Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: dtBX6pQ1pdmvJumv7LJ+zTa/+BpNl2EggHYg16viKGg=
Subject key identifier: 98:BB:F0:71:6C:0C:94:CA:4E:21:59:6D:95:FC:2B:59:D5:21:AA:94
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019DD49BE48390E3753DB53FC812EB34B0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 17ED
Signing time: Tue 28 Apr 2026 15:01:19 +0000
Manifest this update: Tue 28 Apr 2026 15:01:19 +0000
Manifest next update: Wed 29 Apr 2026 15:01:19 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: VsKT+b8EI0UhD9fzCyQrMdVZc63EI5jccFXK8ijAoAQ=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:9b:e4:83:90:e3:75:3d:b5:3f:c8:12:eb:34:b0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Apr 28 15:01:19 2026 GMT
Not After : Apr 29 15:01:19 2026 GMT
Subject: CN=98bbf0716c0c94ca4e21596d95fc2b59d521aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:d7:1c:72:a7:53:9e:bf:f7:61:d1:c9:d2:
4d:a5:ee:5b:75:6d:73:88:d4:0d:8d:6f:08:2b:f6:
2a:57:f7:93:aa:fe:41:c6:10:14:f6:89:ea:76:c2:
d6:6e:a6:5a:13:dc:2f:a4:3a:a6:25:58:e6:d2:97:
50:2b:a8:79:61:b8:55:37:72:68:2e:7f:ca:2d:81:
38:67:10:d0:80:dd:24:b5:78:69:0c:cc:ec:36:48:
da:22:cc:a8:e0:6c:a0:b0:fe:63:6c:d1:d3:db:2d:
3d:4e:65:de:93:c3:e7:22:a4:82:7e:eb:fb:80:2c:
ce:55:26:98:64:83:ed:3f:7e:4e:00:04:f2:7a:32:
3d:7e:93:88:06:1c:e8:c4:64:69:19:de:ce:7e:cd:
cb:2e:a9:10:4b:e4:71:ad:c2:af:63:35:22:7f:09:
3f:61:03:ae:1f:bb:31:c9:a4:f3:fb:65:20:d8:fd:
4e:e0:98:31:7c:2f:51:d5:ed:23:9c:80:a5:d2:c2:
32:d7:35:1e:0e:08:53:cf:af:9e:11:85:72:96:4d:
27:77:27:7e:07:32:fb:ef:46:4c:10:22:d1:a1:a8:
af:6a:e5:69:99:53:9b:4c:30:24:6e:1c:20:1d:2b:
0d:ad:bb:71:e2:59:c6:95:d6:73:12:81:94:98:a6:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:F0:71:6C:0C:94:CA:4E:21:59:6D:95:FC:2B:59:D5:21:AA:94
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:15:5c:75:47:58:92:f3:ca:6d:a8:0d:4f:2a:41:a2:41:a1:
de:e3:1c:f2:42:68:1c:bc:7b:ad:5b:d5:8c:f4:35:02:2b:aa:
82:14:e1:bb:b9:08:17:26:d7:30:03:9c:4c:1e:c4:81:38:28:
cf:bb:c6:e1:38:7b:3b:c8:b7:01:52:fc:e6:86:c0:8f:8e:e8:
7b:d7:f8:2a:29:18:df:83:06:38:f2:62:d0:ad:fb:f1:c2:d8:
2e:55:d0:f2:a4:cc:e6:cf:86:af:21:93:20:d8:0e:bc:ef:0d:
63:6c:23:c0:12:1b:4c:1d:a2:ba:da:f3:62:ec:60:28:c6:47:
ea:71:68:7b:a3:33:1f:ff:11:96:a2:37:08:aa:c1:20:86:74:
a0:03:c0:12:31:ec:11:dd:ed:78:9b:c2:2a:71:a2:f3:8c:3b:
8a:9b:20:18:50:3d:b4:8e:ae:51:29:18:81:db:d0:9f:f2:6a:
7e:ba:81:8f:95:4c:b7:5c:3b:d5:cd:19:88:9e:c4:e3:7e:60:
0c:f4:b6:67:a1:ae:3b:19:b9:6d:fd:51:e8:00:70:f8:ee:c0:
76:6a:93:96:38:04:7d:5e:24:50:7b:a3:06:9b:f4:34:fd:d8:
a4:75:7f:77:93:4d:6d:0a:60:41:1c:7c:bd:1d:94:9a:41:36:
cf:f0:27:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Um+SDkON1PbU/yBLrNLDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4
ZjUxNTIwHhcNMjYwNDI4MTUwMTE5WhcNMjYwNDI5MTUwMTE5WjAzMTEwLwYDVQQD
Eyg5OGJiZjA3MTZjMGM5NGNhNGUyMTU5NmQ5NWZjMmI1OWQ1MjFhYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXXHHKnU56/92HRydJNpe5bdW1z
iNQNjW8IK/YqV/eTqv5BxhAU9onqdsLWbqZaE9wvpDqmJVjm0pdQK6h5YbhVN3Jo
Ln/KLYE4ZxDQgN0ktXhpDMzsNkjaIsyo4GygsP5jbNHT2y09TmXek8PnIqSCfuv7
gCzOVSaYZIPtP35OAATyejI9fpOIBhzoxGRpGd7Ofs3LLqkQS+RxrcKvYzUifwk/
YQOuH7sxyaTz+2Ug2P1O4JgxfC9R1e0jnICl0sIy1zUeDghTz6+eEYVylk0ndyd+
BzL770ZMECLRoaivauVpmVObTDAkbhwgHSsNrbtx4lnGldZzEoGUmKbIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi78HFsDJTKTiFZbZX8K1nVIaqUMB8GA1UdIwQY
MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt
NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy
LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARVcdUdY
kvPKbagNTypBokGh3uMc8kJoHLx7rVvVjPQ1AiuqghThu7kIFybXMAOcTB7EgTgo
z7vG4Th7O8i3AVL85obAj47oe9f4KikY34MGOPJi0K378cLYLlXQ8qTM5s+GryGT
INgOvO8NY2wjwBIbTB2iutrzYuxgKMZH6nFoe6MzH/8RlqI3CKrBIIZ0oAPAEjHs
Ed3teJvCKnGi84w7ipsgGFA9tI6uUSkYgdvQn/JqfrqBj5VMt1w71c0ZiJ7E435g
DPS2Z6GuOxm5bf1R6ABw+O7AdmqTljgEfV4kUHujBpv0NP3YpHV/d5NNbQpgQRx8
vR2UmkE2z/AnsQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:20 2026 by rpki-client