Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: gg2e6rbYFG1YgLI9TE+XHq+mn0WnK7BMajUo8gboayM=
Subject key identifier: 63:35:58:13:DB:5D:8D:87:35:23:6B:F9:B7:91:DB:D9:A4:40:83:86
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 01A1DE02885DB4D3AF5BADE01BA34E01CFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0DEE
Signing time: Sun 15 Nov 2026 07:01:10 +0000
Manifest this update: Sun 15 Nov 2026 07:01:10 +0000
Manifest next update: Mon 16 Nov 2026 07:01:10 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 8+us4D8+BtJG8rAVgnwj8kL+IeFmKV53M74srUeHyvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:88:5d:b4:d3:af:5b:ad:e0:1b:a3:4e:01:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Nov 15 07:01:10 2026 GMT
Not After : Nov 16 07:01:10 2026 GMT
Subject: CN=63355813db5d8d8735236bf9b791dbd9a4408386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:4a:93:1f:a7:8f:0c:b9:2b:97:13:8b:4f:
95:43:ed:0a:51:c1:c3:73:eb:51:7d:14:3b:9f:1d:
5e:f8:c8:b1:f1:9a:08:f5:08:ba:dd:01:b6:67:5e:
42:3a:7e:03:59:bf:42:24:55:2c:97:1d:fd:14:01:
df:36:97:ee:26:0c:81:de:d3:68:4c:63:c3:fd:f8:
1e:fd:5a:41:2d:b2:0a:c2:5d:d2:dc:77:08:c2:e9:
06:00:3c:27:10:7f:05:ea:70:fe:a0:b4:bb:cc:14:
0e:8d:37:32:1c:54:b1:0e:a7:2e:d5:10:97:82:d6:
e9:0c:fd:dd:54:e9:5d:e5:e0:fa:55:45:28:c5:40:
fc:9f:7d:cf:77:7b:14:bb:64:0e:d9:7a:4a:8f:6b:
83:8c:68:f0:63:fd:b2:7e:ec:f8:9e:e5:3a:6d:e4:
e4:a9:16:38:8b:42:c2:4e:16:8d:1a:bb:ea:92:ba:
a2:37:5d:3f:73:06:ca:18:a7:4d:7e:67:6b:b0:d5:
91:7f:15:8a:7c:91:fb:39:5b:a9:86:24:9b:2c:ed:
42:e6:ff:d0:31:17:10:d3:50:7b:5d:1d:46:15:38:
30:02:67:fa:c7:7d:50:4b:c6:ea:a6:c5:d0:0f:90:
eb:9d:1b:62:d1:04:df:65:e2:fd:fa:c2:73:18:dd:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:58:13:DB:5D:8D:87:35:23:6B:F9:B7:91:DB:D9:A4:40:83:86
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:52:f6:eb:2c:43:86:bd:79:8e:40:bd:6c:43:2e:f0:de:
7e:ee:f0:5f:64:34:68:81:42:f9:e5:52:99:4d:c7:e8:5c:61:
d0:4b:70:eb:85:34:3c:6f:41:73:25:ce:49:7d:af:02:67:6b:
1e:65:02:69:f5:9b:ee:25:b3:60:e3:34:81:e8:48:21:32:12:
e6:e2:15:28:9a:af:5d:ef:1f:ed:27:84:02:08:c4:ea:47:9c:
14:2f:44:b8:7e:31:24:92:fa:92:d1:98:c6:46:7b:fe:c0:35:
a4:2e:51:3a:a2:90:8e:fa:d0:16:28:33:af:cc:1b:6b:e3:d0:
b4:05:6c:0c:b8:ec:8c:78:ec:30:3a:e6:59:80:d5:b6:cd:33:
60:6a:a1:46:f2:f7:47:d7:ec:32:b4:fc:29:3d:72:09:2d:5a:
c3:82:2c:37:0b:a2:c2:1f:44:47:be:d2:ff:3e:0d:aa:eb:67:
50:78:3c:8e:c4:8d:39:72:97:ec:20:bb:42:a0:af:99:91:81:
b7:85:43:3b:ea:f7:03:cb:76:56:15:0a:b5:53:41:f1:dc:e7:
cf:89:d2:40:45:54:5d:55:af:7c:bc:83:2e:17:0f:94:71:e4:
e1:a7:bf:06:d3:1e:d6:4c:a7:0a:3e:da:86:82:18:37:a2:fc:
1b:86:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:40:21 2026 by rpki-client