Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: eudCoWwi++xA0IrIFiBmaiNL0h7RR2+N0g0Y+kHqHh0=
Subject key identifier: 9F:7B:4B:37:72:15:AC:15:E1:5F:75:B7:7D:5A:ED:C9:70:BD:D8:2E
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019D25F1E87042D5F7AFDD82D12D01D6D7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: ch1WA8KPWtT4lbnmhdRbUoInvrQ.roa (hash: KNYvYxr90wZ08HAn6IO/kJkxO2ei4FC5py65h6CmekA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: H2UAARm8a8HpncIdhcpIiOU0BwRqVfqK0i7Fq9s40a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e8:70:42:d5:f7:af:dd:82:d1:2d:01:d6:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=9f7b4b377215ac15e15f75b77d5aedc970bdd82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:d7:87:66:ae:6d:18:70:31:cf:89:5e:80:
81:1d:27:99:3f:d2:59:2d:ff:ae:6d:67:a5:2f:6b:
fe:84:d8:62:84:72:08:dc:8e:f1:c2:0b:c3:d7:c4:
fe:e5:90:d2:97:12:39:b9:25:cc:65:0d:46:2d:0b:
b6:9f:93:34:f7:36:bb:98:48:ab:30:b6:1c:d4:bb:
e8:54:8b:47:af:87:20:44:47:d4:92:08:84:e2:76:
12:4e:31:67:c8:ff:43:7b:9e:fa:f6:9c:c2:79:9e:
d8:9f:7b:76:1b:96:95:bd:0f:00:92:a0:6b:09:95:
f6:c7:21:95:39:83:c6:8e:ce:18:0d:0b:8b:b8:a9:
44:6e:79:14:50:88:2c:a7:37:0b:ed:1c:a8:4f:05:
4e:d1:bd:d0:3a:15:0e:8f:47:c2:11:ea:8f:c5:1e:
2f:e7:dd:a4:3b:e8:75:83:07:15:c2:00:0a:a8:a5:
e7:13:bf:ae:de:69:bb:fd:cb:b6:76:d4:a9:c6:7c:
a8:77:ea:6b:40:5d:75:68:03:ae:0a:b1:83:59:c2:
00:f7:3e:ad:8d:e2:26:e0:67:87:6c:87:d8:39:74:
9b:66:b0:c1:53:7f:a5:80:f0:55:a8:64:82:5d:0a:
86:1a:61:d3:03:14:8a:ef:dd:4c:eb:34:99:59:22:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:4B:37:72:15:AC:15:E1:5F:75:B7:7D:5A:ED:C9:70:BD:D8:2E
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:76:c2:cf:91:34:6a:8c:58:8d:50:18:64:52:d5:55:1d:26:
d5:d8:92:74:47:9a:34:c4:25:be:6e:3a:e9:1a:31:fe:4f:fd:
ee:8a:0c:2f:3e:4d:ab:1e:b5:13:2c:30:d8:84:39:ee:fb:47:
0b:fa:52:4b:cd:e5:0f:5d:d8:2e:02:f2:8f:49:da:11:5e:33:
f1:5a:f8:d2:ba:ac:29:c8:51:32:75:8c:d0:9e:ac:76:f5:24:
e1:2e:5b:f6:32:05:6a:2c:9a:55:48:88:9d:f0:8f:f5:53:cf:
5c:99:9d:3e:0d:09:2b:00:a0:e7:d4:68:b7:6a:e5:1f:ab:3d:
c9:c4:b6:39:d0:73:51:08:e2:28:10:f7:38:79:b6:fb:e5:65:
67:6e:de:32:73:dd:ae:b2:45:89:ed:85:f6:a3:e8:38:a5:2e:
99:51:5f:e3:d3:22:29:4e:1f:06:dc:7b:26:a1:c2:17:ac:75:
46:9c:35:7f:f2:fa:86:1c:16:ae:fb:0f:7a:fb:3e:be:59:43:
f1:5f:50:b8:66:fa:ab:b0:0a:88:bc:a1:70:ad:cd:65:5b:58:
ab:d0:5e:31:3a:20:2f:76:e0:67:98:1b:93:08:65:f4:cf:79:
57:da:d0:a8:e2:13:ee:4b:88:81:07:4c:9c:24:f3:ef:d2:50:
3f:7a:fe:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8ehwQtX3r92C0S0B1tewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5
MjIxNTAwHhcNMjYwMzI1MTcwMTQzWhcNMjYwMzI2MTcwMTQzWjAzMTEwLwYDVQQD
Eyg5ZjdiNGIzNzcyMTVhYzE1ZTE1Zjc1Yjc3ZDVhZWRjOTcwYmRkODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2bXh2aubRhwMc+JXoCBHSeZP9JZ
Lf+ubWelL2v+hNhihHII3I7xwgvD18T+5ZDSlxI5uSXMZQ1GLQu2n5M09za7mEir
MLYc1LvoVItHr4cgREfUkgiE4nYSTjFnyP9De5769pzCeZ7Yn3t2G5aVvQ8AkqBr
CZX2xyGVOYPGjs4YDQuLuKlEbnkUUIgspzcL7RyoTwVO0b3QOhUOj0fCEeqPxR4v
592kO+h1gwcVwgAKqKXnE7+u3mm7/cu2dtSpxnyod+prQF11aAOuCrGDWcIA9z6t
jeIm4GeHbIfYOXSbZrDBU3+lgPBVqGSCXQqGGmHTAxSK791M6zSZWSInXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ97SzdyFawV4V91t31a7clwvdguMB8GA1UdIwQY
MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt
MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4
LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnbCz5E0
aoxYjVAYZFLVVR0m1diSdEeaNMQlvm466Rox/k/97ooMLz5Nqx61Eyww2IQ57vtH
C/pSS83lD13YLgLyj0naEV4z8Vr40rqsKchRMnWM0J6sdvUk4S5b9jIFaiyaVUiI
nfCP9VPPXJmdPg0JKwCg59Rot2rlH6s9ycS2OdBzUQjiKBD3OHm2++VlZ27eMnPd
rrJFie2F9qPoOKUumVFf49MiKU4fBtx7JqHCF6x1Rpw1f/L6hhwWrvsPevs+vllD
8V9QuGb6q7AKiLyhcK3NZVtYq9BeMTogL3bgZ5gbkwhl9M95V9rQqOIT7kuIgQdM
nCTz79JQP3r+9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:31 2026 by rpki-client