Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: w0neVLfOqgoOVcueIwsBns5ID32UJRJIwQzne9j1tKQ=
Subject key identifier: 99:7F:DD:2A:01:EE:41:67:84:0E:C0:6B:5A:8B:62:B2:CC:EB:6B:13
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 019D9A3E1A3620D9143CD82405ABDF31397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0D00
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: 2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa (hash: LGVpZE2M2ikl4CHpfTf8y//4tD5Af7b520ROLqKh/18=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: CXGdujyhclehusSlqFjkK6dSk0WA+SYhuKt2eLK9pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1a:36:20:d9:14:3c:d8:24:05:ab:df:31:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=997fdd2a01ee4167840ec06b5a8b62b2cceb6b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:3c:9b:21:f1:9b:64:b0:b8:2f:33:63:aa:
5f:4e:49:d7:91:80:fd:96:0e:39:dc:ef:4c:5e:05:
e4:fc:30:e5:a0:cf:71:e4:ed:d2:97:d8:d0:6e:01:
a8:a6:f3:28:1d:85:22:ed:28:ef:7d:48:bf:da:73:
b5:f8:21:38:b1:fa:b4:61:76:c1:cb:89:da:75:15:
cf:30:67:04:14:b0:b1:3e:71:7b:03:44:04:17:cf:
71:1c:47:d6:e9:1c:5d:5e:01:9a:28:2d:77:5d:dc:
54:a3:84:a5:68:b8:e4:aa:7a:e9:93:7d:82:05:14:
72:1a:b2:40:5b:25:12:fc:0f:23:d6:bc:55:d8:4b:
6a:b7:8c:6a:50:b2:52:4e:fa:9b:42:4b:98:c4:1b:
f8:4c:d3:8a:f9:21:5a:f8:23:8c:29:9b:f7:73:ec:
af:9f:e5:cc:74:65:78:ca:4d:8b:cb:72:0c:56:cc:
20:ef:e9:37:d9:39:bd:2a:5c:97:29:e7:0e:eb:55:
78:b6:ea:ca:13:4a:48:3d:6b:42:8e:01:b5:af:8e:
a6:93:79:d7:69:e8:9e:3e:78:09:38:cd:c6:0d:6a:
6b:70:a8:e0:13:5d:68:c5:24:96:4b:57:93:f0:96:
47:78:65:a5:d9:7c:b9:f1:c3:ba:98:16:55:79:76:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7F:DD:2A:01:EE:41:67:84:0E:C0:6B:5A:8B:62:B2:CC:EB:6B:13
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:64:e3:49:6e:b8:5d:f8:bf:d6:58:26:c5:9b:f0:61:c3:6e:
de:79:77:4b:3a:73:0a:44:1f:0a:94:3f:cb:03:cd:fb:b2:c6:
45:fe:36:c7:c8:ff:e3:35:e4:22:a1:a7:76:9a:9e:16:c3:d4:
8e:5b:69:e4:77:1a:62:a7:bc:4e:54:25:f7:87:7e:c8:16:c5:
b4:f9:77:e4:02:c7:92:23:d6:d3:46:f1:e2:59:ed:4e:d2:0d:
6b:9f:bc:37:6c:23:a8:68:65:ab:50:ee:bf:e1:62:73:0d:e6:
ad:c4:99:b4:33:ed:5a:e0:06:52:fc:c7:ec:88:17:b4:8c:1c:
89:63:2d:e3:01:f8:38:57:a8:a2:4a:4e:b8:90:55:74:69:5d:
ba:2a:4b:13:ad:63:88:0e:d1:c2:dd:2f:2c:f8:81:1c:cb:16:
e6:85:6d:9e:1f:5c:2f:3c:8b:f5:39:c0:a4:1e:f4:df:4e:f4:
7b:a9:71:5f:8c:a7:3b:4b:8b:50:80:f0:ce:ef:61:07:70:03:
6e:aa:61:79:0e:fd:d7:71:70:85:4d:96:0f:83:07:65:bb:c3:
20:fd:ff:c3:5b:30:b4:1a:f2:9a:54:51:c3:d2:c8:09:22:11:
53:be:3c:18:58:0e:2d:25:4d:c5:6e:e5:03:b3:79:aa:3e:48:
e9:73:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:19 2026 by rpki-client