Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: CizzcUPzaOvreviuqRGI/w/pAytkuD9k0Rl+DGO7owI=
Subject key identifier: 75:CD:5D:6D:8B:0B:66:2D:93:75:DB:E6:BF:1A:69:EA:D5:5C:96:2C
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019D37522EEE4664EB519E93D61BCC1A35E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: ch1WA8KPWtT4lbnmhdRbUoInvrQ.roa (hash: KNYvYxr90wZ08HAn6IO/kJkxO2ei4FC5py65h6CmekA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: coSXmneBM1iMxorzuWaLrn4bOicX5dmJAnXLlWQGrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2e:ee:46:64:eb:51:9e:93:d6:1b:cc:1a:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=75cd5d6d8b0b662d9375dbe6bf1a69ead55c962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:30:94:3c:60:2d:50:78:c8:df:57:7c:38:
f7:4a:54:3e:1d:5c:b9:bc:3c:a3:49:23:da:df:f9:
90:09:03:a9:87:58:58:66:59:9b:41:2a:58:1d:67:
86:2d:64:c2:0b:c2:c1:a8:27:d0:ab:62:53:73:a1:
63:00:a7:72:e9:29:8a:e0:3e:bd:fc:55:b3:5f:12:
b5:cf:24:40:49:ae:f5:46:98:81:b1:7f:99:b9:83:
a2:89:45:25:4b:dc:a7:3f:91:64:2c:f8:9e:bb:13:
70:ba:fa:3a:a4:88:29:5a:96:89:f3:a8:c1:66:34:
e0:da:55:6a:95:d7:46:b5:0e:1a:75:6b:30:8c:90:
02:59:f4:1b:4d:41:27:57:94:bc:67:b3:4c:ec:bf:
ce:68:41:1d:90:2e:db:0f:80:cf:27:b0:18:40:3a:
7c:0d:e6:ce:85:79:15:60:53:32:cb:8b:8e:71:0c:
57:6e:27:6d:36:19:4f:80:ae:8a:3e:9a:52:64:ed:
d5:55:24:dc:6e:e4:03:fc:ff:83:53:c9:9c:83:d4:
4f:c2:35:0c:06:0c:88:02:cd:9e:f0:5a:0e:52:cc:
e4:7b:05:ed:01:85:fa:1f:9c:ab:4d:6a:f7:2e:99:
a6:12:7e:a0:fd:2d:a4:77:28:f8:e5:8d:12:57:66:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:5D:6D:8B:0B:66:2D:93:75:DB:E6:BF:1A:69:EA:D5:5C:96:2C
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:d8:87:05:d4:cf:dc:4b:c2:c2:87:9f:5c:03:56:3e:ee:
64:2d:59:ea:e7:6e:8e:56:25:b8:28:70:22:2a:d6:1b:21:78:
d8:0e:60:06:a7:b7:09:0c:98:f8:e8:97:93:bf:17:dd:ed:37:
06:8f:e5:f5:9d:04:77:0b:ae:30:14:26:b0:53:14:c7:a7:2d:
46:30:b1:da:eb:77:cb:cd:d4:c1:2c:9f:14:17:92:cd:18:fd:
15:d2:f8:d4:95:b0:06:10:71:93:69:c2:f2:16:86:95:5c:1f:
d0:86:06:41:fa:40:c2:7a:bf:6e:b6:d1:7f:30:8f:86:c7:a6:
be:84:5d:9e:0c:ac:72:d0:06:37:c7:54:01:c1:48:1a:37:fb:
00:aa:90:5d:be:d9:89:78:45:3b:6b:d2:b4:bd:69:09:82:59:
fd:87:c7:53:82:5a:1c:da:64:ce:fd:44:81:07:d9:cd:24:55:
bc:b2:80:6b:41:03:19:e4:31:9b:52:31:fe:59:cd:28:e7:cd:
ec:20:34:58:e2:af:f7:31:6f:9b:fd:12:a7:fe:c7:d2:b4:22:
11:dc:e1:b8:24:8e:c9:22:9e:78:76:81:d3:c4:51:5d:4c:15:
d6:9f:54:ae:0e:17:fe:c8:48:b0:c3:da:e0:30:98:0c:99:da:
18:a3:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:49 2026 by rpki-client