Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: 7wlymOCAMhR4fnlXhNsCfvBqE7jRxu5IBt2yMQkPIho=
Subject key identifier: AE:DC:0A:39:90:C5:6D:D9:AC:81:B8:00:F3:25:0B:4A:D1:CA:AD:9E
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019FCECC393AE799A5FE810B53DEF32173C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0CDD
Signing time: Tue 04 Aug 2026 22:01:58 +0000
Manifest this update: Tue 04 Aug 2026 22:01:58 +0000
Manifest next update: Wed 05 Aug 2026 22:01:58 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: jJ5O0XdRCS6cyJEsraYck27/nd7z7LNaUzMoFPSSec8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:cc:39:3a:e7:99:a5:fe:81:0b:53:de:f3:21:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Aug 4 22:01:58 2026 GMT
Not After : Aug 5 22:01:58 2026 GMT
Subject: CN=aedc0a3990c56dd9ac81b800f3250b4ad1caad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:e4:5d:24:a1:f6:06:b2:25:d0:2c:fb:b5:
2c:7a:92:95:f2:99:e7:f3:00:9d:73:6a:a6:9a:a2:
1e:40:ce:8f:e3:b1:8e:3a:95:83:55:f7:14:9f:d0:
31:f3:41:1a:d4:48:e5:61:c5:00:64:e6:77:b5:dd:
06:12:e5:18:cc:3a:fa:4b:9d:16:01:a7:3b:3e:d4:
71:48:7c:e8:05:c0:17:98:d8:bc:1e:e2:40:e5:1a:
7e:e0:29:9d:2c:e0:12:44:60:91:22:52:bd:ce:29:
07:29:b5:ec:9a:db:80:db:73:b3:c6:9b:e0:3b:c1:
18:57:c7:f9:d4:ad:70:6e:3b:24:4b:e7:35:2e:5f:
c3:fc:52:71:ad:f4:95:2b:21:36:98:b9:05:98:02:
43:cc:a7:0d:f4:8b:91:30:da:5e:6c:a2:65:17:fa:
03:23:78:c8:19:dd:ea:fb:e0:f9:96:05:51:93:4e:
9e:be:be:b7:b2:77:0a:34:2b:76:ab:1b:47:b6:b2:
fa:d6:c8:e5:3e:6a:49:b8:2c:05:d0:ed:cf:b8:81:
2c:c0:71:c0:09:9e:36:66:e0:6b:bd:b7:84:9a:0c:
3c:27:4e:ab:01:b4:1b:d7:d7:5f:00:53:cf:5a:6a:
5d:23:36:b4:c2:8e:41:d8:0b:ce:ac:77:e3:fa:bf:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:0A:39:90:C5:6D:D9:AC:81:B8:00:F3:25:0B:4A:D1:CA:AD:9E
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9d:42:00:c0:8e:57:60:3e:67:2a:5e:5c:8b:a1:04:3d:12:
df:d2:6a:17:72:85:1e:c6:01:d8:99:5d:60:33:10:03:30:35:
36:36:ce:8a:05:d0:c9:36:8c:f9:9c:59:14:00:bb:f6:72:22:
8c:f7:c8:5a:43:21:ba:4d:7b:c5:d7:5d:4d:2f:32:72:33:e3:
4f:1b:04:55:36:e2:b0:c3:81:01:79:e6:32:1f:a3:47:f3:e9:
03:d0:8a:13:d8:d9:95:73:03:86:f4:9e:d0:dd:61:0c:e5:de:
89:82:08:48:00:6b:9f:b0:e6:e6:a2:ae:de:84:5c:c6:99:d4:
c9:16:a6:e6:44:cb:94:2f:6a:06:a2:f6:7a:88:07:1e:0d:a7:
c6:3b:df:33:23:f6:6c:3e:fb:97:af:4c:df:9f:1d:3f:8b:18:
84:bd:2f:ef:15:1a:17:80:56:70:f6:54:3a:be:d0:7a:ca:ff:
8c:67:ec:83:9c:09:90:04:3e:8f:ee:a3:6d:d7:ff:f3:51:f1:
0f:91:3c:23:2d:bb:81:47:a9:55:75:d4:c6:4f:74:fc:df:03:
02:6f:03:f2:1c:73:6f:d5:28:67:d2:ea:4c:41:9c:98:55:29:
46:72:cc:ed:a3:4e:63:21:df:5b:95:13:ee:cf:43:c9:7d:e4:
09:34:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:34:27 2026 by rpki-client