Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: UBbWAwKTyLslB9FoLnUvfJCUs0eiy/BMfNZOBksAsaE=
Subject key identifier: CC:7F:8F:C6:B2:02:99:56:A9:F4:29:96:4C:65:C2:7A:94:CB:77:D9
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019D29613A2E9D202575098AA01FE1867622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0C5D
Signing time: Thu 26 Mar 2026 09:02:10 +0000
Manifest this update: Thu 26 Mar 2026 09:02:10 +0000
Manifest next update: Fri 27 Mar 2026 09:02:10 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: 4BRRvtIzhjqV5Dkg8q8TcaPCWpo4d5ZLyQKNqIdEQUs=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3a:2e:9d:20:25:75:09:8a:a0:1f:e1:86:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Mar 26 09:02:10 2026 GMT
Not After : Mar 27 09:02:10 2026 GMT
Subject: CN=cc7f8fc6b2029956a9f429964c65c27a94cb77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:d1:5b:22:ac:03:07:11:90:87:9c:31:b5:
1a:99:55:8f:b0:1c:a7:20:cc:29:b1:c1:57:70:b0:
9f:f1:cc:ab:1f:61:25:f7:d3:ad:5c:4d:4a:79:78:
42:ec:36:83:24:8e:b1:8f:e4:a2:0c:61:f5:c6:00:
2d:e2:07:91:5f:6a:2b:8b:b8:69:4c:11:b7:96:4d:
1d:68:e4:78:54:f1:0b:37:c6:d3:7d:ce:7f:de:4b:
64:45:ed:03:9e:a9:f8:d3:fc:ec:3d:79:01:e4:73:
75:70:1c:9b:ae:2a:9c:15:a3:6e:dc:9b:2f:41:98:
cd:bc:e3:ec:c2:47:c0:32:fe:b6:64:5c:51:64:ca:
5f:17:91:10:4a:ec:94:f6:b9:b2:66:09:6f:eb:d8:
39:29:43:b4:1a:ad:51:bc:c6:96:19:3e:ec:66:67:
39:99:a1:36:e7:08:63:f7:34:a3:d4:6a:38:ce:25:
00:4b:90:b8:c7:91:f9:c9:52:fd:fa:57:60:32:04:
b6:7b:aa:62:82:f9:18:8d:6d:75:b8:6d:1b:2e:99:
d0:50:00:a0:ad:71:e8:09:c7:a7:98:70:45:81:7d:
d0:46:50:19:9f:fa:4c:a8:c9:a4:c8:10:37:73:c5:
06:7c:df:ad:23:92:fa:8a:05:53:6d:0a:3e:f0:f8:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:8F:C6:B2:02:99:56:A9:F4:29:96:4C:65:C2:7A:94:CB:77:D9
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:6b:cb:04:60:9e:87:af:c1:2e:37:1b:5e:0d:46:5b:bb:
a7:ac:73:c1:d8:49:9c:a9:ed:71:d6:af:c8:37:6f:49:5b:be:
54:d4:68:24:07:b8:a5:0f:3d:77:3c:87:4d:2c:69:76:0c:75:
63:a1:38:da:9e:27:37:9a:c8:09:a4:2b:ab:96:44:a4:64:50:
77:f0:5d:37:14:64:3d:c7:5e:8f:c3:92:9a:8a:4a:01:f9:55:
7d:cf:64:2d:fd:76:43:7d:d7:1e:42:4f:05:32:af:f2:29:54:
26:ec:18:ef:41:fc:5f:1e:bb:c4:da:6f:1d:12:9a:48:5e:34:
df:a7:da:33:62:9f:d2:12:30:ee:72:a1:81:33:0d:b9:d6:b7:
7f:3c:20:68:78:d8:bf:1d:bb:f4:66:2e:a6:dd:52:f6:92:c9:
c9:d8:14:73:d9:17:25:38:2a:61:02:bb:ae:d5:9f:23:db:b9:
fa:dd:0d:79:cb:2a:36:58:a0:e5:1c:33:da:c3:70:e4:57:ee:
70:d7:1b:a1:57:a0:f1:19:0d:14:6d:0b:b2:bc:c6:f1:5e:81:
ab:23:a3:bf:e8:f6:89:34:8f:d1:eb:7a:32:0a:1a:e6:d4:7a:
76:8f:f6:e1:75:b2:8a:7a:df:30:7b:a3:90:fb:6a:95:90:0e:
af:31:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:42 2026 by rpki-client