Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
File: n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft (raw, json)
Hash identifier: 3MYySa9yLD3WIW3/Jli9hgPreLZdMzWh/yOaPA2YwRQ=
Subject key identifier: 5B:AD:B1:4C:73:C4:3E:4B:2D:B6:A6:BE:90:BC:CB:7F:48:C7:30:D5
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F95491E6A9C5C61161E4ED645F74D7616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:24 +0000
Manifest this update: Fri 24 Jul 2026 18:00:24 +0000
Manifest next update: Sat 25 Jul 2026 18:00:24 +0000
Files and hashes: 1: 3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa (hash: PQf0TYbRUaWDGilp0A7TiyN7qbDatKPuZrY3XALzNR4=)
2: 9RxYfwpOllVmFbUnzc-gHoabB44.roa (hash: /FmEDajuom+xgc2h3TGSfCVMlt4s5+O8iK3GFZc2cpQ=)
3: C3dLx6qeIik8HQR643ArrOFcxWw.roa (hash: pfrW5zSUbSnHsyVL3Nxv55eIHRIZ43KSi08lC2fGId4=)
4: G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa (hash: pP2ZidmFasR/WmTJoaBDlilJcJecRSWLlBbfYiRpn4M=)
5: iPUEtdk8uK7It4e5YIwhrS-blIY.roa (hash: cCrIx5/3xv9yTrz1ALRR0gRJeVouvLvQFBFUHgTs3vc=)
6: n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl (hash: OII3yAp+LLN6Vn9Pkn+hrMPHEk3nHbFsvFk60lCeaq4=)
7: q_09y7kzQ35Hofngi_hiaffCZwA.roa (hash: sHIfF0cJoyvJ2aYaxzmWds00JZ6y6D950zXoaEnnPTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:1e:6a:9c:5c:61:16:1e:4e:d6:45:f7:4d:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 24 18:00:24 2026 GMT
Not After : Jul 25 18:00:24 2026 GMT
Subject: CN=5badb14c73c43e4b2db6a6be90bccb7f48c730d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:30:01:59:d6:5b:d2:7c:e3:7e:c9:8e:a3:
85:5a:55:b6:43:38:75:a1:e9:3a:b7:1d:38:65:00:
30:13:c9:0f:51:65:90:cb:ba:9e:ec:34:20:ad:c5:
67:7a:7b:c9:6a:52:04:f5:0e:b1:6a:62:99:a5:49:
9b:25:1b:74:77:f6:b7:02:68:da:1d:69:b9:49:d2:
8c:d2:12:6d:9c:00:e7:21:4d:af:f6:95:5e:00:48:
ae:b5:d9:f3:2a:ce:3e:0a:61:cf:d0:f4:21:b5:f2:
55:74:2b:dc:0a:76:09:d4:48:53:e5:75:24:ac:24:
33:c7:62:6a:62:8d:dd:03:7b:1f:8d:46:bf:03:87:
ff:40:83:6e:3d:ec:95:a5:04:75:79:d8:9a:87:9a:
65:79:e6:5f:0a:ef:33:d8:6e:0b:f9:78:8f:9f:23:
2f:40:90:a8:61:17:c7:e2:20:28:d7:1b:e9:dd:68:
86:8c:5a:e6:6e:f8:c1:97:a1:db:ba:f1:3d:3b:88:
f4:5b:5c:2e:59:cc:ee:0c:4d:e4:e5:1f:9f:83:c2:
13:4f:f5:bf:e8:aa:b8:d4:13:a3:e9:8b:38:c2:5f:
3c:17:1e:01:de:71:4a:59:5e:12:74:2a:8e:34:b1:
86:ba:7f:dc:82:94:63:c1:58:65:83:bb:99:9f:01:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:B1:4C:73:C4:3E:4B:2D:B6:A6:BE:90:BC:CB:7F:48:C7:30:D5
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:43:65:57:39:15:da:5d:fb:96:43:f3:d2:0a:ec:b9:8a:c1:
7c:52:a6:68:86:96:c4:c1:9f:63:af:57:dc:ae:ec:70:4a:92:
67:87:bd:22:32:7f:00:3c:e4:3c:98:86:5b:c4:b4:a1:5e:ba:
72:c6:8f:76:b9:d3:cf:3e:0a:d9:90:8c:a6:48:d2:f2:ed:11:
51:c4:f3:4d:08:97:33:3c:d7:30:f1:bb:95:46:e6:e3:f0:86:
00:86:a6:8c:3b:f6:11:60:b7:4d:6c:9d:e7:fe:a7:a6:9c:17:
ef:7a:a5:80:0a:76:66:38:c4:42:f5:d4:54:fd:fc:d7:5b:bd:
b5:c9:c1:16:3d:00:a2:60:7d:c5:cb:2f:c8:be:91:11:85:d7:
47:78:a3:a6:e0:4a:d3:34:45:9c:b6:ba:7e:aa:04:ca:d0:e7:
78:b7:df:ae:e2:20:ee:68:09:53:75:60:92:24:a4:cb:9f:14:
18:57:d7:97:27:94:c5:28:24:d5:d1:cd:e2:e5:4d:48:42:b4:
9c:0a:90:c5:1e:e5:80:46:ff:ca:84:98:09:59:20:2c:14:03:
bd:ea:86:1b:b9:9b:b5:9d:4f:23:b4:8d:de:e7:cc:37:6a:85:
3a:5e:69:be:e6:c7:9b:5e:bc:e0:dd:85:79:32:72:f2:83:08:
a4:ac:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:41 2026 by rpki-client