Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: 60zObZEgI49yT/qBCgCZ9P8HeU41eYxoNdRD3AqHFEo=
Subject key identifier: 21:8D:7F:E6:93:AD:F0:F2:ED:81:AA:92:0C:36:99:BF:FD:C4:6B:74
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019CADC75973DD6598213F22BB6EBB9F0F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0C1D
Signing time: Mon 02 Mar 2026 09:00:48 +0000
Manifest this update: Mon 02 Mar 2026 09:00:48 +0000
Manifest next update: Tue 03 Mar 2026 09:00:48 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: ZKyjiQvU55Ht8mr5Pcx5svdM8e5kXwWkdC7LaZbwT/g=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:59:73:dd:65:98:21:3f:22:bb:6e:bb:9f:0f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Mar 2 09:00:48 2026 GMT
Not After : Mar 3 09:00:48 2026 GMT
Subject: CN=218d7fe693adf0f2ed81aa920c3699bffdc46b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:65:c5:b2:d0:36:fb:ee:eb:2d:30:fd:78:
c5:9c:cc:96:0b:45:b7:84:fb:df:95:a0:cd:ce:41:
14:90:72:76:ac:75:f9:37:f4:2a:61:15:43:f8:54:
91:ec:93:3e:90:12:88:42:30:bb:38:73:dd:36:cc:
53:19:8e:17:93:15:61:84:c4:0c:d0:aa:f6:ba:48:
81:d7:9e:e0:8b:a1:f5:db:7a:7c:58:20:2f:b1:e4:
5c:2e:a5:df:be:05:9e:66:19:01:8b:1f:40:c2:b0:
be:33:67:9f:37:50:a8:bc:6c:80:7d:6c:bb:d9:4a:
a1:1f:47:87:da:62:ec:cc:dc:83:77:73:49:a7:c4:
31:3b:a1:94:5f:3b:9b:43:31:6f:92:7d:2f:31:72:
63:06:ca:ac:e7:05:75:3d:fc:4a:08:0c:43:10:70:
a1:dd:b6:61:3e:be:48:51:86:8e:31:92:8a:e7:26:
75:49:d3:07:37:a3:1c:04:89:63:e2:51:20:bb:8f:
c3:61:39:1e:16:11:ba:a3:f2:d6:64:87:32:ff:26:
4a:42:84:ec:ff:d7:87:3b:b8:03:4b:56:73:b0:8b:
51:76:42:9d:ad:d3:7a:60:34:7e:ed:e7:4f:6b:ee:
6b:7c:f5:87:c4:ab:13:c7:6e:63:17:78:0e:82:3a:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:7F:E6:93:AD:F0:F2:ED:81:AA:92:0C:36:99:BF:FD:C4:6B:74
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c1:bf:88:38:78:24:6b:41:9e:cf:62:18:7b:b9:8f:e8:79:
9d:d6:e4:88:11:8d:2b:83:88:33:90:25:4e:07:86:ad:91:ac:
fa:dc:15:ef:9d:89:dd:28:32:9a:c6:13:28:2a:e1:94:c4:ae:
31:f2:91:f9:c2:e0:6d:92:9b:86:01:b3:21:5d:af:35:e3:b8:
1f:4e:39:03:0f:30:55:7f:b9:c1:9a:1f:3d:c5:1d:e2:57:5d:
e1:57:10:5d:94:8b:aa:c1:87:29:d6:a7:fe:44:08:11:43:27:
13:94:5a:d2:7d:00:ce:d2:ce:4a:1e:d0:41:57:3e:3a:91:e0:
8c:04:8d:d2:40:51:94:43:21:4d:ff:fa:4f:70:f1:8e:bc:de:
cb:f8:4f:9b:d2:1f:d9:b0:12:3f:64:69:3c:f7:3a:32:61:15:
1b:8c:7d:65:e5:e8:ce:a8:08:0c:ab:ae:57:88:15:27:e0:a4:
e5:42:6a:0d:5e:b1:a2:e2:29:b5:31:fe:67:e7:9f:83:a0:42:
e7:f2:5c:0f:d7:c2:49:2d:11:69:ad:fa:e0:c5:5c:39:c7:f6:
9f:3b:19:c2:b1:ec:6f:cd:0e:a1:6c:db:3d:8f:81:9e:ff:06:
d1:26:ed:a9:b2:39:61:40:a0:05:d1:fd:78:2f:35:56:3f:1e:
b8:ce:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:02 2026 by rpki-client