Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: 6MYOa4gU4PMF3+BC8idMlE3/7aqYDFGa0wlCZZqFrFo=
Subject key identifier: 80:70:FC:11:24:A5:32:2D:C5:72:FA:97:C0:58:89:08:7B:ED:C6:4C
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019D2B4E4E04D20D6CDF1961AE8EA5B8CDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0C5E
Signing time: Thu 26 Mar 2026 18:00:45 +0000
Manifest this update: Thu 26 Mar 2026 18:00:45 +0000
Manifest next update: Fri 27 Mar 2026 18:00:45 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: DPuXg4dEBX93lw38N5kIDW6eqMlFoavAPXDJwHxwwr8=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:4e:04:d2:0d:6c:df:19:61:ae:8e:a5:b8:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Mar 26 18:00:45 2026 GMT
Not After : Mar 27 18:00:45 2026 GMT
Subject: CN=8070fc1124a5322dc572fa97c05889087bedc64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:92:31:7f:32:05:37:17:60:38:6d:77:9f:
15:69:24:66:d3:bd:5b:e1:1e:fb:cb:45:fe:82:98:
a3:6b:67:2b:e4:66:ae:b9:52:76:90:a2:f9:cb:ad:
55:ea:a6:f7:a1:2b:f8:32:7b:08:ac:e4:a4:9e:eb:
44:c1:fc:44:da:f3:e1:d0:dc:a0:49:6b:37:ba:c7:
2c:fe:e3:59:e2:21:e6:8b:51:10:20:43:da:b4:f0:
30:19:d1:95:47:29:bb:b7:27:17:46:0a:b1:ce:b1:
83:d5:b6:d6:06:53:86:74:46:d5:eb:92:60:74:5a:
f7:7d:13:68:03:8e:5f:27:8f:2e:63:2d:7b:64:1d:
98:98:ff:b9:17:94:68:db:7b:08:b9:a4:91:ef:6c:
05:c4:ab:68:41:e9:69:20:0a:b3:44:78:72:65:dd:
9c:9e:03:21:c2:cf:18:d0:62:33:b9:16:2e:bd:9f:
4c:d2:14:7d:4d:d1:fa:db:71:04:33:1e:9a:e2:c6:
1a:36:e0:e6:ba:f2:d6:f0:ee:52:d3:db:24:fe:9a:
78:5a:4c:32:f0:ba:bf:8b:2a:59:96:3a:7a:dd:c8:
24:4b:10:07:57:8b:4b:42:ed:38:75:77:e1:f5:90:
83:10:62:dd:f5:f3:ba:93:90:3c:1f:25:b3:93:af:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:70:FC:11:24:A5:32:2D:C5:72:FA:97:C0:58:89:08:7B:ED:C6:4C
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c4:3d:10:aa:52:bb:80:dd:af:fc:c4:fb:f9:a9:88:91:a7:
c9:b4:d5:af:32:9d:b5:69:7a:69:f4:07:7a:d7:4d:fd:2e:52:
69:24:fd:8c:72:0a:ca:06:6a:27:27:a5:c0:40:54:c5:54:74:
05:1a:42:a0:e7:d5:f4:b7:ef:81:0e:f9:89:15:51:a0:2b:4e:
f1:b3:5e:2b:75:2b:4a:00:0f:75:e0:95:c4:70:e1:13:e2:ac:
f2:3e:d7:51:73:d5:62:3d:f4:f4:3d:c7:3b:9a:b7:61:6f:45:
09:89:21:6f:25:c1:9a:fc:d9:32:10:29:0e:3d:18:82:98:a6:
7f:45:c7:8a:77:a1:81:c7:10:cc:9a:31:85:7c:fb:52:23:d9:
4d:2b:7e:2a:4c:24:b1:c2:03:90:92:90:53:57:49:5b:4b:c6:
02:fb:4a:6a:67:9c:a2:1e:c2:3d:48:2a:33:7a:13:09:e7:ca:
0b:fc:18:bd:48:af:94:fb:2d:c4:a8:56:60:e4:bf:7a:80:f7:
9d:45:28:b2:41:3d:b9:97:0b:bb:36:55:1d:ab:be:59:70:bf:
97:27:d6:24:bd:df:5d:32:44:0a:31:51:10:f4:20:91:74:d8:
a2:5a:a3:e7:1c:c9:c7:27:fb:a4:5c:15:74:2a:26:6b:b7:fe:
26:84:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:22:49 2026 by rpki-client