Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
File: n4cA180SL-GK-angaNELkaw-fz8.mft (raw, json)
Hash identifier: xvvqW50a3b+DBMwr/jLDPJaKjWAQlOqCI34sVk29syc=
Subject key identifier: 19:1C:E6:55:CA:E2:42:10:8B:F9:C0:68:AA:94:4B:9C:29:19:D3:EE
Authority key identifier: 9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
Certificate issuer: /CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Certificate serial: 019FAA889B08B0EC20E8DA00239819532522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:46 +0000
Manifest this update: Tue 28 Jul 2026 21:01:46 +0000
Manifest next update: Wed 29 Jul 2026 21:01:46 +0000
Files and hashes: 1: CDXPRhDMs-jGAh8wnudClkymVW4.roa (hash: 1eC46O/rW+KDcEVpgtUlJxI3BjmvvvXUSfceL9Sj9Nc=)
2: n4cA180SL-GK-angaNELkaw-fz8.crl (hash: SjshhBTCnhMkJDWzASh8B/ronZOxZyKjh+Vyo0OO2NI=)
3: oSkRVQFIy9BLYy1aB77d5g6po0E.roa (hash: Xcjj+4yfvv190NMELA2n11LpZIIPXUYR9xGU2Beeq2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:9b:08:b0:ec:20:e8:da:00:23:98:19:53:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Validity
Not Before: Jul 28 21:01:46 2026 GMT
Not After : Jul 29 21:01:46 2026 GMT
Subject: CN=191ce655cae242108bf9c068aa944b9c2919d3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:4e:e5:48:9e:1a:2c:48:1a:d8:5f:6d:93:
1b:6b:41:87:47:ff:81:e4:3d:ff:06:2a:fe:47:ee:
38:d1:36:2a:04:c5:0a:7d:b7:ba:e1:5a:2c:d9:6a:
fe:da:5c:9e:bc:11:a8:9b:b6:e9:83:c9:9e:d8:29:
e5:20:b3:c7:1a:1c:a5:5c:87:13:e3:66:f0:63:e5:
98:f8:d1:d7:db:44:35:6f:f5:31:04:8c:4f:1b:8d:
45:7f:47:00:40:cf:f0:4a:22:27:58:5a:8a:2c:73:
78:35:b3:fd:06:5e:ca:6b:68:38:38:d3:d4:c3:c2:
97:7c:8d:d3:e0:16:41:be:f5:a0:16:ba:77:42:e0:
13:7d:f6:aa:e3:0a:e5:8c:89:ab:fb:a6:82:aa:52:
e5:35:fb:cf:e2:24:3f:d6:fe:50:5f:25:41:a0:fa:
f9:e4:28:a7:20:e6:f4:ec:7f:15:3f:59:7d:7f:d6:
5d:42:a4:07:68:d7:ea:d4:84:9e:86:d0:93:12:fa:
2c:7f:81:7e:88:2f:af:33:53:7b:cd:3a:63:c5:2e:
3a:21:39:64:af:90:68:85:28:03:c3:72:6e:8a:71:
5f:59:d2:8e:7a:6e:a5:0d:4b:05:a9:de:8d:7d:bf:
39:ac:f8:ec:3a:e3:96:41:f1:04:b9:f5:8d:9b:52:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:E6:55:CA:E2:42:10:8B:F9:C0:68:AA:94:4B:9C:29:19:D3:EE
X509v3 Authority Key Identifier:
keyid:9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:04:20:e2:42:c7:3f:01:4e:6f:bd:00:05:da:ea:12:11:b0:
4e:0d:a6:0c:b9:31:1c:86:9c:13:01:fe:85:90:db:fa:7b:91:
74:40:ab:cb:57:5f:84:8f:69:f1:6a:de:da:69:55:f7:2c:33:
fe:2a:bd:48:b0:55:a6:1f:62:29:54:15:64:16:63:a4:13:35:
aa:06:05:bd:9d:0e:bc:59:26:bb:91:7b:44:ef:09:6e:32:b1:
16:68:8a:e4:98:af:84:52:3d:4e:dc:24:2c:4f:fc:c2:7f:b2:
33:1f:e9:4e:9e:6b:ba:cb:ad:c0:da:8c:26:ac:e8:e7:23:05:
88:29:ec:7e:e8:c8:c7:56:f0:93:79:a6:62:41:79:cd:ec:ff:
8d:4e:2e:1e:33:c1:8d:a2:f6:b7:2b:a0:c8:5c:86:fa:f7:0a:
8c:50:1a:08:0b:4a:e6:d8:0f:36:37:96:42:a0:38:0a:ba:68:
f9:be:c0:d9:e9:6c:73:85:73:c4:d5:a3:65:d7:c6:27:36:53:
d5:c2:b8:e5:38:9d:45:0e:1b:e2:68:d5:45:3c:a3:9c:86:1b:
63:30:53:1b:ae:d0:32:a6:19:9b:09:a5:c8:ca:08:e0:8e:fd:
60:c3:a8:31:44:41:23:1a:80:6a:28:eb:da:07:f4:4a:30:b9:
ec:07:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:16 2026 by rpki-client