Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: bYrTz3Q8Tu+sOwcUpU765zh2iSY2Thuy8243k821Gdo=
Subject key identifier: C7:DE:46:82:65:D0:6B:D2:AA:39:A4:D2:D0:65:90:D7:83:F4:4B:5D
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019D988642F0D92A58F01BB28B7FEF7976E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 04A9
Signing time: Thu 16 Apr 2026 23:00:28 +0000
Manifest this update: Thu 16 Apr 2026 23:00:28 +0000
Manifest next update: Fri 17 Apr 2026 23:00:28 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: RaexlPqOxvjSHthjj3vX6ybVx9Fbav+419vhq8KsyBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:42:f0:d9:2a:58:f0:1b:b2:8b:7f:ef:79:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Apr 16 23:00:28 2026 GMT
Not After : Apr 17 23:00:28 2026 GMT
Subject: CN=c7de468265d06bd2aa39a4d2d06590d783f44b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:e5:bd:62:f9:52:4d:3b:0b:fc:91:b0:7b:
14:be:4d:1f:40:98:21:bc:e6:41:87:ce:7a:6d:9b:
1a:cd:aa:f0:09:31:e2:0b:b3:a5:ae:3f:f9:59:70:
f8:dc:da:e4:6d:37:5b:df:ed:94:a5:b6:86:86:37:
50:82:12:15:71:6f:d8:e6:18:e8:26:e4:dc:37:d0:
b3:55:f4:96:e7:e2:1c:08:92:bb:f1:35:8c:0a:2e:
80:d7:d5:ef:3a:33:2f:05:09:8a:bc:21:41:2b:f1:
3c:80:ff:43:4a:4c:ad:14:46:64:52:00:ea:02:e2:
a3:b1:a8:46:89:bb:23:bc:2d:b2:91:cd:00:26:4b:
a3:ab:56:c4:5d:65:26:65:b2:b9:da:9a:44:b8:bd:
e3:20:4e:53:cd:d3:5a:d5:30:c0:7e:f4:70:f1:4a:
14:16:c3:cf:56:c1:12:87:96:5c:82:4f:9a:e5:6d:
c8:f7:22:84:df:e7:06:b2:e4:22:2f:91:04:91:2c:
0a:a7:ed:54:7e:9e:85:c3:ef:8d:99:ff:4f:37:45:
fe:70:7b:9f:aa:31:c7:ed:d1:36:94:5d:9e:e8:49:
cc:2d:c8:f2:91:2f:e2:a5:52:69:2b:f6:38:72:bb:
44:7b:b1:52:5e:49:62:05:8e:29:e8:36:2d:bb:e8:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:46:82:65:D0:6B:D2:AA:39:A4:D2:D0:65:90:D7:83:F4:4B:5D
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:87:ab:2a:e9:f3:2d:f5:e7:4a:31:a1:02:ec:d3:6d:20:
ec:ba:c8:cb:99:22:a4:b3:08:64:ab:03:2e:8d:d4:55:60:37:
54:ff:02:85:31:d6:db:fc:50:c0:07:1a:f7:cf:35:7c:bf:39:
12:0d:98:ec:c3:27:de:11:cf:c9:0d:bf:91:ee:a4:77:fe:4e:
48:85:c4:3c:ec:f9:0a:70:2c:04:db:60:22:26:0d:c4:6a:bc:
09:65:9e:1f:ad:b7:36:cf:1c:25:a6:e6:60:d4:ec:5f:3e:1e:
d9:df:ec:5a:92:66:d4:b1:7a:6d:da:77:d9:da:61:1e:9f:6c:
29:0f:f3:6f:4f:62:e9:56:2d:d7:bc:f3:d0:a6:79:33:3e:4b:
4f:79:4f:d5:f1:ad:04:c8:fc:b5:33:c2:f7:5b:13:ec:93:0c:
ee:3b:d3:6c:77:60:4d:0c:41:cf:80:18:1e:0a:5a:31:e3:c9:
50:88:e9:41:bf:87:ff:3c:90:1b:52:3e:9a:e4:fa:15:3a:1d:
88:0a:6a:b4:6d:39:34:3d:6f:19:e3:75:a4:ca:fd:59:68:c6:
9f:36:cb:07:f5:cc:aa:1a:5e:32:1e:a4:41:11:9c:67:2c:8c:
d4:a6:1d:e6:cf:e2:f5:d2:9d:ec:69:c0:8b:8b:52:5a:a3:48:
6a:6b:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:09 2026 by rpki-client