Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: xoREVdgAHesgHskcOsGRyJn1tFBVJruSCufWYFmGflY=
Subject key identifier: E2:02:8F:F7:81:81:2B:AE:5F:5E:25:4B:0D:4B:94:87:94:60:C2:54
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019F935BA7C39396B8A0BB73BAA345B53712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0D9D
Signing time: Fri 24 Jul 2026 09:01:25 +0000
Manifest this update: Fri 24 Jul 2026 09:01:25 +0000
Manifest next update: Sat 25 Jul 2026 09:01:25 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: TisJbIhOwHviXycgqBfSj4h5CWqe4NeWv5S17dmkuJM=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a7:c3:93:96:b8:a0:bb:73:ba:a3:45:b5:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jul 24 09:01:25 2026 GMT
Not After : Jul 25 09:01:25 2026 GMT
Subject: CN=e2028ff781812bae5f5e254b0d4b94879460c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:2c:6e:e2:0f:57:5f:b1:b1:ab:5e:83:e1:
27:7b:b1:3e:ed:1f:a0:db:20:3c:03:21:91:19:87:
d9:3a:c9:3a:9f:ff:07:2d:7a:8f:18:02:53:f4:b3:
cb:35:e5:fc:5d:92:58:08:63:e6:9f:5a:c9:50:1e:
da:96:76:5e:ec:a4:67:87:91:b1:ce:6f:92:3f:b8:
cf:fe:9d:14:ce:f7:01:96:d7:04:c8:63:1b:8b:a8:
54:ee:84:19:4f:80:78:ef:40:aa:a5:53:57:f4:4f:
a4:79:53:7e:82:ba:b8:1e:d5:c8:03:9a:1f:eb:9e:
4b:b2:ed:e2:78:e0:f1:fe:b1:53:e2:32:3a:c0:8c:
4f:ce:d6:81:8a:65:f0:87:bd:00:18:42:d0:b7:71:
5a:0f:e0:c4:44:0e:1a:56:ca:94:7f:85:51:63:10:
73:0a:b3:fd:51:d1:c9:bf:f2:37:f3:38:67:07:3a:
8d:81:a7:02:f1:ce:fc:ed:73:df:e9:1f:74:3a:48:
4d:fa:7a:60:5b:c9:b2:5d:8c:81:10:dc:34:39:d9:
5e:2b:77:c9:a1:09:6f:e8:02:1d:94:94:da:07:3e:
f8:85:3b:54:0d:93:f6:b2:a9:73:55:c0:70:8d:86:
b5:3f:f1:29:92:8d:e6:6b:f9:21:d1:61:f4:96:ce:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:8F:F7:81:81:2B:AE:5F:5E:25:4B:0D:4B:94:87:94:60:C2:54
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:45:c7:33:6f:43:83:a5:2e:ca:e4:a4:81:98:86:48:26:d0:
8d:c8:de:5a:1c:f1:2f:04:67:23:ed:40:99:2b:5c:85:35:f7:
90:fb:4f:4c:9a:be:04:cd:2f:ce:d8:d8:eb:04:b7:70:3a:78:
26:02:f5:4c:da:cb:06:76:48:eb:e5:48:21:8f:67:bd:4c:9f:
dd:15:0c:e7:99:34:b8:0d:c4:25:94:25:76:51:fb:b0:3c:79:
f6:db:f6:91:44:ab:ee:9c:38:00:0c:b9:02:1b:10:0c:38:4e:
43:fe:c9:c5:7e:3d:4c:aa:0a:21:85:a4:74:d2:e5:00:51:a6:
c5:d6:42:4b:ae:77:2e:bd:dc:4f:ab:f9:66:4a:ba:65:27:ff:
c5:23:12:21:46:47:e2:4d:5a:03:00:a1:f2:e0:a3:d5:e9:f1:
37:a8:b7:5d:95:27:3e:a9:1c:f2:26:8a:1a:f3:74:91:a9:02:
0e:2d:39:d6:50:a4:74:75:a8:91:d8:a1:5f:58:c0:f2:da:b2:
20:92:02:21:a3:39:47:a4:b4:09:df:ff:56:0c:5c:8c:b5:06:
b5:b4:b4:6a:a7:af:30:3c:4b:59:1c:2a:66:22:6e:a7:3a:c9:
d1:8d:a2:da:c3:a2:f7:1d:ad:3f:5a:8e:a8:1a:b5:1d:77:4b:
7b:f0:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:06 2026 by rpki-client