Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier: SVd0Etzckevp/1c8WbGCiOrisIdetvVoWfqUWnWDqDE=
Subject key identifier: B1:EA:10:BA:47:E2:69:EE:FC:26:A6:98:26:4A:03:8A:F3:5B:F3:E7
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 01A0D192D8060C94E1A2D096BC3FC4650E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number: 0D63
Signing time: Thu 24 Sep 2026 04:00:56 +0000
Manifest this update: Thu 24 Sep 2026 04:00:56 +0000
Manifest next update: Fri 25 Sep 2026 04:00:56 +0000
Files and hashes: 1: HArTPZiNwcCJbDe9WQcpfZn0uYg.roa (hash: NwKyuiVaGubfK8gI4r3lHLzGkDH+yjycNzoAMLHdWQo=)
2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: d21lg0bcyBbzBtrelRS6goprSwauXK8yALFRuAZyJ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:d8:06:0c:94:e1:a2:d0:96:bc:3f:c4:65:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Sep 24 04:00:56 2026 GMT
Not After : Sep 25 04:00:56 2026 GMT
Subject: CN=b1ea10ba47e269eefc26a698264a038af35bf3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:4a:2e:45:b8:d0:81:87:d7:38:54:cc:72:
e4:4f:d2:e1:55:ec:4a:45:8b:da:e7:09:39:39:c9:
1b:e7:3f:5b:c6:b6:fb:af:2e:8b:65:ed:66:90:1b:
e0:ed:08:43:0a:bf:7c:b2:1e:3c:bd:67:25:db:6b:
91:00:46:d3:13:27:34:7d:6f:17:8d:2b:7a:51:ee:
3d:36:ed:a7:90:c3:9d:5b:70:d0:ad:74:e9:b7:4f:
3c:67:42:4f:15:6b:a2:83:fb:80:62:f0:2c:ef:06:
32:23:fd:aa:c5:d9:44:be:a6:43:2c:e6:71:10:69:
4e:c9:7d:8f:c9:52:45:bf:15:84:82:4e:78:7e:56:
08:b5:45:7a:2e:ea:f6:53:f2:9d:72:3d:19:9b:e0:
ab:0f:a7:9b:c4:96:63:0f:03:5c:7f:89:00:f0:22:
ca:57:71:00:72:82:df:f5:e4:39:38:fa:04:c0:60:
b7:48:7f:75:01:2f:d9:66:b0:b0:98:1c:99:27:bf:
f7:30:fd:75:d4:6e:37:5a:63:71:14:08:5b:8c:f0:
bd:70:7b:54:c6:f0:59:f7:5b:11:22:8c:49:4c:57:
ad:37:f8:28:7f:85:07:26:86:27:25:4c:a4:f2:70:
ab:4c:83:11:4c:13:97:54:cd:ff:64:30:2c:1f:a8:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:10:BA:47:E2:69:EE:FC:26:A6:98:26:4A:03:8A:F3:5B:F3:E7
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:82:56:44:f0:b3:dd:9a:9c:01:e2:cf:95:19:e2:a0:4b:51:
2b:2e:da:cb:a2:45:00:a3:a9:e1:2a:38:15:9c:10:81:58:6b:
48:96:e8:03:5f:e1:b5:56:44:5c:79:4f:3b:e7:88:89:2b:ab:
ca:37:5f:d8:88:32:70:b7:c8:b8:f7:9f:94:ea:5d:ca:02:39:
ae:b6:ec:9f:14:26:bd:bb:cd:e6:4f:ac:e2:87:04:88:78:9b:
28:88:78:98:6d:fd:e0:df:0e:78:1f:40:6c:f1:29:52:00:91:
c1:56:d5:f0:db:ba:89:c1:77:1e:03:a3:9d:3c:31:45:ab:ba:
7c:4c:25:9e:f8:82:16:97:aa:bf:89:02:21:ad:64:72:58:38:
b5:c6:b0:21:3f:a2:b9:39:3c:c9:5d:f3:90:2c:d5:d1:b3:8c:
ed:85:5c:fc:fb:50:9e:ef:82:90:24:0c:13:14:83:08:8d:13:
ee:04:f2:c4:f9:e5:ce:b2:fd:6b:68:f2:7d:cb:e4:e4:61:ea:
47:66:19:85:4e:91:37:17:61:95:30:74:bf:b2:a8:84:fd:9d:
01:63:59:9c:ae:d8:70:ab:64:75:42:fa:89:ea:37:cb:44:d8:
78:8d:a1:68:b7:9f:72:d3:21:b9:8f:41:c1:c9:06:f6:4b:cf:
d7:08:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:42:37 2026 by rpki-client