Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: u8aZASjDXhR0iVDoY3dEcaQ+Epb9dXaIlK7QFs92NJ0=
Subject key identifier: 65:2E:33:01:77:4B:08:71:D6:63:DB:FF:99:CB:06:3F:18:B0:42:E0
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019CAB6BEF0D474E850324E78FB652451FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0B3D
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: A3vdFbPRBppbEbZXnyjhD9kZRtBlxcyMwXp/dDMk3lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ef:0d:47:4e:85:03:24:e7:8f:b6:52:45:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=652e3301774b0871d663dbff99cb063f18b042e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:78:d8:1e:1b:57:3a:e4:88:95:2c:6c:f0:
2c:c6:59:d9:ed:7a:a8:cb:c6:e1:d1:38:12:b6:11:
7c:48:78:d5:a8:df:18:a2:fc:42:1a:37:ad:80:4f:
a2:d2:03:40:03:ec:57:d8:de:a7:73:02:5b:cc:ed:
56:f0:fa:cf:91:a1:52:27:8c:00:0b:53:a6:a3:14:
9d:e8:ad:65:16:3c:a7:eb:e3:6e:8b:a9:7b:9b:2d:
cd:ed:ac:d2:3c:87:bd:4c:2f:2d:a1:c2:95:3b:a5:
97:91:0c:e5:2b:03:1f:9a:e3:8c:c0:ac:00:47:2f:
9f:24:de:65:14:5a:db:0f:65:5e:be:a4:0a:97:16:
30:8c:24:f5:b4:2d:c3:cc:db:2d:9a:14:5c:53:ad:
95:b6:1a:55:26:0f:43:c4:50:bb:61:c4:50:37:31:
86:7f:5c:2e:35:2e:6f:2d:25:7c:a0:a8:c6:7b:21:
5e:74:b1:7d:3a:01:7c:4c:06:93:86:f3:52:03:68:
4a:f4:3c:9c:07:0f:e2:52:fd:aa:62:6e:28:88:2b:
bf:bf:f3:a2:07:00:27:7e:4b:64:29:43:8b:d0:cb:
b6:8e:19:7b:8c:63:99:e0:d2:0f:2d:09:93:32:eb:
12:59:21:e1:97:c6:37:56:90:bc:74:d8:4f:80:b0:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:33:01:77:4B:08:71:D6:63:DB:FF:99:CB:06:3F:18:B0:42:E0
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:25:25:da:47:4b:2d:6c:4a:25:27:4d:73:69:74:58:d6:70:
bd:97:b0:aa:f7:c5:c2:a3:22:ca:ca:c1:d2:66:d0:0a:c0:31:
97:15:6e:c9:ca:f8:b4:48:a0:a5:11:bf:68:35:96:00:ed:cc:
10:88:05:77:60:d6:b7:83:39:23:87:40:ff:7c:b2:8d:e6:ab:
e9:53:11:16:54:9f:95:49:fa:16:a9:59:68:37:ae:ad:6e:04:
ad:c3:e0:53:c2:01:45:28:e3:01:99:96:0d:d5:7a:d8:fb:e4:
78:12:11:56:b1:0d:60:76:94:10:a5:29:6f:92:2a:2b:f2:e7:
89:e6:d3:7a:4e:22:b5:bb:c5:63:2e:08:c0:f4:87:3e:c2:d9:
52:a4:b6:74:74:18:7b:7c:94:26:50:0c:41:36:38:7f:aa:bd:
fb:4e:5a:a6:82:77:72:5c:76:92:12:30:f5:38:64:5e:f2:2b:
02:67:4b:82:5f:8e:89:ed:c8:80:4f:e1:dc:22:68:64:b7:2b:
b7:f9:c2:46:ef:5d:a3:e3:4d:89:c7:c4:cf:ff:9c:02:ea:fc:
4f:00:21:4a:9a:24:78:79:9b:f4:fd:db:49:f4:ad:1c:cb:b5:
6e:d8:24:4c:8a:26:2d:d5:5d:ff:83:56:39:6a:7a:32:42:71:
25:3e:8d:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+8NR06FAyTnj7ZSRR+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjYwMzAxMjIwMTQzWhcNMjYwMzAyMjIwMTQzWjAzMTEwLwYDVQQD
Eyg2NTJlMzMwMTc3NGIwODcxZDY2M2RiZmY5OWNiMDYzZjE4YjA0MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpJ42B4bVzrkiJUsbPAsxlnZ7Xqo
y8bh0TgSthF8SHjVqN8YovxCGjetgE+i0gNAA+xX2N6ncwJbzO1W8PrPkaFSJ4wA
C1OmoxSd6K1lFjyn6+Nui6l7my3N7azSPIe9TC8tocKVO6WXkQzlKwMfmuOMwKwA
Ry+fJN5lFFrbD2VevqQKlxYwjCT1tC3DzNstmhRcU62VthpVJg9DxFC7YcRQNzGG
f1wuNS5vLSV8oKjGeyFedLF9OgF8TAaThvNSA2hK9DycBw/iUv2qYm4oiCu/v/Oi
BwAnfktkKUOL0Mu2jhl7jGOZ4NIPLQmTMusSWSHhl8Y3VpC8dNhPgLDvvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUuMwF3Swhx1mPb/5nLBj8YsELgMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSUl2kdL
LWxKJSdNc2l0WNZwvZewqvfFwqMiysrB0mbQCsAxlxVuycr4tEigpRG/aDWWAO3M
EIgFd2DWt4M5I4dA/3yyjear6VMRFlSflUn6FqlZaDeurW4ErcPgU8IBRSjjAZmW
DdV62PvkeBIRVrENYHaUEKUpb5IqK/LniebTek4itbvFYy4IwPSHPsLZUqS2dHQY
e3yUJlAMQTY4f6q9+05apoJ3clx2khIw9ThkXvIrAmdLgl+Oie3IgE/h3CJoZLcr
t/nCRu9do+NNicfEz/+cAur8TwAhSpokeHmb9P3bSfStHMu1btgkTIomLdVd/4NW
OWp6MkJxJT6N2g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:43 2026 by rpki-client