Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
File: NCuU6W0Z_OEVxi_6icy28s4QbHo.mft (raw, json)
Hash identifier: /K8vb/NSGWLcFJlt3RNSdL/hcb9Wa7suGPfYa2/iAOw=
Subject key identifier: B6:B8:2E:B2:C5:F9:11:DB:27:52:29:0E:99:3B:3E:B3:A1:24:17:0B
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 019FA2CE358647FF69F3BD590367A2F0EC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:50 +0000
Manifest this update: Mon 27 Jul 2026 09:00:50 +0000
Manifest next update: Tue 28 Jul 2026 09:00:50 +0000
Files and hashes: 1: 5H4eDScCfFAm38LxmGO7nserXGw.roa (hash: 07utQtJrxLlZfLgvuouQpzFklcbgnKuXugQi4be3vk8=)
2: NCuU6W0Z_OEVxi_6icy28s4QbHo.crl (hash: 4bSfcII+kTLPVgcNH5sqPD48ek33AyPjRDotNS+rU4c=)
3: eDqQd5g6PIn281zAnwC54NLFxOk.roa (hash: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:35:86:47:ff:69:f3:bd:59:03:67:a2:f0:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Jul 27 09:00:50 2026 GMT
Not After : Jul 28 09:00:50 2026 GMT
Subject: CN=b6b82eb2c5f911db2752290e993b3eb3a124170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:ea:ea:d0:a3:39:c4:a6:cd:6b:bf:5f:71:
0c:21:45:d5:91:49:6a:cc:6e:18:18:f0:5a:d3:6d:
ee:c3:50:ab:bd:5a:3e:7d:9e:48:24:a3:d3:58:3c:
b5:30:cc:a1:5d:d6:9a:d9:48:1e:3d:60:7b:61:32:
8f:34:d4:e0:3c:a2:dd:cc:46:d5:14:9c:68:aa:41:
73:bc:1f:ef:52:35:83:44:b3:dd:df:dd:e0:ed:64:
cc:b6:27:32:ee:b5:5e:1a:88:ed:9f:30:8f:cb:ce:
20:e1:b5:14:f3:5e:98:3a:fe:79:d6:f8:b5:85:50:
0d:25:99:30:ea:52:be:39:ca:d6:21:b1:39:e6:b9:
fb:89:18:b5:96:11:9e:3c:17:dd:fc:53:d5:0b:92:
6c:eb:6b:07:ee:46:20:af:15:79:67:8e:7f:98:aa:
44:98:65:1b:2f:99:81:60:44:a6:61:16:ac:40:9c:
73:b7:09:a9:bb:31:83:c4:30:02:22:66:d6:9c:96:
80:06:ae:a2:e6:5b:e5:a8:7b:8c:d5:fa:4b:bd:7b:
f7:9a:25:43:bb:ba:c3:d1:fd:23:2d:e7:46:72:09:
c3:32:b2:02:ba:ce:92:b2:a3:bb:db:71:9a:c2:68:
8a:94:8c:56:9e:a3:1f:65:67:ae:1e:3b:1d:10:6a:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:2E:B2:C5:F9:11:DB:27:52:29:0E:99:3B:3E:B3:A1:24:17:0B
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:56:7d:ed:d0:9d:54:d8:f6:f0:5f:fb:e5:8b:db:2f:49:d8:
1c:88:0c:83:1b:b8:fc:f9:f4:44:91:98:2c:ee:75:8f:f4:df:
47:ba:af:ec:0a:b7:66:84:1b:d8:b9:a2:56:5e:25:34:f3:69:
6b:4f:30:c2:57:59:c4:0a:23:75:b6:0f:9b:70:27:55:92:a2:
c7:61:11:13:8e:09:d2:f3:ac:a2:e7:65:8a:05:06:47:3e:47:
f4:b7:83:6c:51:09:28:89:e2:cf:0a:22:42:b4:1a:d9:60:d2:
f0:f9:2e:8c:71:bc:1c:7f:c7:90:38:51:62:93:51:dc:58:b1:
2a:5b:76:d7:8c:2e:00:cf:82:af:4a:d2:c0:1a:8f:9a:d7:9a:
dd:a4:d2:c5:13:13:0c:be:93:23:7c:10:ec:12:53:2f:b7:2a:
9f:c8:ce:74:da:1a:3d:48:a7:1b:5d:ed:ef:53:6e:b5:f6:65:
cb:ae:14:9a:cf:53:a0:b6:09:40:f6:69:94:33:fe:5e:bb:6d:
1b:e7:43:cf:b3:69:1d:c2:d8:ef:72:fe:df:01:d5:1f:99:a8:
59:b8:55:57:b6:29:23:6f:d4:bf:55:ca:52:f8:55:b9:c4:e0:
aa:dd:d0:4e:ff:ff:41:31:d3:3f:92:5d:d7:05:17:4b:07:d6:
9b:ed:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:45:09 2026 by rpki-client