Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
File: n4cA180SL-GK-angaNELkaw-fz8.mft (raw, json)
Hash identifier: yWUmiPcLWDp1lgbxEk0xyjPzBbnWZaGbOh8d1MqWso8=
Subject key identifier: 89:16:EA:54:A3:3B:AC:34:1A:5B:79:C7:78:E0:6F:60:41:BC:47:C3
Authority key identifier: 9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
Certificate issuer: /CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Certificate serial: 01A130A1951F8661A346CDE2252D3C46D082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:00:57 +0000
Manifest this update: Mon 12 Oct 2026 15:00:57 +0000
Manifest next update: Tue 13 Oct 2026 15:00:57 +0000
Files and hashes: 1: CDXPRhDMs-jGAh8wnudClkymVW4.roa (hash: 1eC46O/rW+KDcEVpgtUlJxI3BjmvvvXUSfceL9Sj9Nc=)
2: n4cA180SL-GK-angaNELkaw-fz8.crl (hash: QCpUsCMfrUo+3vt589xX46Xqlkh/UcoYRhS2PEOnVlA=)
3: oSkRVQFIy9BLYy1aB77d5g6po0E.roa (hash: Xcjj+4yfvv190NMELA2n11LpZIIPXUYR9xGU2Beeq2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:95:1f:86:61:a3:46:cd:e2:25:2d:3c:46:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8700d7cd122fe18af9a9e068d10b91ac3e7f3f
Validity
Not Before: Oct 12 15:00:57 2026 GMT
Not After : Oct 13 15:00:57 2026 GMT
Subject: CN=8916ea54a33bac341a5b79c778e06f6041bc47c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:0a:6f:8d:e3:01:31:8e:8a:9e:e3:54:cc:
03:1b:5e:9c:1b:4d:cf:4c:89:3c:18:3b:c4:99:04:
e4:3f:18:c7:53:91:e7:e3:90:26:ea:6c:53:db:18:
1d:d0:07:2a:41:97:d5:d5:29:79:37:27:dd:77:80:
2a:c7:80:59:1a:56:08:6d:fc:72:30:1e:f9:87:77:
60:ef:ef:48:45:ee:ac:5b:ed:61:d4:05:9d:c3:8b:
d2:27:43:43:51:f3:16:22:fb:d2:ab:e8:7d:a1:a8:
34:77:29:1a:aa:42:51:2a:5f:47:8b:c0:9a:3e:a8:
76:c2:fa:00:0e:a5:e6:ea:cd:29:e3:83:3f:37:20:
81:c9:91:de:86:0e:3c:6c:83:5b:c6:81:f9:76:7d:
d1:9a:b1:83:b4:69:3f:18:b2:27:3a:e1:2d:63:f5:
17:dc:ce:a2:c1:56:64:71:bc:69:df:98:eb:30:0f:
15:9c:e2:b0:f8:e6:07:8d:38:56:63:2f:f2:e5:c1:
f8:cd:e7:6b:26:bd:15:f1:ff:72:f7:af:58:1c:df:
71:89:91:b2:bd:e8:04:ee:2b:bc:b5:8b:48:20:dd:
70:33:ac:59:02:df:80:be:ee:72:7e:a0:c3:b5:99:
75:79:37:bf:33:52:21:85:f1:43:6c:3c:fc:09:79:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:EA:54:A3:3B:AC:34:1A:5B:79:C7:78:E0:6F:60:41:BC:47:C3
X509v3 Authority Key Identifier:
keyid:9F:87:00:D7:CD:12:2F:E1:8A:F9:A9:E0:68:D1:0B:91:AC:3E:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4cA180SL-GK-angaNELkaw-fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/n4cA180SL-GK-angaNELkaw-fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e3:f8:7b:45:ea:f7:af:49:72:bd:63:81:99:fc:f6:30:ee:
b8:34:af:27:3d:7c:ae:3f:34:fd:9b:30:fa:90:1a:45:ad:06:
dc:b8:0d:40:3c:dc:e3:51:42:cd:12:e5:54:45:41:d3:3e:76:
2d:29:4f:7d:d0:86:19:19:b9:10:dc:78:1c:08:95:12:0e:d1:
09:17:aa:2f:f2:ab:da:2c:a8:23:31:ae:33:2c:d2:2d:f3:41:
fe:43:d8:f7:a1:db:11:fa:31:e2:c9:95:c7:10:68:ca:9d:f7:
af:b2:44:65:2b:74:90:54:52:9a:26:52:b7:9e:2b:1d:dd:44:
09:f9:ba:f9:99:48:d0:7e:33:51:50:41:15:a0:b6:6b:85:01:
c2:b8:3b:a5:d5:47:53:aa:ec:f7:bd:54:a7:14:f3:42:0d:76:
3d:c8:63:f1:5b:b3:26:4e:84:29:f9:01:cf:ac:b6:db:42:73:
5b:40:9d:e7:63:b4:4f:de:0f:d2:88:d3:e4:b2:ea:5f:93:4a:
e2:53:9a:62:f6:0e:5b:6d:12:2c:88:32:50:0e:57:6e:85:2a:
dd:17:9f:91:09:d8:e2:ea:27:83:d6:1f:a6:d8:db:73:ad:3a:
9b:3f:10:2c:5c:64:30:d8:36:4f:ea:d8:c7:e5:26:4d:58:45:
02:f6:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:27:08 2026 by rpki-client