Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: r5Rt85AgLEiEk9mEVnx/lI+BpeeJsdO2Gl2znZXVjq0=
Subject key identifier: D1:80:D4:F2:5E:3F:B1:60:00:43:BF:86:F9:4A:B5:D8:F7:4B:88:7E
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019FAC76D5B5A270EDD8C6D9F42BF8CE02E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0DAA
Signing time: Wed 29 Jul 2026 06:01:36 +0000
Manifest this update: Wed 29 Jul 2026 06:01:36 +0000
Manifest next update: Thu 30 Jul 2026 06:01:36 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: whA5pnRQD5Dc+JMg6UJRw0K+ZdDOeBTFtF+izc1CTGU=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:d5:b5:a2:70:ed:d8:c6:d9:f4:2b:f8:ce:02:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jul 29 06:01:36 2026 GMT
Not After : Jul 30 06:01:36 2026 GMT
Subject: CN=d180d4f25e3fb1600043bf86f94ab5d8f74b887e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:7b:03:af:bd:68:0f:f4:f3:4f:03:a0:d1:
95:5e:1a:fe:1f:1c:31:ef:2e:c0:4e:16:f9:81:b0:
64:28:b7:6c:d6:45:ab:91:e2:69:45:73:b7:b1:03:
ab:e2:f6:a9:28:79:79:1a:20:f6:59:fd:4e:4b:2c:
4d:b8:95:f6:dc:01:67:14:74:9e:f9:c4:87:13:59:
74:3b:23:19:bb:c3:96:bc:cd:5a:19:45:54:fc:42:
37:2a:c0:41:9d:aa:1a:da:24:1b:f8:ca:91:8e:91:
c7:d4:42:a6:f1:cd:9f:f9:c4:bb:4c:e9:49:6b:7e:
90:d0:4e:22:b9:64:da:14:07:7f:93:75:b3:d2:5c:
c8:f8:7f:cf:32:17:05:8f:ab:0c:1f:f9:9b:2b:1b:
5e:76:d4:0a:4d:db:bb:0b:80:d3:40:a6:0c:4a:b5:
b5:2d:5b:51:a7:10:8c:74:29:ee:39:73:12:c1:84:
be:f6:8f:36:bb:fe:97:4b:be:18:12:bc:90:2b:04:
e4:2c:3c:29:da:26:ff:8e:06:76:c6:f7:74:1f:12:
3a:83:2e:aa:98:ca:df:a7:c9:ac:cf:37:1c:48:d6:
27:40:17:2c:87:dc:93:86:5f:15:74:10:de:c3:6c:
c9:72:1b:ac:2e:b4:d9:33:ee:a6:ad:57:04:a5:8d:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:D4:F2:5E:3F:B1:60:00:43:BF:86:F9:4A:B5:D8:F7:4B:88:7E
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:de:a8:e9:ff:dc:f1:1b:32:16:9a:e9:93:88:22:0c:75:
02:8a:6b:dc:a3:43:74:b3:cc:fa:4b:96:66:84:d4:c9:47:5e:
bb:dd:25:58:e6:e1:7a:31:84:6e:28:48:92:d4:84:9a:bf:9d:
17:53:0c:0d:b8:54:07:78:0d:a5:9f:36:2e:1a:c1:50:bd:88:
63:95:93:fb:5c:3f:6d:05:df:d2:d4:f6:98:50:ab:ea:a1:79:
d1:57:7e:0d:ed:91:b3:e1:69:19:1a:f1:ed:13:a7:f1:88:25:
cb:ba:a9:18:b7:b2:51:13:aa:84:a8:33:0a:81:83:d8:72:15:
93:80:a2:6f:f0:4a:0b:a6:cf:0b:f6:a7:bb:81:be:da:79:f8:
d1:6c:3f:63:e3:28:41:ca:90:ab:27:8f:d6:60:20:43:97:fc:
d1:25:70:3f:33:aa:3e:7e:2a:e0:72:c8:30:1d:80:d2:5c:23:
80:9e:04:07:e2:23:51:dc:a8:d4:c8:95:bb:01:a6:93:60:3c:
10:3f:b1:48:2d:17:f5:6e:ce:2d:9f:26:14:a0:62:54:07:dc:
1b:cb:1f:62:5b:95:23:fd:14:51:4f:0f:e0:07:24:5d:53:df:
db:83:1e:38:f8:f6:b3:cf:f9:cf:a0:7f:f7:5d:46:a3:1d:c7:
65:f0:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:00 2026 by rpki-client