Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: hS88lS1MygcVhYwNE1sGKXUWt05NXi2XWhpSxhWGsRE=
Subject key identifier: 9E:8F:2E:41:77:F1:5A:84:B5:0F:46:0C:BF:B4:98:CB:CA:0B:24:55
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019D2703E14BFD44F058739C255320CDDFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0B7D
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: YBaH6cw5V887wOxxUBmgZXedzi/iK9hWFHsmBel6nQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e1:4b:fd:44:f0:58:73:9c:25:53:20:cd:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=9e8f2e4177f15a84b50f460cbfb498cbca0b2455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:6a:9a:c0:f3:8d:ed:7c:54:4a:a1:bb:19:
9b:35:6f:8e:40:be:13:73:6a:ad:47:e5:97:b8:52:
26:e0:7b:fa:c1:ca:86:81:3f:c9:77:67:0d:25:ff:
f8:68:cf:50:34:9a:6c:40:92:53:96:4e:c6:3f:d2:
b5:66:31:61:8f:99:06:e5:81:12:89:59:f5:4a:53:
ec:51:50:37:a5:03:7b:05:57:ee:ee:da:ad:f4:29:
ee:e2:02:43:71:37:e1:eb:ae:ca:da:94:87:7e:33:
b8:2b:c3:e5:c0:d2:3e:16:ba:d7:d7:65:2c:a9:e1:
74:32:8f:09:6d:77:ec:1a:30:6d:f7:3b:cd:b0:db:
95:09:a5:9b:fb:9e:4c:96:6e:2c:d1:21:44:1f:66:
21:18:7f:37:82:bb:59:44:43:0f:3e:7f:97:55:7c:
ea:9d:e7:84:32:60:e5:7d:a4:41:87:e1:b3:53:23:
33:46:e2:82:47:41:ac:77:4c:49:f7:f0:71:c3:30:
d0:db:3d:72:f4:19:8d:5b:2d:40:db:d7:3b:15:23:
1e:c6:92:cd:6a:c3:b2:24:08:5b:51:af:0d:30:33:
06:ee:d1:ac:74:61:ba:44:1f:6c:02:89:4e:9e:63:
0e:df:aa:66:d2:19:c5:d3:ba:c3:01:91:5b:47:44:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:2E:41:77:F1:5A:84:B5:0F:46:0C:BF:B4:98:CB:CA:0B:24:55
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:bb:ba:a3:ac:31:2c:69:6b:d9:1a:fd:2f:93:26:ff:f2:1b:
4d:a4:79:76:24:0f:6a:1b:2c:ad:0b:ae:e2:87:66:70:5f:36:
e9:b9:cf:81:e6:d2:31:39:f7:a8:86:ce:7e:97:51:74:25:3c:
e0:f9:33:87:4c:e8:84:16:0c:93:67:85:6d:ca:32:39:b4:df:
5b:7c:a5:53:47:6d:b8:63:ab:75:a2:7d:55:e5:5d:96:c0:fa:
5e:93:59:fd:54:1d:5c:72:22:14:9a:62:e8:6e:e1:3e:75:32:
ef:88:22:5e:6c:6e:3d:b7:9c:8c:ae:14:f3:7c:5b:b3:1d:c3:
21:95:b0:f2:99:71:f6:c3:4f:e9:00:a8:04:49:69:e4:4a:da:
8e:56:43:76:a7:fd:cc:9a:d1:f4:70:63:10:a3:58:ad:7b:9d:
c6:12:9d:98:cc:66:c7:bb:94:c7:98:14:5f:47:27:8c:8c:8a:
eb:3c:00:87:6a:1b:2f:a5:29:47:d8:b1:4b:13:80:bc:c9:3c:
12:b1:dc:cd:a2:d6:81:4d:ea:cb:98:63:11:aa:fa:2c:85:e1:
dc:88:19:4a:cb:b5:48:cf:cc:12:87:b9:eb:3f:06:2b:99:f5:
5a:0b:22:9f:b4:79:33:7b:b8:b9:b1:51:7b:08:fb:40:0a:15:
73:fe:18:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+FL/UTwWHOcJVMgzd+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjYwMzI1MjIwMDU4WhcNMjYwMzI2MjIwMDU4WjAzMTEwLwYDVQQD
Eyg5ZThmMmU0MTc3ZjE1YTg0YjUwZjQ2MGNiZmI0OThjYmNhMGIyNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptxqmsDzje18VEqhuxmbNW+OQL4T
c2qtR+WXuFIm4Hv6wcqGgT/Jd2cNJf/4aM9QNJpsQJJTlk7GP9K1ZjFhj5kG5YES
iVn1SlPsUVA3pQN7BVfu7tqt9Cnu4gJDcTfh667K2pSHfjO4K8PlwNI+FrrX12Us
qeF0Mo8JbXfsGjBt9zvNsNuVCaWb+55Mlm4s0SFEH2YhGH83grtZREMPPn+XVXzq
neeEMmDlfaRBh+GzUyMzRuKCR0Gsd0xJ9/BxwzDQ2z1y9BmNWy1A29c7FSMexpLN
asOyJAhbUa8NMDMG7tGsdGG6RB9sAolOnmMO36pm0hnF07rDAZFbR0TfWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6PLkF38VqEtQ9GDL+0mMvKCyRVMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7u6o6wx
LGlr2Rr9L5Mm//IbTaR5diQPahssrQuu4odmcF826bnPgebSMTn3qIbOfpdRdCU8
4Pkzh0zohBYMk2eFbcoyObTfW3ylU0dtuGOrdaJ9VeVdlsD6XpNZ/VQdXHIiFJpi
6G7hPnUy74giXmxuPbecjK4U83xbsx3DIZWw8plx9sNP6QCoBElp5ErajlZDdqf9
zJrR9HBjEKNYrXudxhKdmMxmx7uUx5gUX0cnjIyK6zwAh2obL6UpR9ixSxOAvMk8
ErHczaLWgU3qy5hjEar6LIXh3IgZSsu1SM/MEoe56z8GK5n1Wgsin7R5M3u4ubFR
ewj7QAoVc/4Y+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:27 2026 by rpki-client