Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: A+AhQW5sotjNbk/uUFWdR+y4Q4mpL96g7tpPqaPdX0w=
Subject key identifier: 6B:C0:D5:52:73:27:58:BB:60:57:FF:6B:BC:B0:7D:A7:5B:73:9A:C0
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019D0BFA67F07F8A96CF220562855DDD6B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0B6F
Signing time: Fri 20 Mar 2026 16:00:52 +0000
Manifest this update: Fri 20 Mar 2026 16:00:52 +0000
Manifest next update: Sat 21 Mar 2026 16:00:52 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: hYXw8sESmTyXNMYnycRX/brCNtEMVIFdkvEiZG9DAYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:fa:67:f0:7f:8a:96:cf:22:05:62:85:5d:dd:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Mar 20 16:00:52 2026 GMT
Not After : Mar 21 16:00:52 2026 GMT
Subject: CN=6bc0d552732758bb6057ff6bbcb07da75b739ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:ae:93:eb:41:85:eb:c3:1e:c9:7d:4c:17:
6c:c2:37:47:7f:57:60:46:0a:8c:b4:60:0e:2a:5b:
33:90:e7:c7:29:91:ca:75:f8:60:35:f6:97:2e:e4:
f0:79:3d:31:a3:23:02:78:c6:d1:24:d7:a2:35:44:
46:32:90:27:94:52:c8:e0:71:cc:9e:a6:80:09:8f:
c9:96:85:38:3a:a3:88:55:41:fd:e6:30:e1:45:1f:
93:cc:11:a8:bf:a1:bf:36:db:21:96:09:2d:5e:9f:
1e:6b:f8:cf:05:6b:3b:f1:85:1d:47:54:b8:5a:1b:
71:87:c2:25:6d:0f:40:f3:fb:c4:1a:bf:11:1c:44:
7e:fc:52:bd:03:0d:14:10:ff:d5:ef:17:c3:ef:39:
9b:a4:72:f5:1e:a5:dd:60:bb:c5:3c:be:08:5f:e4:
00:81:82:e4:8b:b9:1a:12:90:77:28:f3:54:96:3c:
bf:1a:74:99:b3:8e:b2:eb:ae:38:f6:af:19:46:75:
b2:80:8b:48:20:e1:bb:d7:72:d3:13:10:52:6e:ab:
46:7f:41:76:d9:e5:78:e0:f2:83:67:22:06:0b:44:
34:a9:5d:66:56:a2:a3:6d:24:81:15:b6:57:ce:34:
c5:02:78:b3:b6:76:39:bf:80:33:7a:0c:49:46:49:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:D5:52:73:27:58:BB:60:57:FF:6B:BC:B0:7D:A7:5B:73:9A:C0
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2c:34:02:a4:44:8a:ce:84:4d:b4:79:13:d8:94:a4:43:08:
6e:a7:78:e6:ce:f9:9c:57:c0:aa:7a:e8:d6:89:72:79:b1:51:
0e:a1:e5:f1:8f:17:a6:ea:fb:d9:c1:7b:42:2c:b8:88:67:fa:
7b:f4:53:56:7b:e5:68:42:b8:1f:b3:7b:bf:b1:e0:fe:16:6f:
cf:e8:b8:89:11:e1:ba:59:ec:9a:58:db:d2:3f:67:c5:a0:0a:
a4:6b:fb:f9:bf:51:b8:f2:9b:3b:0c:a0:7f:bf:4c:21:c6:4c:
a5:10:ae:5e:c1:10:8e:7b:0c:e8:a0:45:ef:90:69:25:77:d5:
d2:e3:be:9a:d3:07:c7:16:2f:a7:e3:c1:09:ab:82:bc:a0:54:
0f:1a:28:dc:8b:1e:9b:6f:87:05:55:39:19:b7:7b:ee:43:1d:
73:ae:db:c7:42:e0:6e:52:f5:b7:38:e9:aa:33:cf:cf:29:76:
8d:bc:9a:63:2d:b8:bc:ba:b6:94:7f:6d:b0:fe:57:14:7f:b7:
d4:ac:38:ab:57:89:a4:cf:88:93:06:bb:ea:55:1c:12:06:97:
ad:f6:15:08:15:7e:80:50:69:dd:f3:48:25:0c:b6:6d:b3:8e:
05:4b:26:02:a4:5d:67:29:b3:df:a0:ae:f7:20:93:2a:cc:a0:
d7:37:d6:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0L+mfwf4qWzyIFYoVd3WtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjYwMzIwMTYwMDUyWhcNMjYwMzIxMTYwMDUyWjAzMTEwLwYDVQQD
Eyg2YmMwZDU1MjczMjc1OGJiNjA1N2ZmNmJiY2IwN2RhNzViNzM5YWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ6uk+tBhevDHsl9TBdswjdHf1dg
RgqMtGAOKlszkOfHKZHKdfhgNfaXLuTweT0xoyMCeMbRJNeiNURGMpAnlFLI4HHM
nqaACY/JloU4OqOIVUH95jDhRR+TzBGov6G/NtshlgktXp8ea/jPBWs78YUdR1S4
Whtxh8IlbQ9A8/vEGr8RHER+/FK9Aw0UEP/V7xfD7zmbpHL1HqXdYLvFPL4IX+QA
gYLki7kaEpB3KPNUljy/GnSZs46y66449q8ZRnWygItIIOG713LTExBSbqtGf0F2
2eV44PKDZyIGC0Q0qV1mVqKjbSSBFbZXzjTFAniztnY5v4AzegxJRknzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvA1VJzJ1i7YFf/a7ywfadbc5rAMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvCw0AqRE
is6ETbR5E9iUpEMIbqd45s75nFfAqnro1olyebFRDqHl8Y8Xpur72cF7Qiy4iGf6
e/RTVnvlaEK4H7N7v7Hg/hZvz+i4iRHhulnsmljb0j9nxaAKpGv7+b9RuPKbOwyg
f79MIcZMpRCuXsEQjnsM6KBF75BpJXfV0uO+mtMHxxYvp+PBCauCvKBUDxoo3Ise
m2+HBVU5Gbd77kMdc67bx0LgblL1tzjpqjPPzyl2jbyaYy24vLq2lH9tsP5XFH+3
1Kw4q1eJpM+Ikwa76lUcEgaXrfYVCBV+gFBp3fNIJQy2bbOOBUsmAqRdZymz36Cu
9yCTKsyg1zfWIA==
-----END CERTIFICATE-----
Generated at Sat Mar 21 02:40:39 2026 by rpki-client