Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: tupcwWQMP/hC0EL6L4cSOb4r7tR16CfV4EW737XM+nk=
Subject key identifier: 3A:1F:0A:2F:8C:2C:49:20:D6:1A:6A:BB:86:66:A4:FC:8B:11:C2:CC
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019EC2C9718526C84736001C11F69B38F328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0D31
Signing time: Sat 13 Jun 2026 21:00:42 +0000
Manifest this update: Sat 13 Jun 2026 21:00:42 +0000
Manifest next update: Sun 14 Jun 2026 21:00:42 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: bn6kDKJ/ApF7yycX5d3YBQyRq2n8Qa2eDY3wtqlF6lc=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:71:85:26:c8:47:36:00:1c:11:f6:9b:38:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jun 13 21:00:42 2026 GMT
Not After : Jun 14 21:00:42 2026 GMT
Subject: CN=3a1f0a2f8c2c4920d61a6abb8666a4fc8b11c2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:74:49:14:fd:d6:f9:55:dc:f2:c4:5d:21:
23:b1:cd:b3:f2:dd:72:a8:81:e8:67:d2:2f:10:17:
4b:67:bf:08:c0:06:e8:5d:51:fc:f7:23:b6:ca:6a:
76:f8:60:94:a6:f2:0a:a6:a2:c0:41:ca:3a:ca:c1:
16:c9:37:3d:93:14:6a:c4:d8:17:20:2a:ef:e6:1a:
e7:5b:a6:9a:e5:71:f7:7e:e5:00:ff:00:f0:4a:1d:
47:21:18:6e:d2:23:4d:a4:a3:56:07:84:ae:3b:b6:
86:96:f0:07:c2:8a:8a:7a:90:92:60:30:0b:0e:47:
e4:a8:16:27:5c:4b:a8:77:7e:c8:b5:37:e0:80:36:
77:a3:e5:31:fb:ee:bb:2a:0e:20:44:58:e8:5f:93:
ab:a2:7f:90:3c:9c:21:45:17:f5:3e:0a:d3:59:aa:
8e:0b:e0:c7:34:2b:f4:e3:ec:c2:ef:01:0d:4c:ee:
5a:db:44:2c:b1:ed:94:6e:49:52:22:73:c4:10:d0:
14:8f:5d:57:7d:5e:91:bd:8d:d2:ee:a4:95:cd:4d:
d4:52:95:41:f2:40:7e:58:f0:be:31:de:02:c5:89:
ef:a0:d8:e5:4c:92:f8:52:ae:04:6a:5a:86:ef:bd:
65:fe:00:8d:90:0e:da:3d:d1:52:c8:76:6f:df:c4:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:0A:2F:8C:2C:49:20:D6:1A:6A:BB:86:66:A4:FC:8B:11:C2:CC
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:88:1f:26:d4:e8:3d:3f:fe:19:6e:56:7c:9e:23:50:7e:c2:
33:4d:34:49:82:0a:42:a4:ab:2b:7c:fc:49:64:8e:47:6e:d8:
bc:9f:c3:bb:39:b1:c8:d0:e9:a3:10:e4:65:18:97:80:40:35:
26:51:92:4f:f2:31:cc:48:64:a3:2d:df:91:24:27:fc:e3:2e:
d7:51:aa:56:13:6e:ed:c2:62:b6:57:11:c7:40:76:03:51:c4:
7f:90:11:45:ef:ff:98:07:01:c6:a2:53:be:81:2b:ef:d6:e1:
f9:f3:fb:48:b4:8c:56:4c:27:81:6e:9b:bc:94:8f:14:3f:8d:
6d:fc:00:92:b7:7b:3d:1b:8c:e3:9e:07:e2:e9:43:6b:7c:c6:
b2:59:d8:a8:8f:ac:8d:92:05:7d:bf:07:0c:6c:4a:2e:0f:ab:
f4:d0:9a:2a:5c:e2:90:00:84:81:b1:b2:67:6e:b5:c0:ec:1c:
98:22:ef:9d:fe:b5:82:ef:3c:3c:45:54:b5:32:4a:55:75:79:
b7:79:ac:13:b4:89:7a:57:39:e4:48:22:3c:08:1d:f4:ee:65:
93:c3:40:88:2b:b5:68:4d:5a:75:67:c3:51:49:71:40:9b:2c:
bb:b7:da:32:b2:fb:05:81:b7:9d:fa:66:34:21:75:fe:de:47:
fb:25:b5:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyXGFJshHNgAcEfabOPMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh
M2ExODMwHhcNMjYwNjEzMjEwMDQyWhcNMjYwNjE0MjEwMDQyWjAzMTEwLwYDVQQD
EygzYTFmMGEyZjhjMmM0OTIwZDYxYTZhYmI4NjY2YTRmYzhiMTFjMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEZ0SRT91vlV3PLEXSEjsc2z8t1y
qIHoZ9IvEBdLZ78IwAboXVH89yO2ymp2+GCUpvIKpqLAQco6ysEWyTc9kxRqxNgX
ICrv5hrnW6aa5XH3fuUA/wDwSh1HIRhu0iNNpKNWB4SuO7aGlvAHwoqKepCSYDAL
DkfkqBYnXEuod37ItTfggDZ3o+Ux++67Kg4gRFjoX5Oron+QPJwhRRf1PgrTWaqO
C+DHNCv04+zC7wENTO5a20Qsse2UbklSInPEENAUj11XfV6RvY3S7qSVzU3UUpVB
8kB+WPC+Md4CxYnvoNjlTJL4Uq4EalqG771l/gCNkA7aPdFSyHZv38SgpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDofCi+MLEkg1hpqu4ZmpPyLEcLMMB8GA1UdIwQY
MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt
ZDU4YjA5NGRmMDZjLzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj
LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIgfJtTo
PT/+GW5WfJ4jUH7CM000SYIKQqSrK3z8SWSOR27YvJ/DuzmxyNDpoxDkZRiXgEA1
JlGST/IxzEhkoy3fkSQn/OMu11GqVhNu7cJitlcRx0B2A1HEf5ARRe//mAcBxqJT
voEr79bh+fP7SLSMVkwngW6bvJSPFD+NbfwAkrd7PRuM454H4ulDa3zGslnYqI+s
jZIFfb8HDGxKLg+r9NCaKlzikACEgbGyZ261wOwcmCLvnf61gu88PEVUtTJKVXV5
t3msE7SJelc55EgiPAgd9O5lk8NAiCu1aE1adWfDUUlxQJssu7faMrL7BYG3nfpm
NCF1/t5H+yW1jQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:15 2026 by rpki-client