Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: DVLwd3w7FTwAHeyRnN5AiY7E2ul5jDuVUzIjgEIrtNc=
Subject key identifier: 9F:29:79:E8:6A:DA:D3:31:08:5E:0A:B1:FB:C8:8A:8F:EF:BD:52:2E
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019DF98421D0E7D00BFCDB7095D620D9B9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0BEA
Signing time: Tue 05 May 2026 19:01:19 +0000
Manifest this update: Tue 05 May 2026 19:01:19 +0000
Manifest next update: Wed 06 May 2026 19:01:19 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: YLaZPgfijGnrOoUTFUbkqs0iAE70Nq6OP8VBgNwFTno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:84:21:d0:e7:d0:0b:fc:db:70:95:d6:20:d9:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: May 5 19:01:19 2026 GMT
Not After : May 6 19:01:19 2026 GMT
Subject: CN=9f2979e86adad331085e0ab1fbc88a8fefbd522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:49:7b:c0:d9:53:83:fd:29:bc:df:10:be:
c6:be:dd:1c:bc:50:84:7f:4f:cf:b9:2f:40:64:69:
d8:a0:96:c5:ab:68:5a:08:a1:e7:88:d5:b8:e0:6d:
85:b7:e5:fe:c2:e0:e2:a0:42:d2:95:5d:53:3f:0b:
c7:ae:d1:5d:5d:1f:d3:c2:2f:5f:22:15:93:81:1e:
69:ff:be:dd:bb:2b:a6:58:1d:09:8a:ec:73:45:96:
7d:b6:6c:84:d7:c9:93:2b:d9:24:b2:24:94:4e:38:
84:72:83:b9:a5:fc:e2:d0:dc:27:50:01:81:00:2c:
34:04:9c:b6:ac:32:a7:1f:ac:e4:01:5b:ef:eb:ab:
e0:97:33:f2:59:83:b0:0a:87:95:32:69:f3:dd:ff:
d4:28:8e:56:db:bd:f2:f7:8d:55:ab:71:ec:67:f7:
be:8f:8a:9a:de:17:77:84:89:e8:83:60:e9:93:b7:
b1:46:b4:e1:74:d2:7e:d4:e9:0d:20:6a:24:41:75:
fe:67:12:f0:cb:ae:20:1e:c0:f0:8d:14:09:b4:d9:
19:11:15:d3:c1:0e:66:11:42:83:d2:b5:03:9d:c7:
a0:ed:71:62:1a:42:fd:35:6c:ce:c0:7f:20:4d:c7:
07:e5:37:6c:e8:12:26:7d:cf:b1:7f:1b:bf:1c:5a:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:29:79:E8:6A:DA:D3:31:08:5E:0A:B1:FB:C8:8A:8F:EF:BD:52:2E
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c7:51:f5:2a:2c:92:34:e3:a9:f8:86:9b:34:65:bf:ef:5d:
8e:1c:91:68:45:98:c8:90:ca:ae:91:ba:3d:09:f2:d6:84:a1:
60:d2:9e:65:91:3b:63:f7:92:6c:8b:df:e3:9f:55:98:06:43:
09:4e:c3:a0:91:0e:2a:24:d5:05:34:b5:b2:f5:a7:53:e0:b9:
70:55:44:95:28:ef:43:ed:a0:95:de:ba:f3:6f:49:d6:be:09:
19:37:8d:ab:10:9d:ce:8a:ea:8a:05:76:8f:e2:09:3f:0e:db:
0b:93:f0:15:84:32:7d:39:9c:fd:79:d9:e6:e6:d1:fa:0c:db:
60:6e:8a:70:e6:5b:a9:a1:79:e7:ee:54:e6:b7:bc:0c:c3:65:
4f:e1:43:f9:2a:e5:e3:8f:0f:b6:f2:49:b1:02:c1:1e:54:90:
9e:75:48:1e:a3:75:72:c3:14:2e:14:a4:7a:56:bd:64:2c:16:
aa:28:e3:69:d9:28:22:d9:d8:46:90:1a:c8:b3:7e:0c:ef:a9:
cc:97:81:1c:88:88:4b:6f:f2:09:b1:20:bf:7a:00:bd:71:bf:
9e:6f:f1:f7:76:8c:95:ef:41:bd:8a:28:51:f4:4d:8f:ea:2d:
08:d3:69:33:41:c3:b8:01:0c:55:12:4e:ed:cd:f7:97:c3:16:
22:ec:ff:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ35hCHQ59AL/NtwldYg2bnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjYwNTA1MTkwMTE5WhcNMjYwNTA2MTkwMTE5WjAzMTEwLwYDVQQD
Eyg5ZjI5NzllODZhZGFkMzMxMDg1ZTBhYjFmYmM4OGE4ZmVmYmQ1MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJBJe8DZU4P9KbzfEL7Gvt0cvFCE
f0/PuS9AZGnYoJbFq2haCKHniNW44G2Ft+X+wuDioELSlV1TPwvHrtFdXR/Twi9f
IhWTgR5p/77duyumWB0JiuxzRZZ9tmyE18mTK9kksiSUTjiEcoO5pfzi0NwnUAGB
ACw0BJy2rDKnH6zkAVvv66vglzPyWYOwCoeVMmnz3f/UKI5W273y941Vq3HsZ/e+
j4qa3hd3hInog2Dpk7exRrThdNJ+1OkNIGokQXX+ZxLwy64gHsDwjRQJtNkZERXT
wQ5mEUKD0rUDnceg7XFiGkL9NWzOwH8gTccH5Tds6BImfc+xfxu/HFpT1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8peehq2tMxCF4KsfvIio/vvVIuMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMdR9Sos
kjTjqfiGmzRlv+9djhyRaEWYyJDKrpG6PQny1oShYNKeZZE7Y/eSbIvf459VmAZD
CU7DoJEOKiTVBTS1svWnU+C5cFVElSjvQ+2gld66829J1r4JGTeNqxCdzorqigV2
j+IJPw7bC5PwFYQyfTmc/XnZ5ubR+gzbYG6KcOZbqaF55+5U5re8DMNlT+FD+Srl
448PtvJJsQLBHlSQnnVIHqN1csMULhSkela9ZCwWqijjadkoItnYRpAayLN+DO+p
zJeBHIiIS2/yCbEgv3oAvXG/nm/x93aMle9BvYooUfRNj+otCNNpM0HDuAEMVRJO
7c33l8MWIuz/1g==
-----END CERTIFICATE-----
Generated at Wed May 6 00:20:06 2026 by rpki-client