Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: CwPga295cDMZZ2trBCf1ktZOV1qa3ei9GC9hQvoU5nY=
Subject key identifier: 0C:D9:65:64:86:A1:A4:E7:DD:0C:45:3D:A4:9B:BC:20:FE:72:76:AA
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019FA60676F3EB4395A7E87B32E29B932CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 18DE
Signing time: Tue 28 Jul 2026 00:01:09 +0000
Manifest this update: Tue 28 Jul 2026 00:01:09 +0000
Manifest next update: Wed 29 Jul 2026 00:01:09 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: 0Ll8fi/YVPKz+qCsp8MdTvpan3WG2hmayR/Ej44Qe+o=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:06:76:f3:eb:43:95:a7:e8:7b:32:e2:9b:93:2c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jul 28 00:01:09 2026 GMT
Not After : Jul 29 00:01:09 2026 GMT
Subject: CN=0cd9656486a1a4e7dd0c453da49bbc20fe7276aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:e2:c0:96:b0:bd:b0:ee:67:54:58:66:b2:
ec:69:1d:38:cb:d0:b0:e7:3e:c7:fe:44:b0:fa:da:
ab:dc:6c:5f:66:04:1c:57:1f:ed:ab:11:ce:e3:98:
af:fc:1b:71:ef:a2:3e:dd:7f:58:95:56:38:1b:c6:
7d:70:f7:12:a0:26:80:f4:ba:33:c2:8b:7c:41:3b:
e8:2d:6c:68:d4:ed:6f:49:de:a3:06:7c:f5:b8:81:
ab:97:3a:85:b6:a5:48:e1:71:23:9f:54:73:77:61:
29:6d:ce:07:a1:91:2a:f6:24:b2:b3:e7:7f:33:17:
b3:15:81:80:1e:66:ea:53:7f:0b:46:b1:17:77:85:
72:04:84:69:04:56:cc:d9:be:36:a1:65:c2:a7:75:
79:f1:56:c5:b9:3b:b0:eb:15:c4:af:db:8e:a6:ad:
9f:9c:a5:f0:d3:3d:84:4a:0c:a8:56:76:32:53:8e:
3c:44:9b:86:b5:8d:25:8e:bb:85:c0:97:08:df:e1:
40:66:85:e7:21:a5:4d:9e:cd:32:35:9d:03:82:66:
7b:69:d8:cc:c6:24:bb:f3:ce:17:a1:fc:a6:2e:29:
e1:2f:54:b9:ac:24:f5:b6:e4:44:cb:76:cf:9d:04:
c7:2d:cb:01:3b:10:c1:f2:d7:1e:a5:c2:48:a9:da:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D9:65:64:86:A1:A4:E7:DD:0C:45:3D:A4:9B:BC:20:FE:72:76:AA
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:cc:f3:4c:a4:2a:56:22:b6:d3:19:61:d7:e0:91:79:69:
5e:3b:58:f8:ef:36:20:b8:c6:17:de:48:75:1b:82:54:a8:1f:
32:69:98:cb:8a:30:30:16:d7:02:ce:ef:6b:2c:4b:60:7a:0b:
92:09:d3:97:69:22:ac:c4:97:6b:bd:43:e5:82:a4:27:53:00:
1e:b7:da:58:84:8f:14:ed:80:18:1d:bc:a6:56:05:1d:4c:2a:
0b:d5:29:43:da:44:2c:fb:d6:f5:fc:73:8b:88:b7:be:e0:d7:
5a:e3:c2:ce:00:c2:ca:6e:8b:f3:c5:6c:d2:d2:dc:06:e7:2f:
19:8f:c7:c7:df:66:d9:a6:d1:df:02:1b:c8:3f:5c:dc:07:27:
2b:9c:7e:43:0c:ff:d5:48:2b:6e:4f:a9:e0:a6:25:72:59:9b:
cb:1e:d9:87:df:6d:0d:66:64:0f:84:f9:5f:29:41:aa:a9:a5:
0c:5c:a4:10:0b:44:33:88:80:47:43:71:7a:2c:9c:ae:24:09:
0c:ed:2e:81:c7:b2:f8:32:16:d0:fd:c0:6b:9e:40:25:78:97:
36:e4:dd:cc:61:f2:7f:96:e2:1d:d1:84:bf:a7:ba:04:23:9f:
27:2a:56:79:47:87:f1:eb:c3:a2:d0:d5:b2:e8:36:95:f6:5d:
a2:e4:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:30:23 2026 by rpki-client