Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: q1TgAa4OnZZU+I0Lm5e4fq1wgB55BAkwSOYbleENLN8=
Subject key identifier: B1:8F:21:25:23:B3:2B:EF:66:92:17:27:A8:7B:45:D7:D1:41:97:C2
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019F11C0D4FAE4D95634B9D237A23CF77C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 1231
Signing time: Mon 29 Jun 2026 05:01:17 +0000
Manifest this update: Mon 29 Jun 2026 05:01:17 +0000
Manifest next update: Tue 30 Jun 2026 05:01:17 +0000
Files and hashes: 1: CqVEZRxRSbC72IoEpBuSl-IR0oo.roa (hash: VVcs23ufU1kuCIdVVX3XyTOJgzSyJ6o05uh4XWE/uco=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: mORJonUq1cnq2CLXrU3uNSSYca59czAGicuD5sw4Iwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:d4:fa:e4:d9:56:34:b9:d2:37:a2:3c:f7:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jun 29 05:01:17 2026 GMT
Not After : Jun 30 05:01:17 2026 GMT
Subject: CN=b18f212523b32bef66921727a87b45d7d14197c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:0a:e6:ae:b2:96:68:71:d1:63:2e:8e:b1:
de:4c:a9:cd:78:79:28:a8:8d:a1:51:fd:54:24:c7:
7b:fa:df:cb:77:ba:3f:fc:61:b6:7e:8d:13:97:65:
db:1a:e6:03:1a:8a:41:24:83:15:bb:8d:b4:90:7b:
00:7f:61:a3:c0:30:5f:47:a9:0b:46:5d:2b:44:f0:
ca:b1:85:44:ec:3d:f6:97:f4:85:62:da:24:45:aa:
98:36:24:21:2c:ff:94:9c:9c:07:43:0a:e7:5e:44:
0f:4e:d4:19:7c:95:01:a9:56:ea:15:13:35:88:3a:
c7:65:90:cd:55:01:40:0d:7b:68:34:2e:d3:2f:8e:
4e:d1:b7:7e:01:54:9b:40:59:b7:78:07:d6:6c:29:
da:79:00:51:b2:1a:e2:ec:50:05:56:fc:c7:da:e6:
6b:3d:fd:54:bf:16:a5:a9:1e:eb:a1:14:9a:f6:c1:
fc:d2:d4:82:ff:a5:7e:90:5a:ea:74:31:02:8c:98:
2d:b6:90:a4:c7:99:06:c7:89:57:b2:9f:c5:4f:ee:
53:cb:74:06:7f:3b:26:2c:39:98:cb:c6:d5:5e:cf:
81:76:45:35:ef:e1:f1:4b:2b:5a:9b:12:32:18:b8:
d8:14:23:b4:bb:89:be:fd:ef:bf:08:d8:59:c6:59:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:21:25:23:B3:2B:EF:66:92:17:27:A8:7B:45:D7:D1:41:97:C2
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:29:6f:71:b5:e5:62:7a:95:5b:1e:21:30:ba:36:93:da:2e:
99:4a:63:6a:cc:c2:7e:d4:97:e3:23:11:31:dd:51:dd:27:3d:
b0:3e:15:59:a2:6f:b1:10:a7:64:98:e4:ca:16:77:d1:d2:1b:
b6:a4:7b:70:c1:99:32:2b:be:31:8b:88:cf:74:4a:d4:df:31:
94:8b:2c:23:66:d6:ce:69:12:a1:1c:83:fa:20:36:7a:f9:ac:
a4:50:a2:db:9c:0c:d2:a4:37:4e:61:ee:4e:d8:9d:23:a3:ff:
5b:60:f1:c0:53:50:4b:d7:db:e8:45:fa:38:6d:f2:6d:c6:c2:
7e:a4:1a:4e:39:1e:a6:64:36:90:78:25:55:46:5f:c9:f6:c8:
6b:22:51:0c:e0:e1:82:f4:a8:74:b8:fd:3d:ba:1e:e9:09:28:
ef:3c:56:fb:93:22:ac:f7:4d:38:55:33:ce:3a:f2:95:e8:5f:
8f:f8:72:19:cb:65:d5:7a:51:26:f0:22:13:a5:df:e0:5c:14:
db:14:dc:be:2c:80:aa:40:7d:58:52:1f:6f:62:1c:7d:5c:d8:
94:ab:23:9f:52:25:dc:ce:c7:69:f6:a9:5c:31:b6:d6:f1:6c:
48:b9:8e:3e:16:69:13:43:8c:04:09:42:40:99:37:55:fa:f7:
b9:c7:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:08 2026 by rpki-client