Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: AhNoOoptq906FMoTxMGpbJ8QVArC/HemqhJ/Y6qocSA=
Subject key identifier: D1:DF:7E:22:0C:CD:13:F7:47:52:CD:83:39:02:78:8D:7D:DB:94:23
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019D2929925E503F4BEEC93BB81EA08F5E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 1134
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: CqVEZRxRSbC72IoEpBuSl-IR0oo.roa (hash: VVcs23ufU1kuCIdVVX3XyTOJgzSyJ6o05uh4XWE/uco=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: R5ncVmr2xIOuYi224fzrnY79FIeWK9NIiz0IJQAi68s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:92:5e:50:3f:4b:ee:c9:3b:b8:1e:a0:8f:5e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=d1df7e220ccd13f74752cd833902788d7ddb9423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:9a:fa:22:c9:46:8b:57:8a:81:b4:f1:6e:
eb:53:cf:ef:31:b4:7b:e2:7f:2a:46:c1:28:99:53:
d5:4a:39:41:cd:85:d5:58:b7:79:6c:b8:9a:0a:22:
10:15:24:4c:3c:fe:03:bd:d6:b7:08:e5:59:ca:68:
ba:14:0f:50:ba:9a:01:54:16:f4:76:10:bb:03:08:
ba:e9:fe:20:8c:eb:c0:2c:a2:b4:1c:a4:ce:2b:ed:
1a:e1:b8:45:05:d4:cf:bc:c8:f6:d6:cf:27:ea:eb:
b6:bb:7c:2f:51:cd:90:6c:00:6f:c4:0d:52:ba:9f:
5c:bb:f3:e0:fc:56:75:40:5c:cc:27:2b:e1:a9:2a:
7c:9f:4c:90:1d:8b:1a:f5:f6:d2:af:06:14:02:db:
56:63:eb:9b:10:bb:f8:9e:86:5c:cb:9e:48:0f:0e:
ef:89:5f:a3:f5:6e:a9:b4:b7:7c:03:be:fc:35:85:
b5:ca:7d:c4:df:7b:7c:e8:bf:65:f7:0c:14:bb:bb:
d6:7b:fa:aa:31:b6:f0:ef:60:be:e5:62:6d:34:c1:
4e:68:c3:06:10:5c:d9:6a:b3:65:4f:40:dd:d6:3d:
a5:6a:75:53:bc:70:4e:fb:3c:cf:19:21:96:eb:53:
05:95:5a:46:bd:11:b4:b5:73:3a:66:1c:5a:f8:ba:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:7E:22:0C:CD:13:F7:47:52:CD:83:39:02:78:8D:7D:DB:94:23
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:27:65:d3:a1:db:61:d2:4f:88:cb:f2:3e:ba:eb:1b:cd:5b:
07:2c:c3:36:24:47:2f:a8:82:8f:d7:6f:6d:aa:7f:0e:0b:f7:
3e:c3:c5:ec:f9:04:97:a9:4f:4e:ad:53:91:d5:47:b4:80:f2:
86:6e:1b:35:b4:fa:cb:d9:77:97:b0:24:8a:06:01:30:39:5e:
f4:0a:91:6a:ca:17:96:1f:84:90:b8:13:9c:9d:9a:26:6e:c8:
7b:aa:34:6e:11:84:cf:d7:94:65:c1:d9:26:60:42:8c:20:b2:
90:9e:14:67:2b:5b:2e:3a:dd:00:49:27:b0:b0:bc:b9:5a:a5:
46:51:3e:2c:7f:e2:2c:81:47:30:fd:f0:7d:11:e5:97:3c:db:
fa:31:66:28:16:63:d8:0b:96:52:0a:c3:cf:18:ff:55:e7:68:
d7:da:9a:da:09:24:ee:ff:b9:88:28:4b:0b:c0:7c:80:d3:ca:
12:25:e7:51:4d:39:c7:0c:72:a7:01:f1:ff:7a:df:b3:23:31:
4e:4d:2c:8d:f5:ed:78:f9:6b:cd:3e:cb:cb:10:54:2b:a9:f5:
46:84:b5:8d:46:a3:d6:d1:0e:7b:63:c6:ed:d4:9b:ec:3e:bb:
f5:a0:bd:61:89:eb:4b:d7:a2:ac:49:a3:67:34:a2:22:6b:fd:
32:d7:5f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKZJeUD9L7sk7uB6gj16fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOGU3N2U3MzgzMTNlNjU3MDY4NGRkMTUyYzJlMjg0MzMy
YjJjNWIwHhcNMjYwMzI2MDgwMTIzWhcNMjYwMzI3MDgwMTIzWjAzMTEwLwYDVQQD
EyhkMWRmN2UyMjBjY2QxM2Y3NDc1MmNkODMzOTAyNzg4ZDdkZGI5NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGa+iLJRotXioG08W7rU8/vMbR7
4n8qRsEomVPVSjlBzYXVWLd5bLiaCiIQFSRMPP4Dvda3COVZymi6FA9QupoBVBb0
dhC7Awi66f4gjOvALKK0HKTOK+0a4bhFBdTPvMj21s8n6uu2u3wvUc2QbABvxA1S
up9cu/Pg/FZ1QFzMJyvhqSp8n0yQHYsa9fbSrwYUAttWY+ubELv4noZcy55IDw7v
iV+j9W6ptLd8A778NYW1yn3E33t86L9l9wwUu7vWe/qqMbbw72C+5WJtNMFOaMMG
EFzZarNlT0Dd1j2lanVTvHBO+zzPGSGW61MFlVpGvRG0tXM6Zhxa+LoEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHffiIMzRP3R1LNgzkCeI1925QjMB8GA1UdIwQY
MBaAFJ+Od+c4MT5lcGhN0VLC4oQzKyxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYt
MzU2YzA5MzgwODg3LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYtMzU2YzA5MzgwODg3
LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbydl06Hb
YdJPiMvyPrrrG81bByzDNiRHL6iCj9dvbap/Dgv3PsPF7PkEl6lPTq1TkdVHtIDy
hm4bNbT6y9l3l7AkigYBMDle9AqRasoXlh+EkLgTnJ2aJm7Ie6o0bhGEz9eUZcHZ
JmBCjCCykJ4UZytbLjrdAEknsLC8uVqlRlE+LH/iLIFHMP3wfRHllzzb+jFmKBZj
2AuWUgrDzxj/Vedo19qa2gkk7v+5iChLC8B8gNPKEiXnUU05xwxypwHx/3rfsyMx
Tk0sjfXtePlrzT7LyxBUK6n1RoS1jUaj1tEOe2PG7dSb7D679aC9YYnrS9eirEmj
ZzSiImv9MtdfiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:05 2026 by rpki-client