Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: GO6KyWyNFttOvhzaxiZdpaSYZibK9tRnfeC0KlNX4io=
Subject key identifier: D3:1A:6C:84:35:E7:EC:41:7A:CE:C1:A7:4B:5F:EF:C0:DC:6A:46:C8
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019D9961F4FF863B0FF4CC6CB9DD2C492138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0C97
Signing time: Fri 17 Apr 2026 03:00:26 +0000
Manifest this update: Fri 17 Apr 2026 03:00:26 +0000
Manifest next update: Sat 18 Apr 2026 03:00:26 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: YNUNNYnrK4+JoaFyOuZqpatWNvE9X3V9SIcO8/v5p6A=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f4:ff:86:3b:0f:f4:cc:6c:b9:dd:2c:49:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Apr 17 03:00:26 2026 GMT
Not After : Apr 18 03:00:26 2026 GMT
Subject: CN=d31a6c8435e7ec417acec1a74b5fefc0dc6a46c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:31:18:e8:5b:e0:4c:28:96:ef:3f:59:ff:
51:62:e5:8c:3e:21:74:2a:cb:69:e9:27:80:f6:40:
7c:ab:b8:1e:a4:45:c6:86:34:c9:37:71:a3:2d:b7:
e0:50:12:09:3f:54:00:d4:c0:a6:22:e5:3d:f8:cc:
31:91:fe:47:61:a0:d6:f0:61:ba:e0:45:20:a4:5c:
71:19:47:38:c2:09:48:c9:02:61:f3:c9:cd:03:0f:
6c:55:31:ce:f7:5b:ba:28:4f:f5:bc:e4:5e:9f:9e:
49:39:06:4a:ec:b8:e6:35:bf:51:40:f4:91:9c:ef:
ca:61:70:5b:40:7f:12:59:77:17:f7:14:65:5d:18:
ba:ba:a8:99:a8:dd:58:dc:77:32:7a:e0:2b:01:28:
8e:49:24:0d:31:58:23:4c:48:60:f1:eb:51:10:d1:
ec:08:67:a9:66:c6:79:2d:41:e8:41:25:ef:71:cb:
45:1f:c8:f4:a1:89:cb:6e:d7:8e:54:14:59:21:04:
cd:ee:fe:3b:f3:33:2f:cc:a8:36:c7:05:02:18:8a:
3a:4a:9d:65:d8:9b:fd:41:83:5d:47:89:01:cf:26:
2b:40:e9:77:6a:66:f3:5a:36:0b:4c:e3:0d:d2:4f:
af:0a:dd:a5:0e:29:49:e5:34:07:9b:59:ad:b3:5b:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1A:6C:84:35:E7:EC:41:7A:CE:C1:A7:4B:5F:EF:C0:DC:6A:46:C8
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:14:f1:ff:2c:5b:cd:2e:88:76:39:48:c4:8b:1e:95:a2:d0:
57:d2:6d:2e:12:38:22:9a:90:da:19:7a:06:e1:7e:0f:62:cd:
b0:c8:fc:1b:70:35:5a:df:25:2b:ff:b8:27:4c:12:f0:8b:57:
52:c1:07:cb:60:9f:2c:2c:6c:80:f7:9d:53:00:22:29:1d:ef:
e4:7a:ca:c4:c8:f1:da:0a:5e:28:c4:fa:4b:0a:89:3f:00:a0:
05:dd:ee:a5:95:74:29:7a:ab:41:76:e2:8b:9b:e9:a9:e2:20:
53:df:d1:e3:ef:7b:1b:85:44:89:19:b9:ff:18:df:b3:f4:fa:
2f:87:ad:9d:e9:7a:0b:a1:ac:a2:ce:67:6c:23:3f:07:9e:21:
27:67:f7:a5:d4:a5:62:50:a5:41:2e:f7:14:40:78:60:00:7b:
18:0b:da:b9:c4:39:da:7f:0c:23:95:9c:9a:59:fe:cc:d6:95:
3d:03:72:35:03:a8:c1:bd:ca:3f:f0:f3:36:66:f8:85:1a:23:
b7:04:3e:b3:15:c1:e0:f7:fb:c9:a3:99:a7:51:e7:fb:52:32:
59:29:6c:c7:87:8b:0b:8a:8c:14:6b:97:16:d6:b0:e4:27:db:
12:2c:83:02:ed:dc:45:34:0d:9c:bf:44:a2:a6:11:aa:14:b2:
a5:51:81:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfT/hjsP9Mxsud0sSSE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh
M2ExODMwHhcNMjYwNDE3MDMwMDI2WhcNMjYwNDE4MDMwMDI2WjAzMTEwLwYDVQQD
EyhkMzFhNmM4NDM1ZTdlYzQxN2FjZWMxYTc0YjVmZWZjMGRjNmE0NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIQxGOhb4Ewolu8/Wf9RYuWMPiF0
Kstp6SeA9kB8q7gepEXGhjTJN3GjLbfgUBIJP1QA1MCmIuU9+Mwxkf5HYaDW8GG6
4EUgpFxxGUc4wglIyQJh88nNAw9sVTHO91u6KE/1vORen55JOQZK7LjmNb9RQPSR
nO/KYXBbQH8SWXcX9xRlXRi6uqiZqN1Y3HcyeuArASiOSSQNMVgjTEhg8etRENHs
CGepZsZ5LUHoQSXvcctFH8j0oYnLbteOVBRZIQTN7v478zMvzKg2xwUCGIo6Sp1l
2Jv9QYNdR4kBzyYrQOl3ambzWjYLTOMN0k+vCt2lDilJ5TQHm1mts1tFFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMabIQ15+xBes7Bp0tf78DcakbIMB8GA1UdIwQY
MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt
ZDU4YjA5NGRmMDZjLzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj
LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBTx/yxb
zS6IdjlIxIselaLQV9JtLhI4IpqQ2hl6BuF+D2LNsMj8G3A1Wt8lK/+4J0wS8ItX
UsEHy2CfLCxsgPedUwAiKR3v5HrKxMjx2gpeKMT6SwqJPwCgBd3upZV0KXqrQXbi
i5vpqeIgU9/R4+97G4VEiRm5/xjfs/T6L4etnel6C6Gsos5nbCM/B54hJ2f3pdSl
YlClQS73FEB4YAB7GAvaucQ52n8MI5Wcmln+zNaVPQNyNQOowb3KP/DzNmb4hRoj
twQ+sxXB4Pf7yaOZp1Hn+1IyWSlsx4eLC4qMFGuXFtaw5CfbEiyDAu3cRTQNnL9E
oqYRqhSypVGBqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:51 2026 by rpki-client