Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json)
Hash identifier: Nz1eSUjx24q5kAiUZHE0Yu7BM6XvBmtF/R+1FKXyM1Y=
Subject key identifier: 50:F8:34:0C:A6:E3:88:87:C7:C2:79:C6:AB:9D:ED:B9:CA:96:43:F1
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 019CAE35D8802CA0FC09629F0977DF267ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:30 +0000
Manifest this update: Mon 02 Mar 2026 11:01:30 +0000
Manifest next update: Tue 03 Mar 2026 11:01:30 +0000
Files and hashes: 1: ch1WA8KPWtT4lbnmhdRbUoInvrQ.roa (hash: KNYvYxr90wZ08HAn6IO/kJkxO2ei4FC5py65h6CmekA=)
2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: IuzdaxFIxD7n+YasFyqwMdTw2VlrVC4/g+bSjsdXtz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d8:80:2c:a0:fc:09:62:9f:09:77:df:26:7a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Mar 2 11:01:30 2026 GMT
Not After : Mar 3 11:01:30 2026 GMT
Subject: CN=50f8340ca6e38887c7c279c6ab9dedb9ca9643f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:32:39:74:07:62:e6:50:fa:8f:1f:0b:4c:
c4:e3:30:5c:d1:1f:3f:29:22:99:f3:c3:45:37:fc:
33:39:ed:16:24:bc:b4:db:b4:85:20:a0:52:af:3e:
25:03:4f:42:3d:0b:75:14:d9:36:19:21:cd:40:be:
f0:7d:af:78:96:57:65:80:e3:71:3b:8b:39:97:f1:
89:db:95:13:bf:ae:71:51:eb:78:8d:c2:76:bb:33:
f9:4f:ea:3c:5b:58:d3:d1:28:da:0a:f3:95:97:5f:
b8:04:d2:3c:d8:07:85:03:39:d7:11:2e:ac:3f:7f:
34:99:ff:f0:7e:96:59:f2:42:cb:19:51:7c:bd:0d:
f3:fa:26:9c:fd:96:04:0b:55:d5:50:48:c0:a5:89:
98:13:43:86:92:17:4b:65:9b:fa:b1:fc:9b:cd:88:
3a:ec:a7:73:6e:e8:3b:16:cf:5f:2e:e3:90:ba:ab:
2a:78:dc:8f:cf:bc:f6:68:cf:5f:d0:d7:2f:e0:bc:
c6:9e:0d:11:1d:57:e7:89:f0:bf:a0:b2:cd:9d:86:
90:c7:71:5e:78:5c:f3:dc:b3:39:8d:cf:4a:8d:df:
00:d3:2c:7a:cd:e3:5a:69:89:db:cc:96:aa:92:25:
d7:69:28:ad:ec:c0:ef:61:39:f6:51:bf:ff:5a:9b:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:34:0C:A6:E3:88:87:C7:C2:79:C6:AB:9D:ED:B9:CA:96:43:F1
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:5c:b8:e8:0d:11:00:bf:80:1c:18:2d:ca:f9:87:a2:b5:
54:82:6e:46:f9:4b:d0:76:21:34:1e:3e:66:43:c8:0d:b4:af:
3f:29:e9:36:59:32:da:6c:48:58:f6:8f:26:5b:69:21:2a:31:
14:ab:50:e3:8d:23:16:d9:4a:4d:57:07:53:24:d7:22:14:8b:
f5:b3:86:01:4b:24:26:df:fd:25:27:b5:4e:89:3f:cf:b4:26:
8f:08:f9:b0:75:4f:88:a3:8a:c2:82:bf:46:02:e0:3e:a3:21:
aa:3f:7e:38:6c:2b:58:7a:51:55:92:f4:87:ad:20:61:44:e2:
c1:36:fa:09:b5:e7:52:29:8f:0c:15:5c:eb:9e:13:00:9c:d4:
2a:b0:ef:f2:a1:36:b8:c9:46:09:47:41:44:26:34:6d:1e:8f:
1e:5d:4d:07:03:48:2a:54:08:4e:f9:b9:b6:2a:0b:4b:1c:be:
53:69:53:13:82:ac:53:a5:76:12:22:db:e7:5f:6d:44:6d:e7:
6a:c4:d7:8c:07:18:63:3e:29:91:3a:bd:cb:ed:d3:04:aa:98:
a1:35:cc:d3:c1:ef:a0:a0:eb:ef:9e:9f:d6:58:87:24:d8:fc:
5b:c3:aa:c5:f9:0b:fe:00:de:dc:9b:34:e8:a0:5b:c8:9c:06:
77:81:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:44 2026 by rpki-client