Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: ShMadbWRC0XanJFQTfhKWudvX0aqjKXAKgdO6EauNtY=
Subject key identifier: EE:53:73:87:50:C2:7C:AC:69:60:2D:25:74:1A:B9:6D:66:DF:7E:B9
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019F830C3C291ED5B698F02FAB1EDC25BC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 05A7
Signing time: Tue 21 Jul 2026 05:00:44 +0000
Manifest this update: Tue 21 Jul 2026 05:00:44 +0000
Manifest next update: Wed 22 Jul 2026 05:00:44 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: twogF6+q02ktPVNE7FG2FtuqSm0iSnUx4pguw6WIGlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0c:3c:29:1e:d5:b6:98:f0:2f:ab:1e:dc:25:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jul 21 05:00:44 2026 GMT
Not After : Jul 22 05:00:44 2026 GMT
Subject: CN=ee53738750c27cac69602d25741ab96d66df7eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:43:5a:69:12:5e:eb:a4:a6:cf:43:46:90:
c1:d0:70:d1:72:84:26:4b:b7:5b:33:a6:cd:11:3d:
bf:9c:6f:d7:6e:28:10:c3:82:b8:b6:9c:9e:28:22:
f0:00:e6:8e:e7:7c:de:c4:dc:a4:fb:0f:9a:63:18:
33:df:0d:76:4c:29:57:8d:34:fd:26:c3:1e:88:de:
e6:55:11:88:87:61:d0:90:08:2f:44:a6:88:0b:31:
b4:08:84:33:38:de:c7:ba:ab:08:34:e7:65:df:99:
02:3c:da:2b:23:6c:4f:f4:81:96:dc:5d:f8:a6:b2:
07:3c:d5:52:22:97:65:e6:8d:f9:12:2d:16:c4:11:
e9:f6:ae:90:3f:de:8d:85:ae:04:9f:ea:67:57:8d:
38:44:20:9b:66:28:0b:3b:a7:fc:ea:1d:ea:e6:43:
8c:8a:27:81:28:43:a7:13:0a:42:ef:3f:a2:bc:ec:
60:d3:4a:cb:ce:86:25:30:05:c1:11:b6:80:24:9f:
b7:62:6b:42:91:8f:8b:7c:e4:82:3a:9f:f6:92:04:
7c:a4:9f:2a:6b:b8:26:d6:f7:28:a5:db:fd:a0:ac:
8c:3f:b9:9b:4c:ae:ef:76:ee:1c:83:66:e2:e2:c5:
6e:c1:78:b3:85:83:a8:ce:46:70:03:65:19:db:dc:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:73:87:50:C2:7C:AC:69:60:2D:25:74:1A:B9:6D:66:DF:7E:B9
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ff:da:ad:66:c2:74:35:9a:5c:05:b1:5f:4b:b0:2e:85:c3:
f3:2b:1a:bc:dd:d1:d7:30:36:43:ee:ff:f2:21:af:c9:3f:22:
7b:d2:0c:47:c1:9a:6e:d2:42:df:f2:b3:f9:19:23:ac:08:27:
ed:1f:53:9b:fc:ef:59:de:eb:b2:87:2d:a5:4f:9b:4b:46:0b:
49:18:ab:f3:62:f7:b0:54:f8:d2:0f:1b:70:e8:39:18:e0:11:
ae:af:96:25:9d:11:24:92:85:81:0f:6f:b8:66:8e:c4:b4:ef:
93:65:f1:26:7a:77:23:87:52:7a:6c:30:1d:31:2d:02:62:d8:
b7:25:13:71:24:8d:c2:b0:b8:28:73:f1:e5:9c:e3:88:32:1c:
fe:4d:9a:c2:88:e1:2b:de:f1:7b:4f:19:fe:88:bf:6e:0e:0a:
98:95:c5:0c:ba:82:4f:b4:6b:7f:b3:7f:43:fb:c1:01:fd:3d:
8b:d4:54:81:ff:b5:4c:50:1a:42:af:dc:80:98:39:14:ba:cb:
fa:0f:2f:a2:1c:0e:1f:bf:dc:21:5f:2a:7d:88:f3:d3:fc:30:
1a:e0:84:de:53:26:98:c1:c6:3b:9a:ce:38:8f:b0:cc:e4:94:
95:12:b4:de:d9:ae:35:51:c9:9f:99:b0:cf:29:e0:bf:cb:2e:
54:dd:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:01:02 2026 by rpki-client