
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: JaYY2lJOp+YaMYTblY1TixoPivgHnWIWMczIa0OjwG0=
Subject key identifier: 14:14:89:54:11:25:66:EA:12:F2:17:B0:FE:01:44:4F:B8:FF:B7:44
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 01A0EE8ABF12B521167ED31474D564B18426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0D72
Signing time: Tue 29 Sep 2026 19:01:05 +0000
Manifest this update: Tue 29 Sep 2026 19:01:05 +0000
Manifest next update: Wed 30 Sep 2026 19:01:05 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 7aYsDQRpqXShWB9tj6o4Ij392hAqMr2vhNJkqOILWh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:8a:bf:12:b5:21:16:7e:d3:14:74:d5:64:b1:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Sep 29 19:01:05 2026 GMT
Not After : Sep 30 19:01:05 2026 GMT
Subject: CN=14148954112566ea12f217b0fe01444fb8ffb744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:f8:02:07:4e:38:66:9f:f9:26:42:e4:6f:
29:3b:56:4f:be:6e:14:75:2c:43:a7:0e:d1:2f:cb:
85:45:6e:87:0f:d9:ec:18:8d:9d:92:2e:0b:82:06:
5c:7d:65:78:4b:32:9e:66:b4:59:38:1a:17:81:3b:
19:a4:f3:76:e3:be:e4:e0:a0:10:66:8e:09:e2:db:
84:fc:92:97:d3:a2:56:f9:c1:34:3b:6f:e5:78:de:
4b:67:d0:cb:cc:05:c5:ae:30:f4:53:52:4b:18:7e:
c1:a8:35:86:2c:13:42:ae:65:49:d2:12:a9:5e:5d:
95:9b:76:0b:c4:a2:25:f2:c0:4f:77:c7:ce:4d:2f:
e1:10:45:97:ae:94:d8:39:88:da:eb:52:3d:28:7e:
e1:8a:a1:64:ee:74:40:dd:4f:2c:fa:e0:6f:3c:b5:
9d:e3:0e:bf:8d:29:6c:82:79:8b:83:ad:9e:7c:58:
83:85:f1:be:72:34:bc:9f:dc:fa:e6:e8:4a:b0:fe:
60:d0:7c:91:b1:14:54:ee:7e:e1:2c:2c:e6:35:ed:
42:f8:55:3d:54:fd:2e:ab:fe:05:f7:30:1e:11:72:
0c:d1:05:9b:2c:0b:c2:10:be:9f:46:7c:1a:70:74:
97:3a:15:44:4c:71:1e:63:90:c5:79:e4:5f:4c:cd:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:89:54:11:25:66:EA:12:F2:17:B0:FE:01:44:4F:B8:FF:B7:44
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:a3:52:74:e4:a2:bc:7d:82:3d:0a:a6:34:ee:2c:ed:d1:
c5:3f:37:38:37:55:3c:f2:82:90:50:0b:9f:aa:8a:0f:a4:50:
62:7c:d0:26:5d:bf:08:fa:63:eb:6a:ad:a0:b1:27:e7:24:bd:
4d:02:3e:cb:9b:90:d1:f0:e4:ee:4f:a6:9a:b5:c5:20:e0:21:
68:65:3c:62:1f:ca:dc:40:f7:53:59:a1:4f:2f:34:9d:22:50:
ff:0c:4f:88:67:c5:ec:fa:7b:9d:4b:36:80:3d:9a:e0:13:99:
11:ca:e8:00:2d:3d:92:92:f5:15:82:a2:9e:ac:a7:fa:24:a8:
35:f6:a0:70:6a:54:db:1e:bb:e0:cc:99:7f:1f:cc:e9:ef:a2:
b4:17:95:79:11:ad:2e:55:32:88:cc:9e:c0:83:e0:62:bb:b9:
b4:c5:ef:08:df:a2:b0:60:0f:16:d3:1b:09:d6:5d:95:da:f6:
ea:fb:1e:be:cd:38:ce:18:31:99:ea:c6:02:a3:91:0a:81:5d:
92:d1:90:2a:37:13:6f:25:d4:ee:31:d0:a7:47:8a:ef:d7:43:
30:2a:71:ea:5e:26:19:fb:e8:8f:1a:14:26:c3:e3:5b:0d:73:
bd:52:77:15:d6:86:6f:f1:2c:82:e1:ec:5c:10:63:27:e7:a9:
dd:65:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:56 2026 by rpki-client