Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: omISPndB3ALVZNVMGwMTaxKm4p2UWS0Xb0F9wdytUwc=
Subject key identifier: 49:CB:F5:2F:8E:C7:E9:EE:9B:D0:B8:A7:07:55:73:D5:BA:C5:71:59
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019EBE48202F9F7269C760BD268F0017FD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1866
Signing time: Sat 13 Jun 2026 00:00:58 +0000
Manifest this update: Sat 13 Jun 2026 00:00:58 +0000
Manifest next update: Sun 14 Jun 2026 00:00:58 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: 4tLMMjcg8ovaCYYGQLM25iy3SG4O4m9nJlvbX0uT3M8=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:20:2f:9f:72:69:c7:60:bd:26:8f:00:17:fd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jun 13 00:00:58 2026 GMT
Not After : Jun 14 00:00:58 2026 GMT
Subject: CN=49cbf52f8ec7e9ee9bd0b8a7075573d5bac57159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:d1:1c:95:86:01:cf:82:e2:8a:05:bb:d9:
93:b1:f9:b9:e3:06:27:01:5d:c7:d8:ac:0d:27:ee:
90:e8:ec:b8:4d:28:e4:2c:82:b6:4b:c4:2c:bc:e9:
25:2f:27:13:08:97:46:ff:92:a1:42:27:b2:66:7f:
b4:8f:5d:56:9f:17:27:43:34:36:3c:90:ae:d0:81:
ab:7d:1e:7d:e7:0c:88:69:b0:69:d6:61:7b:f9:9b:
90:45:83:f8:cf:6a:1e:7e:78:f1:58:81:c1:d8:6f:
9e:14:47:c6:96:65:4c:1b:4b:d8:aa:41:2a:34:d3:
81:ee:f0:da:8e:33:76:ec:e8:f4:08:00:f9:ce:e3:
57:cd:1a:ef:a2:b9:6a:8a:48:b1:1d:ae:24:b3:81:
2b:2e:b9:e4:d2:04:f9:1a:21:d6:25:8f:14:1c:c8:
3f:07:bd:a8:f3:83:21:7c:14:3d:91:c0:08:d6:75:
9c:02:94:bd:3b:6c:bb:5b:8a:67:f2:23:34:22:26:
3a:aa:ed:ef:9c:94:41:76:cf:80:05:1f:75:8e:87:
2e:50:a8:01:84:a6:73:46:0b:37:47:ea:68:8f:bf:
44:b8:bb:25:be:fd:e7:f0:a7:6e:28:56:e1:f5:c5:
0f:5b:e1:85:38:50:22:14:c5:c3:c1:28:af:66:58:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:F5:2F:8E:C7:E9:EE:9B:D0:B8:A7:07:55:73:D5:BA:C5:71:59
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c0:02:68:d1:d5:2d:7f:bf:cf:07:12:70:33:29:70:4a:0a:
6e:a2:9e:47:f2:ac:82:cf:7c:e7:4f:4e:ae:aa:c6:d0:8a:dc:
3c:0e:3f:0c:b9:0c:17:8f:18:56:10:76:67:3b:be:e9:fb:be:
6f:37:62:ee:fe:8d:f0:0b:89:13:c5:b2:fc:99:6f:e4:52:38:
a4:d1:ae:21:f6:7f:c9:48:3b:fc:e7:c4:37:a0:f9:49:88:d8:
a6:65:92:e0:04:81:59:0f:4e:76:d8:c1:a1:c2:e8:d8:1e:45:
32:b5:2e:96:67:27:bb:d4:fe:04:e1:62:f7:b9:61:d6:6a:26:
b8:97:7e:75:96:f8:60:26:15:c3:54:54:8b:67:27:af:3e:18:
99:cd:16:19:8a:d7:b8:c8:9b:1e:d0:2f:14:c3:e1:1d:4c:b6:
35:41:45:ee:c8:26:d2:89:5a:86:90:c8:21:9d:4c:09:ef:ac:
b4:df:c6:07:59:bd:81:6d:f0:79:ce:31:dd:fd:0c:a6:2a:6f:
8e:b1:df:b2:af:af:2f:39:bc:ac:d7:6c:7a:5d:90:22:28:43:
ce:28:cf:96:6c:20:5f:3b:39:9b:e7:8d:cf:2a:c5:b5:d4:0b:
17:f2:55:87:90:56:8c:d0:4c:2c:72:81:de:ca:b4:d0:1b:d7:
38:6b:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:29 2026 by rpki-client