Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: PeimcIJzLsEJpk8uKyiC9LIPneeFpi+yT+FwWR18g5M=
Subject key identifier: B7:4E:85:7B:EE:F8:0F:AA:4B:36:41:E4:78:B1:F1:89:E1:6F:67:29
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 01A08DFB5A6776022047B51B318C7F0080E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 05A4
Signing time: Fri 11 Sep 2026 01:00:55 +0000
Manifest this update: Fri 11 Sep 2026 01:00:55 +0000
Manifest next update: Sat 12 Sep 2026 01:00:55 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: l3LiCo6JezOVDk+B6n/RFEwQNFfnpsyE48W3Y5hiQJw=)
3: _bFSWkVNyyV-JG00IdO9DOc1tJQ.roa (hash: w+Qxdy9l318WPVe4tQ0sejDpt2qVThufOQLUi1qDqSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:5a:67:76:02:20:47:b5:1b:31:8c:7f:00:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Sep 11 01:00:55 2026 GMT
Not After : Sep 12 01:00:55 2026 GMT
Subject: CN=b74e857beef80faa4b3641e478b1f189e16f6729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:d3:65:bc:12:81:e7:3e:f6:8e:26:5b:25:
f7:92:7d:30:c8:5e:c9:50:7a:06:09:8a:39:7c:68:
47:37:fd:4e:33:6e:46:24:e2:8b:a9:cc:ee:d8:20:
bc:ef:1a:9e:c3:97:49:8c:f3:cf:2e:a8:3f:fd:44:
9d:ab:89:5f:74:0a:f0:8d:bd:be:11:2d:f4:f3:68:
f6:b3:fe:7d:70:92:b0:e6:41:2d:23:b2:a1:8a:26:
87:2a:70:9f:23:1a:e0:5a:ad:5c:9c:4b:a2:40:59:
38:4e:64:55:43:c6:c1:0e:82:1d:cf:3a:10:f1:0b:
9e:73:d2:95:44:8c:f0:e2:70:03:60:d2:03:fe:60:
c4:ed:31:79:60:81:81:41:e6:99:77:4b:83:6c:0c:
83:b9:8f:0b:fd:62:6f:03:39:12:96:3c:92:92:df:
3b:02:e4:f0:4f:37:a3:34:bd:9c:17:32:c4:59:e7:
6f:65:9a:35:ee:2b:1b:ab:75:09:87:5f:05:bf:84:
3e:0c:a6:c2:67:e2:f5:0c:5d:43:b9:be:e1:3e:eb:
d4:54:1a:1f:43:2e:56:18:8c:0e:8e:9e:32:9a:52:
05:ad:8a:6d:e5:fd:de:8e:5e:49:f1:20:7e:56:1b:
5e:f8:bb:5a:0a:2f:7c:9e:a1:fe:08:ce:ba:74:d4:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4E:85:7B:EE:F8:0F:AA:4B:36:41:E4:78:B1:F1:89:E1:6F:67:29
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:05:8f:1c:8d:43:31:b6:6e:dc:9f:93:dc:94:65:79:c9:b1:
a5:69:38:3b:a3:ea:94:c1:9d:8a:03:c4:6c:f8:c9:66:af:cb:
01:a3:ab:6a:40:ed:9e:1e:ea:6d:68:d5:fc:28:23:94:26:f3:
a9:9f:30:f7:c0:b5:97:1a:49:de:94:d3:ca:2c:48:29:ed:6f:
d6:64:a5:37:02:9d:44:f3:7b:29:a2:51:1e:26:e8:e3:cb:12:
f2:08:6a:5a:64:23:ea:9a:55:92:5e:a4:f9:71:aa:5a:53:b4:
c7:5e:19:69:d4:e8:5b:ca:59:5d:8c:df:1c:1d:ce:20:dc:61:
fb:d0:e9:c5:1f:82:04:a2:b3:fd:99:2b:e2:60:66:68:be:ec:
f0:b3:82:09:b5:d9:8e:47:34:49:ad:bf:51:87:68:8e:34:03:
22:0f:8a:77:a7:68:aa:ad:72:61:2e:4b:d8:9c:90:25:f0:03:
ee:3d:e5:c5:eb:be:71:d0:74:c6:88:e5:b3:8e:68:3d:27:ce:
b5:bc:2e:09:30:5e:69:70:80:8e:a7:10:93:09:4a:99:49:09:
5e:6f:66:98:1e:b5:9b:14:2e:53:bd:1c:41:76:e1:fc:28:05:
3a:7c:f7:5b:9b:5f:27:6e:9d:96:b8:9e:81:94:ab:d1:d4:e3:
26:97:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:13 2026 by rpki-client