Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: yxr5a/hfcVj41WGmBZV/0nknDeUUFjsPjl+1W8QLdQY=
Subject key identifier: 36:C0:68:17:1F:D1:3F:8B:4A:15:0E:9A:53:24:7F:3A:64:BE:60:B2
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019F94DBB0D326686CE03C3FB1ED0ECCA4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0CBF
Signing time: Fri 24 Jul 2026 16:00:53 +0000
Manifest this update: Fri 24 Jul 2026 16:00:53 +0000
Manifest next update: Sat 25 Jul 2026 16:00:53 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: nsvv+j7SecFXjKzt7HZM2a0MPBtDdegMWBvLPliVNH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:b0:d3:26:68:6c:e0:3c:3f:b1:ed:0e:cc:a4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Jul 24 16:00:53 2026 GMT
Not After : Jul 25 16:00:53 2026 GMT
Subject: CN=36c068171fd13f8b4a150e9a53247f3a64be60b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:30:70:ea:cb:67:54:27:f0:e7:af:5d:c9:
f2:c5:01:b4:75:cc:18:6d:6a:5e:7f:df:8c:15:af:
61:8c:e6:93:ad:1d:f2:99:33:0e:5a:e9:87:4f:a6:
cb:53:a4:61:8e:01:e1:6a:27:2e:20:e7:27:e8:96:
4a:c1:fd:69:1c:43:e6:79:73:69:d0:41:b8:cb:44:
ec:46:8b:27:81:61:ef:78:8b:7a:e5:3b:85:cc:2e:
fc:a9:51:f1:35:61:74:6e:df:c9:46:6f:27:72:f9:
00:78:1f:d8:52:eb:61:e1:ab:54:10:4d:1c:d0:02:
ff:8b:97:85:d5:01:32:bc:4f:5b:57:1d:e9:77:22:
bf:e9:c2:64:14:40:0c:9f:86:67:67:5a:3e:d6:95:
01:4a:a1:ab:84:bd:c1:1b:cf:1b:67:77:1c:f5:61:
34:04:76:b5:3d:fe:48:3d:69:6d:7a:9f:75:64:0f:
6d:05:4e:6a:f2:a6:99:84:5e:1d:c5:4c:b8:ec:4c:
51:68:b3:fe:ab:73:ad:be:3f:b4:7b:68:f4:45:c7:
e6:5a:73:7d:dc:9c:fb:36:f4:f0:8a:9e:05:63:5a:
52:17:00:1d:ef:76:ac:f8:b3:bf:c0:69:11:18:eb:
c4:be:7c:43:4f:7b:e7:a8:ba:cb:85:c0:3b:23:97:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:68:17:1F:D1:3F:8B:4A:15:0E:9A:53:24:7F:3A:64:BE:60:B2
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6d:e8:98:84:6f:72:3b:dd:ad:79:cf:4b:eb:a0:81:41:2e:
fc:3a:3f:28:62:d9:76:4f:e2:eb:a6:9b:f9:02:da:bb:a3:57:
40:e9:0e:0c:67:67:1c:e9:a7:ed:4d:9e:4c:62:6b:0c:52:85:
64:0c:57:f2:e8:15:49:c1:be:fd:ef:c9:be:fd:a1:08:f1:34:
50:57:07:de:55:2d:b2:d4:13:af:0c:da:8e:58:88:f3:da:3f:
8c:be:11:8b:7c:e3:67:b3:61:a9:85:54:ba:e9:0f:f1:1b:c1:
5f:25:ab:cb:53:15:62:e0:9a:a0:04:76:35:f5:21:73:59:9b:
d5:2e:fe:3b:3e:0c:2a:2c:9b:da:c6:88:e3:ea:cb:cf:75:f5:
67:de:8d:7c:76:55:05:71:cc:2a:0f:2b:10:87:27:1a:8f:75:
89:3c:c8:ce:c8:c6:fc:b2:91:2d:ba:f5:d3:93:63:6c:f2:50:
cc:8c:31:55:9a:88:cb:88:16:6e:6b:2c:72:61:d3:2c:8e:cb:
be:cf:6e:9c:45:0c:e2:60:02:fb:30:56:4c:c1:31:fb:f5:52:
1b:90:cd:13:74:ba:d3:c2:e8:b7:e5:8a:fb:eb:dc:63:ed:b4:
82:5c:d6:fb:0a:c9:c4:23:a3:4c:f9:ac:17:e3:0f:83:33:6c:
06:03:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:11 2026 by rpki-client