
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: fbgDbT2fryLicpyZ4BS5aenCkfIOTRvXz32tjoq7hag=
Subject key identifier: EB:1F:FF:83:4F:9B:B9:8B:8E:D5:3F:21:AE:4D:E1:42:8D:C8:DC:64
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 01A0C58E5F67B08F55440FC21E497E748176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 064E
Signing time: Mon 21 Sep 2026 20:00:37 +0000
Manifest this update: Mon 21 Sep 2026 20:00:37 +0000
Manifest next update: Tue 22 Sep 2026 20:00:37 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: CUEd561t4EAPhSgyEjbiJop17vvTc/ZFckL4zfRDQWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:5f:67:b0:8f:55:44:0f:c2:1e:49:7e:74:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Sep 21 20:00:37 2026 GMT
Not After : Sep 22 20:00:37 2026 GMT
Subject: CN=eb1fff834f9bb98b8ed53f21ae4de1428dc8dc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:46:1b:a7:60:af:76:89:19:a1:53:74:b5:
36:6b:28:98:0c:ef:14:ad:45:65:bb:0a:84:fa:35:
cb:d5:35:07:30:6d:d8:91:14:6d:b4:6b:7e:8b:b0:
c3:dd:e6:bf:a9:62:ec:87:ec:12:19:f5:81:76:8d:
ed:d5:81:ab:ff:10:a9:b3:8b:04:d5:f3:7b:df:db:
75:60:78:b0:e0:55:15:3d:13:48:be:64:f0:8b:e6:
bf:92:4b:67:ee:07:01:34:0c:11:95:be:2a:30:78:
c0:4c:c9:19:01:3b:ce:56:c8:b6:f8:09:42:a3:6c:
20:75:d0:50:c4:d5:9e:d6:03:67:89:6a:0b:b1:a8:
da:e5:df:99:25:63:d4:6e:6a:0c:98:14:e1:cd:0c:
ac:dc:ab:f9:11:a9:4e:13:2a:64:39:d5:ac:56:02:
e9:ff:9c:f9:af:9f:44:d8:2d:ba:2c:a2:71:46:94:
11:32:c9:52:c8:3e:d4:2f:9f:88:b2:23:e6:f5:4f:
a6:69:70:1b:a0:14:18:c3:73:e9:a7:36:3a:6a:ab:
fc:59:c9:ef:dd:10:d1:da:9a:ea:1c:cb:8e:5c:f7:
fb:0e:94:af:e7:c2:bb:da:f0:2d:8e:69:f7:3e:dd:
d6:1d:48:64:47:de:62:e2:58:a8:98:1c:42:96:83:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:FF:83:4F:9B:B9:8B:8E:D5:3F:21:AE:4D:E1:42:8D:C8:DC:64
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:f4:40:68:3c:ed:29:de:d2:ba:1d:d7:28:ca:33:a5:af:
eb:23:f7:0e:60:16:bd:31:57:38:45:b3:fc:56:7b:ce:ef:05:
86:a7:9e:d6:f4:59:f9:1c:23:17:71:c3:52:4b:09:ec:00:2a:
4e:30:06:70:07:e7:eb:45:05:4e:2d:ef:e4:96:1a:b8:c2:8f:
85:f9:7e:82:fd:ab:f1:a4:6a:a7:d7:27:5b:95:05:e4:a6:f6:
ad:ea:4c:86:c1:2f:dc:24:b4:00:f2:5e:3b:4d:53:33:22:ac:
04:d8:70:23:f3:04:1d:a2:42:20:7c:84:8f:7d:6f:7c:0b:62:
69:be:6c:ef:ef:1b:75:ae:b6:76:18:59:d3:e8:43:26:03:7a:
78:5d:b5:39:72:64:46:4b:60:c9:a5:a1:c0:7e:b4:6e:89:a7:
71:4c:f2:3f:f9:0c:29:11:62:00:aa:8a:c6:32:c4:06:f7:3f:
00:35:ef:8f:ea:44:d8:53:71:9f:ce:66:f1:bb:78:92:35:f4:
db:f6:1d:2a:3f:66:0a:66:95:7b:cb:08:95:07:7c:a7:d8:9b:
b4:76:ff:4c:d0:55:5b:6d:66:78:67:62:2c:33:3a:08:cb:84:
b8:57:4d:bf:90:77:2c:2a:a4:44:e1:22:85:c9:f2:ec:20:5c:
e9:39:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:34:50 2026 by rpki-client