Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: PBk3cA8OLLoMbeVorTAcaq+xc8ZQ2jGAwQ9UWGRBn9M=
Subject key identifier: 74:66:4A:BF:6D:3C:D8:DE:C2:A2:3E:6D:8F:9A:16:9D:AC:42:16:26
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 019D9AE27F7ED702F53FC5A98E5CF0360F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0BB9
Signing time: Fri 17 Apr 2026 10:00:28 +0000
Manifest this update: Fri 17 Apr 2026 10:00:28 +0000
Manifest next update: Sat 18 Apr 2026 10:00:28 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: KUxFXc1lGDk/sxh/F+Auy1FYdm5Nohl57xdXIvhcAes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7f:7e:d7:02:f5:3f:c5:a9:8e:5c:f0:36:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Apr 17 10:00:28 2026 GMT
Not After : Apr 18 10:00:28 2026 GMT
Subject: CN=74664abf6d3cd8dec2a23e6d8f9a169dac421626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:78:4f:47:7e:ec:7e:ad:69:e2:83:cd:71:
ad:c8:c1:40:c8:44:89:3b:d8:55:38:f1:a1:fe:93:
49:ed:09:77:25:0d:26:25:e0:7d:43:3f:c3:ca:1e:
cd:a3:85:82:1b:9a:0f:c8:d8:82:c1:4f:d3:f1:c7:
fa:90:46:fb:49:f3:89:2c:4f:0f:ca:ed:13:22:71:
fd:76:c0:8c:3a:5e:ab:f0:11:ce:36:85:cb:85:01:
b2:2a:2b:82:a5:1b:1f:78:9e:dc:e7:da:ff:2d:87:
58:24:8b:84:ef:b4:21:0b:86:98:8d:9e:e9:34:30:
a9:2a:59:50:cf:bb:39:41:8c:82:78:0e:fd:a1:3d:
7b:95:95:4d:bb:d9:2d:26:6c:b6:70:f9:fd:14:73:
41:0b:5b:29:f5:bd:7f:94:cf:25:0f:d9:34:a9:5f:
e4:00:3e:ec:bd:7d:e5:48:d2:8c:72:7c:32:70:45:
7a:fd:84:cf:32:57:09:b7:52:4f:b5:4f:38:28:45:
10:9d:49:b7:81:c2:fb:bd:a9:e6:b0:94:8f:c8:8f:
c5:28:7c:11:3a:18:78:1a:24:bb:04:8a:0f:47:c9:
93:e8:4f:33:3e:97:9d:66:e3:86:1c:d7:6b:73:0d:
0a:49:e2:2b:65:86:8b:96:25:74:1c:5e:78:b0:2e:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:4A:BF:6D:3C:D8:DE:C2:A2:3E:6D:8F:9A:16:9D:AC:42:16:26
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:03:20:e4:46:9e:9b:ca:fa:b2:dc:8e:a7:86:01:c3:13:
5f:5a:48:fe:6b:bc:a6:11:82:6d:a0:dc:4f:cc:dd:c6:c2:5a:
c1:3a:c6:dd:d8:89:d1:ac:23:e6:fc:22:53:11:58:7c:9d:85:
1b:cf:cc:64:c8:57:42:86:88:33:bc:ac:b5:21:be:84:63:e6:
c7:36:ea:6e:cc:3d:18:45:df:53:2e:0a:29:01:e4:91:b6:af:
14:80:02:06:14:b7:2d:25:5f:39:01:52:75:2c:fe:99:92:98:
b9:e1:4f:f8:80:44:4a:1c:aa:96:c2:bc:f1:88:65:47:be:9b:
d8:58:cd:f0:23:d2:a4:b0:9a:7c:6a:ec:d3:89:33:0d:6f:b3:
18:ff:50:69:27:ee:07:6a:d0:b0:51:f0:f5:b0:35:dc:c7:da:
4f:93:ae:e7:aa:ff:eb:59:6d:d1:c5:f0:27:4e:8c:c0:bb:fb:
7a:c2:c4:d8:61:3d:b7:25:89:a0:4c:c2:cd:88:33:e6:df:78:
f5:d4:29:b9:15:e3:d5:9d:b8:6c:a2:60:77:11:a9:fe:f6:ae:
46:09:05:5f:39:11:b3:1d:8d:9d:80:50:f7:ea:72:ce:35:56:
b6:d6:f8:23:4e:5f:14:7d:e3:5e:10:9d:ba:b9:f7:14:f9:8c:
25:f9:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:05 2026 by rpki-client