Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: Nwdy9Q5YyPhs6obbkBkgogY1vYxW53OhGfXpuvI3HhY=
Subject key identifier: 7A:AB:13:E7:21:2B:7E:7A:9B:E5:4B:57:9B:19:22:F3:74:82:C7:A2
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019E1E360645576C2BF6AA99DB9909F1BCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0BFD
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: QoVc5FXQVTbksGzC5QXGOOWgURddNDWvYC7P3VAvNx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:06:45:57:6c:2b:f6:aa:99:db:99:09:f1:bc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=7aab13e7212b7e7a9be54b579b1922f37482c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:24:c4:a0:ee:39:b9:08:87:54:fc:e3:e3:
5e:a2:b0:e5:dd:39:ae:c7:ee:fb:11:a6:d2:f3:87:
5d:f8:eb:b1:ba:19:7e:20:65:b3:7b:62:aa:1a:ba:
63:1b:a1:fe:d1:97:b4:42:5e:7f:73:ae:b6:2c:87:
ef:cc:56:39:1d:c6:cc:39:08:f9:9c:58:0d:e9:73:
c0:d2:e2:3b:bd:ad:c2:5b:9e:6e:63:08:53:07:41:
e9:58:7b:e8:95:90:9f:19:78:dc:07:36:3f:89:27:
31:2a:0c:d8:fd:a4:c6:20:cf:26:3b:07:b4:30:fa:
9e:77:75:3e:7a:86:44:c8:8e:6e:b9:74:5c:38:51:
85:91:ec:4d:15:23:dc:6c:c4:23:de:6a:ef:57:58:
a0:3c:a3:9a:73:f2:86:b2:64:05:f8:e0:f1:9c:2b:
33:ac:5b:eb:cc:b1:6e:3a:82:c1:1f:80:51:87:93:
18:b8:d1:c8:0b:6c:e9:3c:82:bd:37:b8:26:bd:fa:
af:e2:4c:80:b2:b0:cd:db:b1:66:ae:21:09:b4:3e:
48:ce:e9:60:29:ea:2a:3d:7a:ed:22:98:12:e4:0f:
9a:aa:70:93:af:b0:11:4b:d5:5a:2f:43:da:76:dc:
37:c9:e1:e7:20:95:1b:1c:22:14:04:27:11:9e:3a:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:13:E7:21:2B:7E:7A:9B:E5:4B:57:9B:19:22:F3:74:82:C7:A2
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:ec:2a:e2:45:a1:bd:20:a9:49:e1:52:ed:f5:57:ad:5a:
cb:32:19:c3:49:fb:d8:49:f5:e4:b7:7a:b2:7a:40:7a:59:8a:
ec:55:ec:6a:a6:70:8d:64:93:8c:b2:b6:f8:4c:9d:01:73:67:
dd:63:e9:22:42:2f:89:cb:be:25:94:16:68:c7:d0:4e:81:3e:
fb:6d:bc:1c:da:42:98:7b:59:5e:9f:e5:0c:2e:d4:db:2a:06:
ac:78:74:4b:3a:67:a0:c3:18:2a:e0:34:29:6d:93:97:f9:d8:
5d:88:a4:6a:30:4d:3b:aa:91:42:b0:3c:67:74:94:4e:5e:3b:
d1:99:ee:65:33:5d:1c:83:02:cd:77:67:72:d9:42:c1:22:70:
69:57:0f:9d:0d:a7:cc:f8:c2:0b:27:02:74:4b:ec:52:d5:d8:
38:e2:c1:b0:d0:01:15:27:11:27:4c:0a:86:3c:11:33:7c:e6:
0a:a1:30:1f:b2:e4:bb:81:ec:56:8d:0f:7f:69:d4:d6:64:4b:
0c:fb:c0:bb:ff:ef:38:d9:ab:f9:00:c4:8e:29:9e:04:d9:16:
8a:f5:43:4b:2f:bf:87:9b:b6:e5:3b:3e:3e:a0:d2:be:1b:d8:
a2:80:0b:7d:0c:d8:20:59:7c:53:13:39:93:ae:7b:9c:2f:18:
c7:54:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:59 2026 by rpki-client