Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: GnDU859W/qeSFJ3wySm/q12szbY43J97AHgRDxmAU48=
Subject key identifier: 08:6F:35:46:97:53:77:CF:99:EA:18:29:BA:FB:B3:DD:CD:F0:9B:89
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019CA9B36DFC17709EF5D62779A89EAA089D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 10F2
Signing time: Sun 01 Mar 2026 14:00:34 +0000
Manifest this update: Sun 01 Mar 2026 14:00:34 +0000
Manifest next update: Mon 02 Mar 2026 14:00:34 +0000
Files and hashes: 1: CqVEZRxRSbC72IoEpBuSl-IR0oo.roa (hash: VVcs23ufU1kuCIdVVX3XyTOJgzSyJ6o05uh4XWE/uco=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: CFJPfZQCBNxn4EazuYiUR5krvfx8QxLHr//+SWpRXeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:6d:fc:17:70:9e:f5:d6:27:79:a8:9e:aa:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Mar 1 14:00:34 2026 GMT
Not After : Mar 2 14:00:34 2026 GMT
Subject: CN=086f3546975377cf99ea1829bafbb3ddcdf09b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:17:d2:28:00:85:9f:b6:1e:de:6b:37:17:
ce:7e:6a:86:9e:19:bf:91:52:22:5b:65:af:a7:1e:
e5:4b:f2:f2:0b:df:b0:2b:50:2c:cf:d9:f2:6d:b4:
fe:ed:46:37:4b:1f:98:70:f9:c2:d5:fd:60:64:04:
fd:31:51:85:59:39:f7:01:1a:a4:f7:16:8b:7a:c7:
da:57:e6:52:47:68:b6:c4:a4:7c:c0:0d:98:06:3e:
06:dc:1e:5c:b8:9b:db:e0:ff:60:6b:76:36:42:39:
15:c1:15:a6:b4:fb:47:65:dc:d7:ef:a3:1b:ad:23:
26:1a:ec:7a:e7:80:9a:34:4d:31:bf:65:3e:b5:cd:
78:34:4e:94:ff:a0:72:57:a7:c8:0c:b1:34:79:82:
e4:42:d1:78:b0:84:c6:54:39:93:4e:bd:56:86:18:
9f:89:ed:42:b5:74:84:8e:98:1b:a0:11:d0:1f:6a:
30:d3:48:c4:d9:1f:7c:a8:16:b8:e1:6e:26:73:83:
a9:60:0b:c4:56:25:8b:c0:1a:b0:1b:d3:3d:1b:1a:
b4:11:6a:7f:8e:58:7b:31:51:44:ea:a6:27:89:83:
e3:15:c3:fc:7b:f2:33:d9:0f:f5:9f:10:e8:44:7e:
cd:fa:21:c3:12:69:ba:df:f1:1e:20:09:ed:bc:70:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:35:46:97:53:77:CF:99:EA:18:29:BA:FB:B3:DD:CD:F0:9B:89
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3e:13:85:b8:ea:ea:86:f1:24:1b:63:1d:54:74:2e:3c:7f:
c7:d0:d7:54:d3:00:7f:4f:1d:be:ba:21:94:b1:c2:52:8e:e9:
f6:b2:ac:ef:0c:52:7e:eb:ce:55:94:58:56:0f:0e:a5:29:9f:
31:c9:70:ed:6f:cc:ac:8f:f4:e1:ff:d5:60:18:b7:b3:bd:59:
3e:1a:a7:9f:4d:38:31:cc:10:64:7d:20:51:fd:f5:82:be:be:
b2:fb:f7:44:b3:ac:32:9f:ec:62:f9:01:0b:91:71:71:5b:b4:
d6:81:ea:4a:8b:04:97:fb:a4:62:49:83:bb:a4:2d:fe:1e:31:
c6:a8:20:55:2c:07:12:0d:0b:64:5a:88:48:e5:47:d8:e2:c5:
97:ed:97:66:26:5b:6e:0e:a6:27:d7:eb:09:c6:30:7d:e1:6d:
9e:9c:6f:01:70:5b:e4:d2:06:29:34:82:69:27:b4:c5:3f:a1:
cf:64:7b:dd:dd:6c:4e:27:72:7a:e8:b2:3e:e6:67:3e:a8:d3:
2e:56:5c:c6:64:f1:d1:0a:5e:00:23:e7:23:51:72:69:c5:9a:
68:27:d0:66:4b:ca:a0:90:c3:14:f6:0a:0e:46:7d:5c:6e:83:
62:a4:9f:8c:cf:4f:07:39:85:98:47:5a:ca:1b:30:9a:b1:31:
6e:74:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:53 2026 by rpki-client