Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
File: n4cA180SL-GK-angaNELkaw-fz8.mft (raw, json)
Hash identifier: MLbQNFEF5PztA2c3IM9qHR9i94/q4d/rYGKhIIU6MKQ=
Subject key identifier: 1A:65:A7:AE:63:42:58:D2:24:D1:E2:AE:81:28:8B:E7:A5:22:D8:10
Authority key identifier: 9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
Certificate issuer: /CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Certificate serial: 01A147CDF2E93FA02A06DAD9CB1C8C1A02DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
Manifest number: 0123
Signing time: Sat 17 Oct 2026 03:00:41 +0000
Manifest this update: Sat 17 Oct 2026 03:00:41 +0000
Manifest next update: Sun 18 Oct 2026 03:00:41 +0000
Files and hashes: 1: CDXPRhDMs-jGAh8wnudClkymVW4.roa (hash: 1eC46O/rW+KDcEVpgtUlJxI3BjmvvvXUSfceL9Sj9Nc=)
2: n4cA180SL-GK-angaNELkaw-fz8.crl (hash: wx1IHSHyMEQJKBiLrEVYSgFPnGfekSydQIk27FoAVLY=)
3: oSkRVQFIy9BLYy1aB77d5g6po0E.roa (hash: Xcjj+4yfvv190NMELA2n11LpZIIPXUYR9xGU2Beeq2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:cd:f2:e9:3f:a0:2a:06:da:d9:cb:1c:8c:1a:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Validity
Not Before: Oct 17 03:00:41 2026 GMT
Not After : Oct 18 03:00:41 2026 GMT
Subject: CN=1a65a7ae634258d224d1e2ae81288be7a522d810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:90:61:c5:05:12:94:6f:43:2d:b5:67:2a:
d2:eb:5b:d6:79:bd:77:f3:1a:0f:54:c1:0d:27:d6:
b3:7d:eb:d8:3f:20:c4:9f:d8:fa:89:cd:35:93:00:
93:07:6c:4b:e6:b1:0c:13:15:eb:90:4c:55:4a:33:
98:1f:e1:ce:c7:0e:5e:08:97:0d:b9:0b:53:0e:bb:
e5:de:c5:69:20:19:6e:ca:b0:97:01:21:db:fc:a7:
ba:2e:3f:63:db:4d:2a:90:20:85:56:09:e0:af:47:
b2:0d:d9:d6:7f:7c:67:8f:92:62:4b:76:89:e8:e3:
11:9a:34:56:4e:b8:c4:46:5c:4a:00:82:b1:c6:f8:
4a:9b:f8:06:87:cb:b8:ae:3a:12:d9:2c:2e:81:22:
45:3f:82:71:8b:3f:d7:89:3f:b0:fc:05:16:ae:64:
12:63:67:48:36:64:d9:7a:e9:4a:0e:e4:54:ea:ad:
a2:76:34:08:d9:ac:1e:27:04:24:b9:20:70:5e:5b:
0b:44:2a:4f:d4:b1:ff:35:4b:d6:d9:d7:67:17:bb:
06:ad:0e:33:78:57:ce:68:93:d1:82:ad:9a:b2:73:
aa:00:cb:1b:a1:23:80:31:04:a3:b0:e5:85:b4:87:
88:c2:01:21:82:10:8a:d1:00:12:93:dc:53:c4:eb:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:A7:AE:63:42:58:D2:24:D1:E2:AE:81:28:8B:E7:A5:22:D8:10
X509v3 Authority Key Identifier:
keyid:9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:da:3a:23:03:d8:dd:cc:ec:78:13:60:2c:3f:e5:4a:e3:
76:8e:3c:a3:42:d0:ff:95:77:c7:86:cf:35:a7:95:63:76:6c:
c0:b9:03:b0:63:d1:ed:a4:a9:bf:d9:7a:ab:5d:dd:eb:70:4d:
1b:7e:bb:3c:ef:62:66:50:96:c8:55:33:7f:e2:db:4c:52:e8:
38:62:7d:4c:41:1d:07:b4:c9:05:f3:a6:62:4e:48:f1:5f:31:
85:e4:8e:f6:23:19:a4:70:5b:40:36:54:22:a6:99:a9:a1:11:
e9:0d:25:b7:39:02:54:80:8c:7e:15:f7:35:64:a0:de:fe:d9:
43:61:a8:de:75:22:f5:15:2a:1d:3d:fa:c1:81:f7:5e:d0:64:
93:36:04:19:eb:e2:44:53:d0:48:f9:bb:59:28:61:10:19:a4:
28:66:3d:3f:8e:33:40:ea:35:ee:0e:fd:85:64:ce:f6:31:12:
1c:7b:6b:9b:e4:7e:e2:21:dd:d1:9c:97:05:5e:8c:e1:4e:17:
dd:d7:82:39:d8:22:9e:e3:f7:d8:2b:cd:30:e5:22:82:f1:69:
97:1f:cb:3e:9a:4c:54:27:18:07:5c:5b:b3:fd:1c:3a:df:fe:
cc:55:4d:18:5a:72:03:bb:e0:a5:29:61:91:c5:dc:a0:94:57:
c8:24:83:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHzfLpP6AqBtrZyxyMGgLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODcwMGQ3Y2QxMjJmZTE4YWY5YTllMDY4ZDEwYjkxYWMz
ZTdmM2YwHhcNMjYxMDE3MDMwMDQxWhcNMjYxMDE4MDMwMDQxWjAzMTEwLwYDVQQD
EygxYTY1YTdhZTYzNDI1OGQyMjRkMWUyYWU4MTI4OGJlN2E1MjJkODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03SQYcUFEpRvQy21ZyrS61vWeb13
8xoPVMENJ9azfevYPyDEn9j6ic01kwCTB2xL5rEMExXrkExVSjOYH+HOxw5eCJcN
uQtTDrvl3sVpIBluyrCXASHb/Ke6Lj9j200qkCCFVgngr0eyDdnWf3xnj5JiS3aJ
6OMRmjRWTrjERlxKAIKxxvhKm/gGh8u4rjoS2SwugSJFP4Jxiz/XiT+w/AUWrmQS
Y2dINmTZeulKDuRU6q2idjQI2aweJwQkuSBwXlsLRCpP1LH/NUvW2ddnF7sGrQ4z
eFfOaJPRgq2asnOqAMsboSOAMQSjsOWFtIeIwgEhghCK0QASk9xTxOut9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBplp65jQljSJNHiroEoi+elItgQMB8GA1UdIwQY
MBaAFJ+HANfNEi/hivmp4GjRC5GsPn8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRjQTE4MFNMLUdLLWFuZ2FORUxrYXctZno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt
NWI1MDc4NjI1ZGVhLzEvbjRjQTE4MFNMLUdLLWFuZ2FORUxrYXctZno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh
LzEvbjRjQTE4MFNMLUdLLWFuZ2FORUxrYXctZno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpHaOiMD
2N3M7HgTYCw/5Urjdo48o0LQ/5V3x4bPNaeVY3ZswLkDsGPR7aSpv9l6q13d63BN
G367PO9iZlCWyFUzf+LbTFLoOGJ9TEEdB7TJBfOmYk5I8V8xheSO9iMZpHBbQDZU
IqaZqaER6Q0ltzkCVICMfhX3NWSg3v7ZQ2Go3nUi9RUqHT36wYH3XtBkkzYEGevi
RFPQSPm7WShhEBmkKGY9P44zQOo17g79hWTO9jESHHtrm+R+4iHd0ZyXBV6M4U4X
3deCOdginuP32CvNMOUigvFplx/LPppMVCcYB1xbs/0cOt/+zFVNGFpyA7vgpSlh
kcXcoJRXyCSDhA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:56:49 2026 by rpki-client