Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: Jr7NgnjVtYqhpbN6azLZQNhVM7gGjzVNVg0XBtBARfE=
Subject key identifier: 69:27:0F:15:34:FD:3D:B9:FA:31:8A:66:94:0C:D2:8D:81:93:FB:45
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019CECDD2EE21299D77ECCED1F98BFCDEF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1775
Signing time: Sat 14 Mar 2026 15:00:44 +0000
Manifest this update: Sat 14 Mar 2026 15:00:44 +0000
Manifest next update: Sun 15 Mar 2026 15:00:44 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: FaDLgaukfkpo1AD9hhCthWyVYfWpoRfeLz4qvL7KHow=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:2e:e2:12:99:d7:7e:cc:ed:1f:98:bf:cd:ef:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Mar 14 15:00:44 2026 GMT
Not After : Mar 15 15:00:44 2026 GMT
Subject: CN=69270f1534fd3db9fa318a66940cd28d8193fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:6a:2b:69:6d:46:d3:8e:53:3a:f7:c7:82:
4a:fe:37:a7:fb:e9:86:97:7e:0b:4c:4a:19:f1:1d:
61:0e:c1:08:3b:73:e0:bc:9c:81:02:e3:39:8d:c6:
50:c7:ce:97:44:76:f0:3c:2e:b5:ad:fe:0f:cd:df:
0b:ea:1c:df:7c:cf:37:41:d9:35:5a:e4:4a:8a:cc:
e3:48:3b:ce:5b:52:32:82:87:9d:f5:73:46:85:f1:
fb:81:0c:47:19:01:22:15:c4:21:2d:59:ae:20:f2:
40:ef:84:5a:2e:8a:67:87:c6:9f:7d:88:b3:f1:ce:
ea:4e:d2:f2:8c:09:42:a2:90:ed:80:43:63:ce:bb:
91:48:77:b0:66:29:56:4f:9d:52:67:b5:66:cc:4e:
73:f2:fd:c3:01:61:88:da:fe:d6:f3:1c:7d:98:c3:
92:a8:e0:db:43:c4:8d:60:b3:55:c4:a5:72:ad:32:
24:f1:68:8d:11:23:c5:de:0c:df:e8:d6:4b:ea:3e:
5b:be:ce:4e:57:fe:ea:8c:c2:80:22:7f:d7:61:d7:
ca:5a:bc:71:9c:4b:c2:0a:70:46:c5:3b:e7:67:7b:
92:5a:28:59:bd:82:7e:f0:39:00:db:0c:89:ae:55:
53:9c:ba:ff:ca:b3:27:32:5d:8b:a4:b4:7f:ce:d6:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:0F:15:34:FD:3D:B9:FA:31:8A:66:94:0C:D2:8D:81:93:FB:45
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:76:2e:26:de:85:64:2c:da:2c:fa:cd:4e:88:5e:9e:9e:2a:
8f:84:87:14:16:fa:48:72:b6:87:b8:32:f0:cd:66:34:c9:eb:
0b:66:c2:7f:dc:63:38:b7:1b:11:9a:d0:bc:b3:80:15:c9:0e:
05:0a:8f:42:9e:58:0f:dc:a2:80:f5:76:f8:f2:31:c7:20:ff:
d1:85:80:dd:8a:23:3d:67:1d:9b:a6:23:90:ad:f6:b6:a8:12:
47:e3:54:6b:56:88:a6:ec:26:52:7e:8f:61:ff:d0:6d:7c:bd:
34:9e:6b:e8:15:b8:4e:6f:0c:03:e6:55:dd:c1:7d:fc:3c:0e:
1c:01:37:fe:71:56:40:d8:65:1f:80:4a:a5:61:78:49:5d:d2:
15:61:d0:49:a6:98:53:57:5a:91:bd:aa:f8:ea:2f:59:9e:a6:
a3:1d:14:90:98:47:82:f1:8e:0b:9b:d4:c4:5f:6b:b4:3e:d8:
92:c4:64:ad:3c:5a:a3:f6:a7:ff:4a:bf:87:cc:07:11:25:92:
7a:23:c8:e6:d5:3c:16:41:b6:bb:10:7a:71:7f:42:86:26:b3:
25:3b:01:7e:a1:40:e9:2c:90:01:51:d8:e5:9a:b4:64:7c:12:
a4:aa:4c:56:1f:1d:1c:13:0f:32:d6:ee:8a:7a:2d:0b:c5:46:
3e:2e:92:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:11 2026 by rpki-client