Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json)
Hash identifier: MjW7f6cDmg5dxkxFBSvrQxW8LsnZk5aovTojwMYgJa4=
Subject key identifier: 9C:B4:0A:58:80:5B:91:77:E1:9D:57:B1:EB:7D:3D:5F:CE:75:CC:4E
Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Certificate serial: 019CAAC64EFF070F8689BD33C96AB91B7DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
Manifest number: 0C84
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 2LL-SMyK5f7q3LRn9g7HW9K5dfk.roa (hash: LGVpZE2M2ikl4CHpfTf8y//4tD5Af7b520ROLqKh/18=)
2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: QAB0+/pbfT9WeQqsIJJ3U92l9Z39YqfEEbzAzuolquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4e:ff:07:0f:86:89:bd:33:c9:6a:b9:1b:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=9cb40a58805b9177e19d57b1eb7d3d5fce75cc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:df:01:88:61:f2:ee:19:b6:d8:f5:f8:72:
6a:7b:a2:82:c9:f0:81:0a:b4:4a:c5:6d:34:cc:2b:
14:9e:4f:d8:55:38:5b:14:ca:02:c8:a6:ef:ee:aa:
aa:c9:70:07:e6:39:8c:13:69:c5:b4:1b:10:cf:db:
f5:44:7c:b7:f2:08:4d:35:03:6c:42:da:25:28:3b:
e6:90:39:85:2c:76:ee:3a:32:29:82:3e:22:e1:d4:
d0:22:87:5b:5b:04:66:c5:e2:51:3a:eb:24:68:c2:
c0:6d:0f:78:1c:ac:6f:cf:a4:c3:8f:b7:61:ed:10:
56:83:d8:2b:d5:a8:ba:d1:b2:13:fe:33:a5:f9:d1:
2d:75:20:25:7c:60:f5:ca:30:fa:c4:3e:75:b5:a8:
f9:14:0e:b4:23:d3:8c:5d:54:9c:fa:ac:40:80:5d:
8d:9e:67:b0:76:99:1c:df:52:db:ef:3d:3b:6e:4f:
f2:8c:67:aa:bb:46:aa:dd:ce:74:3b:bb:df:47:3e:
ea:cb:de:37:48:58:ca:a6:67:8f:14:65:cd:ae:dc:
d9:bd:0c:dd:47:05:cb:07:52:22:91:24:13:ba:8e:
90:ce:38:0f:a8:33:3d:48:46:c2:52:b4:04:39:81:
94:58:e6:36:04:1d:94:b9:73:69:cc:f6:be:f0:4f:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:0A:58:80:5B:91:77:E1:9D:57:B1:EB:7D:3D:5F:CE:75:CC:4E
X509v3 Authority Key Identifier:
keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:20:98:cb:e4:4e:a9:c7:68:a5:64:07:c3:c4:54:b9:81:
9c:f5:14:46:4c:fa:41:27:32:1a:65:ae:6b:ce:ef:e5:de:86:
ed:8b:da:e0:eb:cb:6b:e7:ae:f8:11:b2:1e:f9:f7:8b:c9:53:
cb:81:fc:6e:78:9c:88:d4:34:96:91:4a:6f:cd:5d:ff:1c:aa:
38:5c:88:c9:7d:3a:ec:6e:f9:4a:71:f0:c8:7a:15:82:da:6b:
4e:04:a8:3d:a4:db:79:25:7c:39:e2:c0:e2:02:c0:89:3f:58:
a9:ca:22:ba:6d:27:27:ae:e7:b3:57:d4:56:10:90:4b:0f:c0:
f4:3f:57:47:f8:3b:a6:59:91:05:7d:4f:90:37:eb:d9:85:b6:
25:83:2f:3b:32:c4:e6:91:8c:76:b3:22:49:a1:56:d5:ac:ab:
f3:f0:07:99:4d:63:f0:1c:dd:fc:1c:b0:6e:a6:c3:29:7c:ac:
e6:b4:4c:f2:df:48:9f:b9:d8:e8:bf:f4:2b:1a:fa:11:0f:33:
2f:94:41:93:08:47:55:7e:bf:60:63:08:b1:fc:66:0a:3e:de:
a1:91:09:e3:d2:84:ff:56:39:3e:59:91:83:63:af:e6:38:cc:
db:59:be:b2:9f:c2:cf:6f:98:ff:25:93:77:ea:df:42:a8:a3:
0d:4e:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:08 2026 by rpki-client