Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: jk/gdu1/qNwaf2b33yzFGogTQ7MC8pYvi1PMAIAmFYA=
Subject key identifier: 33:C2:C7:07:8B:A4:E5:F5:14:D0:35:31:A1:51:03:4B:A1:46:A8:F3
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 01A0D1C98F9CE5CD4506843B0EAD23E7BACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 1319
Signing time: Thu 24 Sep 2026 05:00:42 +0000
Manifest this update: Thu 24 Sep 2026 05:00:42 +0000
Manifest next update: Fri 25 Sep 2026 05:00:42 +0000
Files and hashes: 1: CqVEZRxRSbC72IoEpBuSl-IR0oo.roa (hash: VVcs23ufU1kuCIdVVX3XyTOJgzSyJ6o05uh4XWE/uco=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: MvOJ6xCVvAFEpKPAwa2r7h6keAIuXzypbUW8/SG4v/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:8f:9c:e5:cd:45:06:84:3b:0e:ad:23:e7:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Sep 24 05:00:42 2026 GMT
Not After : Sep 25 05:00:42 2026 GMT
Subject: CN=33c2c7078ba4e5f514d03531a151034ba146a8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:e9:ec:bd:75:78:14:0c:5b:39:c3:61:39:
7b:a4:da:9b:75:1f:4e:65:4d:29:bd:7c:54:41:4a:
0d:78:bd:ec:0f:6e:76:22:47:33:b7:da:6b:69:05:
ce:b0:02:dc:1b:5d:db:93:f5:17:6f:a8:0e:e0:ac:
0b:5a:1e:d6:8c:f5:43:1f:46:f1:49:42:60:93:58:
30:d1:59:d6:3e:6c:1c:e5:4d:04:4a:18:8b:bc:ec:
0b:bf:68:de:72:d2:1f:df:5e:df:93:a5:6e:7c:b8:
31:bf:8f:25:ae:24:90:f0:3b:4c:0f:45:9a:0f:c8:
32:11:7a:8d:58:7d:84:69:7b:ef:0e:a9:83:fc:e9:
80:8c:b0:cb:14:94:5c:97:06:51:c7:12:56:f4:61:
f3:42:b2:10:9d:28:11:47:9f:5e:51:0d:d2:24:04:
e4:a2:8b:b3:6c:b2:d6:67:cd:c3:6f:c3:57:a3:0e:
8d:d8:14:b1:86:28:bf:8b:d0:90:21:c4:11:4b:e8:
d3:6c:6d:26:6a:11:c4:be:39:e4:e4:ae:09:d9:06:
ea:e2:d5:1c:38:c1:e3:ab:b6:5b:db:7d:cb:80:e3:
a6:39:a2:dd:f4:b0:4b:bf:d5:46:b2:72:0e:16:bc:
3f:dc:3b:d6:e7:e7:e8:40:7f:08:1b:7a:be:69:37:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:C7:07:8B:A4:E5:F5:14:D0:35:31:A1:51:03:4B:A1:46:A8:F3
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:57:c5:87:aa:73:e7:97:3f:84:de:13:3f:b2:f9:a8:0e:
57:a4:65:ad:a9:48:28:cb:0f:31:91:07:cb:5e:1e:2c:bf:c0:
07:e5:bf:61:47:5c:66:14:72:9d:85:9e:72:db:38:b8:57:8c:
e0:1e:03:84:de:b0:7d:01:87:34:c0:f6:cb:c5:e2:fc:ee:ad:
8e:1d:ae:8f:40:77:7f:f8:d5:e9:82:35:cc:3c:41:f9:31:13:
c2:5a:d5:63:4a:5d:4b:fc:62:db:7d:4e:9e:88:8b:49:d2:e1:
ad:8b:1f:63:36:54:93:ae:e6:e1:8b:1a:4b:27:89:57:e2:51:
59:97:11:42:ff:a7:92:d8:35:7c:d0:4b:68:56:8b:b1:36:06:
0d:4e:f7:85:0c:08:0b:61:ca:76:b4:21:4d:8b:ca:e4:0f:ca:
55:63:7c:97:43:9a:fa:b3:f7:b4:77:35:29:da:51:da:4c:31:
9d:ae:5b:c5:a4:49:5c:fc:3d:79:ef:ec:df:2d:be:80:1e:59:
f7:f5:bc:e4:a9:da:1a:39:96:fb:66:e1:89:2c:ac:f3:8b:48:
8a:f7:88:1c:f4:b2:3a:27:ee:63:e4:0a:8c:1f:c7:dd:fe:55:
a8:31:b8:a7:f7:76:88:eb:74:99:f6:52:29:79:78:5f:ee:8a:
db:91:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:03:03 2026 by rpki-client