7EDGkH3KLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:71:d6:89:47:cb:e0:6f:be:28:35:ef:46:c9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=c08d88fae6b47768375307628f711f4f96c250ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:94:5b:2c:ff:8f:da:95:6d:4b:7f:82:f4:
d8:2c:e9:0e:75:1a:3d:8e:6f:2f:2f:d7:6e:b8:5e:
48:c8:03:75:70:ab:c4:a9:11:9d:96:d6:e9:04:da:
69:27:dc:96:f0:a6:5d:e7:d4:0b:9a:06:b0:65:94:
cc:ac:41:c7:78:89:60:c3:7e:e6:9d:d2:13:ed:15:
b2:60:27:ed:41:60:f8:30:9f:21:77:fb:df:eb:c4:
33:ed:4e:39:e8:e4:2e:7a:c2:67:21:47:ac:0f:0c:
b2:9f:da:13:7d:85:97:84:c7:30:75:dc:32:38:a9:
f3:19:57:f7:81:11:09:88:b9:66:fa:8a:51:a4:3d:
90:31:b7:d8:fa:eb:f3:e3:f5:ec:bf:75:5f:48:28:
84:29:f8:72:4e:c1:d7:b3:e2:a3:52:e8:04:b1:95:
06:de:c0:3f:0d:e0:68:e6:c5:50:be:f6:7b:18:60:
54:01:59:71:4d:6c:a3:b4:bf:06:2e:55:6f:6c:70:
84:f0:7f:4d:36:59:23:68:bd:e7:c7:16:57:5e:d3:
a9:92:5c:20:82:e8:9f:1b:fd:a3:b9:0b:00:6a:78:
35:2e:a8:1a:bd:12:3d:61:e3:1a:10:21:c3:cd:c3:
aa:2c:0a:79:9a:c6:20:b8:40:9f:36:5f:ce:5a:5c:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:88:FA:E6:B4:77:68:37:53:07:62:8F:71:1F:4F:96:C2:50:BA
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5c:e4:df:bc:c4:8d:cc:e3:b6:dc:3d:f0:5c:5f:ad:81:7c:
da:9b:25:8c:66:03:1d:b1:b9:68:63:62:b6:1c:89:b5:82:8e:
38:51:49:43:4b:2e:d3:88:56:a0:35:35:ba:91:01:3a:6e:0e:
db:10:cd:62:64:a9:4d:ce:f6:e8:6e:e6:9d:50:bc:50:14:13:
79:6c:b1:23:bf:bc:f6:b3:35:a1:21:7a:0d:dc:48:9b:41:71:
47:7b:b3:69:9f:a6:e2:45:90:ec:46:78:a9:0f:17:8f:42:a6:
16:53:5f:14:ba:ed:fe:06:50:b3:a4:cf:cf:28:f4:72:d9:b2:
2a:15:fc:1a:c8:2f:29:d6:34:22:9b:45:e7:54:ec:65:ce:75:
da:1e:62:bb:76:e1:2a:6a:89:19:1d:c4:e2:cc:32:6c:89:c5:
81:17:65:6c:34:8c:d9:a6:d4:28:ca:90:cf:19:2b:85:e2:ea:
49:d5:a5:b6:b6:b1:58:d4:23:f0:e6:be:d0:c4:71:0f:86:3b:
a3:f8:c6:0d:f4:18:7a:4c:84:93:53:cf:77:c1:dc:97:7e:e6:
fe:ec:cf:26:0e:df:4b:d2:36:12:ad:5e:72:bd:79:72:b5:4e:
f5:51:d8:a9:ec:78:b3:08:aa:0b:2c:34:da:7f:6f:f5:00:0d:
43:00:6a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:50 2026 by rpki-client