Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: 2WzVizDSE53q9VMOdeFVMofzx/9O6rFZhAhk6sEz27U=
Subject key identifier: 34:4F:9F:23:7D:14:BF:09:18:F8:A0:A8:2B:63:C1:77:AD:24:21:81
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019D39E54AEB3402B4C9E46A24DB1DD43B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0478
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: 6MfKKf2IUxjzK9rGH3KF2G1QL9M.roa (hash: AZP6WDTbAtRSZjdJJBnQi95805CtU4wIt7uYQkYZy2M=)
2: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: Jqe+rwMrvobCc1GCQzvyyCCdJNcjTQNlNZ023p50wG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4a:eb:34:02:b4:c9:e4:6a:24:db:1d:d4:3b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=344f9f237d14bf0918f8a0a82b63c177ad242181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:7c:85:3b:70:c5:62:04:c1:c9:c2:39:e1:
f9:84:4e:54:0a:08:86:57:6b:90:5a:7d:44:d9:21:
67:3f:dd:e6:d3:16:5b:fc:4a:1e:6e:41:a3:2c:c8:
b7:58:35:63:07:2f:39:8a:77:14:41:58:f6:d4:57:
46:80:d8:a5:4f:54:e5:e4:31:96:7d:e4:e3:f8:e2:
42:59:f6:95:5c:76:9f:13:ab:dd:13:8e:76:36:c9:
51:12:55:80:ed:17:03:6a:4d:e8:75:8f:e6:a3:9f:
6d:5e:d6:ff:4c:9d:ae:db:cf:64:a2:4c:ee:7b:44:
ec:4b:01:e3:c0:3c:c4:fe:a3:ab:48:21:77:d8:29:
69:7a:33:b1:b5:0a:e4:00:d6:de:06:39:b3:97:94:
ae:66:a4:e0:34:48:89:4a:db:a2:6a:c8:d2:9d:83:
39:a6:8d:c1:b9:de:05:01:71:93:9a:7b:dd:7a:61:
e5:e3:e0:7d:1a:f6:03:a3:c2:4d:82:5e:91:17:b9:
09:db:16:50:2d:46:65:7a:d2:48:37:ac:bf:b7:2b:
e8:3a:8e:f5:43:81:7f:35:c0:7d:9d:b1:e4:0f:6a:
02:f0:cc:10:74:4d:db:a7:d8:d2:11:59:bf:89:92:
7a:b6:1f:00:61:35:8f:30:6e:0c:78:75:bf:fa:4a:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:9F:23:7D:14:BF:09:18:F8:A0:A8:2B:63:C1:77:AD:24:21:81
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:05:56:70:0d:6c:0f:2c:ef:46:49:fa:53:25:85:3c:c8:93:
3c:2a:8c:a4:eb:04:b0:59:8c:fd:c0:61:66:d2:fa:d6:ce:43:
31:cb:d2:4b:a1:13:66:cf:0a:59:63:f8:59:76:c5:4e:c1:f3:
a5:10:e1:34:e1:15:6d:c8:5a:28:ff:7d:29:2b:6f:f6:a1:a7:
8b:59:6e:41:57:ea:48:2a:ec:ad:f8:c0:54:17:cf:19:fc:90:
6b:7b:5c:74:28:5d:ee:82:32:41:fc:b4:9d:f3:49:09:2b:5b:
91:13:43:43:5c:e8:6a:c5:9a:94:75:ea:64:b6:47:fa:80:7c:
9b:91:12:de:c7:0b:29:65:ae:5a:c0:0e:a5:40:d5:b8:02:bb:
0a:9a:e6:e8:a0:d4:8c:da:70:53:f8:08:a6:43:06:27:da:68:
d0:d4:36:03:0b:3d:24:08:70:df:0c:2d:8c:df:20:72:61:eb:
51:3d:e9:73:6c:92:de:bc:5d:8f:e9:ff:37:df:f3:f2:f5:46:
d6:91:24:91:cf:88:dc:d0:94:28:4b:b0:c0:db:ba:f7:8a:8e:
1b:0f:4d:fc:b3:d5:c0:5b:18:db:e8:bc:08:75:e9:8b:a5:d5:
58:37:f0:ca:11:0f:ee:59:22:31:b7:78:14:e1:cd:7c:c9:5c:
ef:83:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:40 2026 by rpki-client