Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: pRA+VubVoLe97VPy9WRJ28diV6UkRS31HlbFoc26KlQ=
Subject key identifier: B5:05:A7:72:99:A4:F3:AC:0A:52:94:17:51:07:FF:B5:FF:E6:73:80
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01A17F2A7C7C210B067562527AFE4221F43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 19D3
Signing time: Tue 27 Oct 2026 21:00:53 +0000
Manifest this update: Tue 27 Oct 2026 21:00:53 +0000
Manifest next update: Wed 28 Oct 2026 21:00:53 +0000
Files and hashes: 1: fsX-156EcX4RGWd7tuKfUAcpF3I.roa (hash: tWl1z+4WCctwVSfGhHzSGmQzRBckFi18/ludT9Vq5Mo=)
2: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: AOtajmm5A6WAYOKpDDN+S4EeuadkY8bcOUhrsvwoVx4=)
3: pKI4g_UulEtk7cfmzQ18zms5D04.roa (hash: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:7c:7c:21:0b:06:75:62:52:7a:fe:42:21:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Oct 27 21:00:53 2026 GMT
Not After : Oct 28 21:00:53 2026 GMT
Subject: CN=b505a77299a4f3ac0a5294175107ffb5ffe67380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:8b:4a:d9:be:b7:70:8c:a4:8b:e6:d7:f9:
6d:26:fe:44:59:f7:59:39:05:d8:4b:75:a1:6b:98:
fd:02:68:90:2b:98:98:f8:bc:3e:dd:06:4c:c0:2a:
86:81:14:bc:91:0a:46:56:a0:4a:0a:f0:89:d2:5f:
fc:6a:22:d5:57:55:a3:92:78:1c:8c:b9:ef:47:ad:
eb:52:0f:a8:e4:10:35:b0:a9:9b:6b:2a:e7:34:29:
22:a4:9a:fb:a1:86:b4:af:ba:87:0a:18:d3:90:1b:
34:52:00:0b:82:ab:4c:13:6c:4b:9b:49:98:27:6b:
f3:53:bb:e3:07:24:e7:2d:dc:de:d3:23:f5:08:44:
cc:c2:96:5f:64:eb:ec:c8:57:37:d7:3e:68:18:78:
12:e8:b2:00:7e:23:ac:b2:8e:ac:12:31:39:f4:bb:
25:90:ec:c3:9b:4a:81:f6:26:53:77:fd:b8:f5:3b:
ce:3e:0c:ef:5f:83:59:a3:bc:df:c9:67:f3:7e:0f:
32:67:ed:4a:57:f2:00:cf:37:7c:33:3c:5f:88:5d:
b3:0e:7d:95:20:b9:f9:5e:7e:93:2f:3a:26:db:70:
a3:62:8c:32:44:5b:2c:28:f0:ea:4c:e2:e7:df:ac:
60:ab:38:e2:e9:5a:4a:5f:83:dd:1f:44:38:80:19:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:05:A7:72:99:A4:F3:AC:0A:52:94:17:51:07:FF:B5:FF:E6:73:80
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6d:53:96:66:cb:d2:a6:be:0e:f5:4c:e8:e1:5a:6d:33:bf:
d8:7f:1e:a9:ef:5e:f7:66:52:ca:4d:88:59:4d:fa:91:d6:1a:
13:51:04:07:96:54:e1:8b:59:9d:b4:35:9d:30:e7:f3:c9:e8:
f7:6c:c6:ba:38:3e:b9:df:77:dc:ca:85:45:03:d2:77:5d:63:
43:cf:84:c4:8f:d0:16:21:59:d4:82:8c:0b:df:67:bd:21:69:
71:b2:5a:81:5c:d6:b5:72:58:34:09:70:a5:f2:3e:17:10:79:
1c:94:dd:a8:42:14:a8:c9:f1:53:ed:e5:54:28:08:4f:c8:dc:
1e:24:05:59:a7:28:d7:d8:d1:f6:01:20:aa:d0:01:0f:49:8a:
6c:c8:a0:9d:51:a9:56:ac:ff:ab:e2:6f:f9:81:00:d1:ab:71:
9b:0c:9d:cb:92:46:4c:2c:80:8c:7f:f9:a2:a5:ca:99:a2:e8:
a6:83:11:b7:11:0e:37:ba:35:83:3a:1a:80:7d:79:aa:95:2e:
5d:a0:a9:b6:45:02:40:32:a3:1c:e8:c7:eb:09:8b:c3:df:c1:
8a:a1:81:3b:b5:d2:14:60:e0:a0:f4:76:6a:3b:13:f5:78:0d:
33:ae:fb:dd:bb:c7:ed:75:f5:a0:78:5b:2d:f0:fc:8a:e8:ce:
de:1c:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:08 2026 by rpki-client