Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: EA5RcfuASHPHyQKUhWlGVkqFvWkjMdDURMD1zu38FG0=
Subject key identifier: CE:00:1F:59:F9:79:6F:AA:FD:86:02:8D:95:B3:5B:3F:54:67:51:C9
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019E8FB7CE860E46DF38719BD14249265959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0529
Signing time: Wed 03 Jun 2026 23:00:48 +0000
Manifest this update: Wed 03 Jun 2026 23:00:48 +0000
Manifest next update: Thu 04 Jun 2026 23:00:48 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: U7ogRan+Fp1ZMeS4kx7D9N3IO/7f5VDgslxefgV9tO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:ce:86:0e:46:df:38:71:9b:d1:42:49:26:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Jun 3 23:00:48 2026 GMT
Not After : Jun 4 23:00:48 2026 GMT
Subject: CN=ce001f59f9796faafd86028d95b35b3f546751c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:ea:71:b5:1f:15:1a:43:22:ae:64:3d:65:
90:59:82:a8:74:1d:fa:45:e4:6f:b3:4c:60:5f:cb:
82:96:c5:7e:54:e3:20:ff:2e:95:25:73:33:45:fd:
c3:6f:e0:fb:5b:9c:b3:ee:f4:27:0c:cb:64:f7:13:
32:32:3e:74:5c:4d:32:92:d4:a3:e1:84:bd:16:d3:
c8:7d:f6:07:1b:64:d0:4f:4e:73:48:d8:87:4e:cb:
16:77:2f:e0:c8:9d:aa:c8:08:d1:af:bc:ca:92:7b:
e5:7f:63:50:a7:17:61:99:1a:a7:43:b0:b2:89:27:
17:77:f0:30:75:78:30:cf:c6:90:9f:c7:fd:c3:c2:
e1:97:00:54:36:91:72:e0:ba:d5:46:48:2d:14:47:
2c:50:af:15:e7:90:02:6f:9a:4b:25:33:61:13:c6:
3d:58:80:ac:f4:ef:7f:26:5d:ca:b5:2f:91:e2:b7:
ae:f8:4a:9c:3c:2f:8f:67:35:c8:21:aa:bc:19:c2:
a8:2d:a2:41:69:9d:84:2b:63:82:61:a2:0f:43:ab:
cb:dd:04:91:62:a3:86:0f:5e:1e:2c:51:d0:68:2a:
83:d1:17:ba:31:78:e9:44:cf:42:9b:2d:d6:b9:60:
67:1d:d5:8e:83:02:16:0f:7c:3b:dc:5a:9b:da:e0:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:1F:59:F9:79:6F:AA:FD:86:02:8D:95:B3:5B:3F:54:67:51:C9
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:94:0c:4b:a0:9b:cc:66:52:8b:6f:73:a6:21:e5:7c:d8:76:
67:ec:6d:f2:6d:b8:7f:62:2f:0a:d7:21:17:16:39:f7:8c:34:
f0:2f:c8:c1:a0:2e:1e:63:46:77:60:2f:dc:ef:a3:33:9a:f4:
2e:da:1c:68:90:6d:65:a3:d7:27:b8:d6:49:c9:e5:d9:f1:9c:
6e:47:01:1c:a6:6e:68:5a:c7:31:71:f3:fc:db:88:f3:55:61:
24:da:12:a8:bc:f4:6a:c1:2f:ce:f3:49:80:f6:64:ce:af:b4:
9d:23:79:98:d1:4e:f7:ac:78:f4:b2:15:10:69:ee:19:8b:d2:
9d:03:8c:6c:d8:4b:ba:e5:d2:07:33:03:e4:cb:d7:06:f9:a6:
47:c1:84:dc:d7:09:33:45:d0:97:df:75:48:9d:15:db:b9:52:
64:2f:5e:64:5c:35:1d:e5:9e:1b:41:c1:d4:19:e8:20:15:1a:
57:0e:0a:b7:10:23:8a:15:2b:b1:88:03:06:07:1f:1c:91:62:
b5:ce:b4:9c:0a:4f:50:22:98:42:7f:1c:bd:78:ae:bf:ed:9f:
30:10:15:61:29:9a:23:94:f0:5e:a6:23:57:7c:01:1e:36:ee:
dc:ba:a8:b4:4e:3f:d9:9a:bf:0a:67:98:3e:07:81:5a:a8:40:
c8:d1:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:30 2026 by rpki-client