Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: aiGSI5rM3KlPYQh9pdBpk8s0EwWg31rPiZR8xTZXrXM=
Subject key identifier: 35:03:B2:D6:A1:79:85:2C:48:18:F4:00:0F:4E:C9:F6:7B:3B:BE:86
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 019D37C07FC4129A046BB927EB03F9BF7273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0CCD
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa (hash: LGVpZE2M2ikl4CHpfTf8y//4tD5Af7b520ROLqKh/18=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: y0mAJe74CJ584nPhSbfWhUAVWMW12Uui5djR/E/SIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7f:c4:12:9a:04:6b:b9:27:eb:03:f9:bf:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=3503b2d6a179852c4818f4000f4ec9f67b3bbe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:f9:6b:f7:7d:43:29:0c:c1:74:ef:df:5f:
01:6b:a6:78:97:b3:d7:52:95:d6:8e:7c:fa:71:74:
c0:e2:9e:d0:90:98:c1:1e:06:83:3c:33:ad:e8:52:
5c:4e:84:d9:10:03:7b:9d:4e:fd:49:e0:77:0a:41:
47:ed:ba:a4:69:67:20:2c:09:1b:d5:d3:ed:58:60:
12:cb:50:14:f1:16:12:6f:8a:5d:ec:a4:bf:7d:c0:
39:01:67:63:5e:ca:67:42:4b:0d:28:0d:8a:2f:bb:
51:a9:a4:04:11:4e:7a:8f:f1:33:76:f9:67:0d:09:
07:d0:a3:6d:32:4a:9d:c7:8e:76:34:d1:37:22:ab:
23:b0:e3:c8:a6:e9:38:75:ac:51:a2:65:06:00:98:
78:d9:7a:af:5e:f4:e1:f2:2e:3f:85:3a:c2:ac:6f:
b9:0b:c0:7b:de:69:4a:3e:13:14:ef:8b:5c:d7:25:
49:c1:ab:f2:e5:3c:91:75:6c:e1:1c:d2:76:5d:d8:
a7:a6:55:e5:9e:a6:12:06:b8:20:fe:7d:a7:5c:f0:
f1:77:05:8c:a4:c3:14:d2:e1:e5:1d:95:68:b5:a7:
d5:55:72:1a:47:1a:4b:4c:58:a6:18:50:d7:a6:c8:
0b:18:29:1f:62:42:30:11:47:bc:52:7f:64:ef:8f:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:B2:D6:A1:79:85:2C:48:18:F4:00:0F:4E:C9:F6:7B:3B:BE:86
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:48:b6:e3:6d:61:ad:ee:c4:f8:06:7e:18:7e:19:91:ba:6c:
b9:eb:62:c7:b4:6d:76:24:09:fc:23:e0:d7:2a:a5:c6:f8:f8:
84:84:f8:8b:e1:b6:32:ba:d9:67:6f:9e:61:c9:bd:76:59:74:
73:f1:7f:11:d1:14:f8:00:38:7c:68:23:d2:49:12:b2:b0:d3:
8e:9a:b6:0c:e0:9e:c1:8a:71:9b:97:6d:2a:f2:d0:90:68:70:
d2:c9:cd:cf:56:c3:53:8b:9f:c3:9e:28:21:52:0b:df:32:58:
72:5f:a7:f8:b1:a5:26:43:13:ed:7f:7d:e6:f6:f8:69:55:9c:
d7:3a:7a:66:3b:10:f9:00:d4:66:c7:40:dd:57:8b:3d:b7:97:
84:02:ba:19:66:43:71:e9:0c:b0:f4:2c:01:07:dd:87:03:0b:
e6:66:08:09:d6:ff:3a:c6:85:19:d0:fe:a7:9f:5e:95:5d:98:
1d:57:8e:e9:d4:ac:cf:27:2d:55:23:0e:cf:4c:e0:cb:e9:df:
f5:fc:77:04:41:05:b5:f5:00:07:20:49:60:8c:bd:1c:f3:c0:
e8:31:c5:6f:af:e9:2e:a9:32:3e:8a:fe:9f:3e:35:54:f5:48:
bf:d6:d8:8f:3e:59:c4:6d:bc:ac:56:7a:fd:19:13:48:0f:87:
b8:c1:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:04 2026 by rpki-client