Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier: Ba38wJ9z7OLGmCfHIQlpliVZP2Nn6e0bX+aLjuvrhyY=
Subject key identifier: 71:E5:C2:B3:46:FD:13:F9:98:58:DB:CF:CA:1C:6D:30:F1:4E:7D:77
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019E92827BCC23CFB3E8DBDAF8D817F85A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number: 0D18
Signing time: Thu 04 Jun 2026 12:01:25 +0000
Manifest this update: Thu 04 Jun 2026 12:01:25 +0000
Manifest next update: Fri 05 Jun 2026 12:01:25 +0000
Files and hashes: 1: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: iF2/RvW9CPoStnQ7TVQgeBhsKTy9ZTnWoRwcRBQafIc=)
2: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (hash: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M=)
3: evxnjaip1AzjgILBjbohckUsyak.roa (hash: Ozs5nmK24Gf/BVVlEGVqHEOfnLsepuEnPvJPXeET8oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:82:7b:cc:23:cf:b3:e8:db:da:f8:d8:17:f8:5a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jun 4 12:01:25 2026 GMT
Not After : Jun 5 12:01:25 2026 GMT
Subject: CN=71e5c2b346fd13f99858dbcfca1c6d30f14e7d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:c4:ca:40:d2:7f:66:b3:ed:17:96:0b:a5:
d1:c4:00:f0:39:c3:56:90:c4:ee:9c:08:84:c1:07:
d4:12:75:c8:4a:72:12:4e:47:0f:e2:bf:44:a2:6e:
93:e7:fc:f2:dc:66:5b:08:7e:10:de:79:b0:b0:98:
e6:a0:91:e1:95:79:6a:56:88:47:f4:f2:87:7b:a4:
5e:1f:da:d7:b0:96:b6:60:c7:10:32:3f:82:4d:9e:
bf:e8:01:7a:bb:a9:d9:e8:95:61:f8:48:6c:87:7e:
15:3d:7b:30:b9:e1:88:69:fa:a9:96:36:41:88:fb:
e9:3b:15:af:79:1f:f4:4f:f6:3a:32:c5:e0:e5:90:
76:cb:fc:a4:7c:a2:bd:a9:a7:0a:72:38:4b:0b:e6:
2d:a0:37:71:80:99:98:c0:af:20:10:6f:b6:06:17:
fd:3c:fa:65:c9:73:73:4a:34:12:fb:95:c8:d4:65:
fd:82:35:26:c7:75:90:e4:05:70:bd:56:d6:b2:da:
80:50:7f:60:35:26:bb:26:7c:47:0e:76:72:96:7c:
0c:6e:2f:cd:a1:59:2a:f6:21:af:3b:39:74:41:f4:
ff:fe:ec:19:b1:61:7a:e1:90:65:0c:38:c5:09:1d:
54:2e:51:11:59:e0:96:48:09:01:f2:bd:06:87:89:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:C2:B3:46:FD:13:F9:98:58:DB:CF:CA:1C:6D:30:F1:4E:7D:77
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:bd:ea:aa:dc:e1:2e:0d:70:d6:17:d1:ea:ff:c2:35:b2:
74:c6:04:d6:be:ea:2b:db:53:af:0b:5f:0c:f5:b7:af:4d:20:
ff:a4:de:b2:2e:9a:63:d6:67:1a:e1:fb:56:10:8d:a4:a0:f9:
0f:31:01:96:48:f5:26:90:91:cf:b2:90:cb:c0:56:85:55:ff:
37:3e:06:69:44:85:09:af:9d:c3:24:60:cf:3c:b9:94:15:5c:
17:e6:36:6c:2d:02:0c:7e:06:d9:fc:37:92:ea:a5:52:5b:29:
29:20:b9:8d:78:48:2e:73:0a:ce:50:d0:61:2d:9e:07:50:ff:
a9:9e:93:a5:8e:74:7c:6c:60:d9:1c:af:fc:29:cc:5b:be:d3:
6e:85:c6:1f:2b:67:c1:93:5a:1d:cd:cf:e8:c9:56:f8:c7:fc:
1f:2f:f2:11:00:37:46:fc:78:f3:1c:f6:59:14:f6:57:34:89:
98:94:80:4a:8a:ad:af:d3:58:5e:b6:b2:df:ad:b0:36:8f:f7:
48:cb:3a:67:b7:53:bd:b3:ff:2a:84:57:ff:68:98:4f:da:86:
1b:b4:51:14:80:3c:4e:68:96:ac:fa:5d:f7:94:77:c4:92:ac:
ec:d1:49:40:d5:4b:8d:70:af:27:16:d3:25:72:81:5d:6f:7b:
ab:b6:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 18:18:25 2026 by rpki-client