Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
File: na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json)
Hash identifier: jRbfx6c9miTXe+Og1WVsWtoFi3c9jHzYoVESPTKJXAQ=
Subject key identifier: 40:71:05:26:95:FE:49:C8:FC:43:8C:41:43:C9:74:59:F4:37:8A:9E
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Certificate issuer: /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial: 019D37C05A00DEEC4FF396A382A86F997B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
Manifest number: 0849
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: JQPZXokmHKHAYGlmfWfXjoQ9RQg.roa (hash: IX6TZs+uRe2cDnLfZBpZLu7TD8C8LtaXhsu4WWS2oyY=)
2: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: +Jl4cA9jYpwpw9xVD5oJ+7NXfxtRPp66E9TYteanh2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5a:00:de:ec:4f:f3:96:a3:82:a8:6f:99:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=4071052695fe49c8fc438c4143c97459f4378a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:5d:f7:af:cf:ba:d5:99:02:b6:a1:af:24:
6c:cc:fe:92:92:ce:29:9b:bd:1e:bf:9b:82:11:a9:
df:68:92:30:d8:1c:41:b4:14:52:32:91:e7:71:28:
be:85:b6:d4:dd:e5:02:55:31:5b:71:2c:9e:8c:db:
f4:87:b1:3d:7b:d7:85:65:e5:0d:94:01:72:0b:8d:
0b:a4:20:69:56:ae:dc:39:05:60:b1:8c:32:68:4d:
0c:64:1e:1a:30:bc:9e:4b:a1:f8:5a:6d:3a:d0:21:
32:53:f7:66:aa:87:49:0c:1d:4d:a4:d1:d4:c2:a0:
b6:a3:8d:0e:2c:86:91:4e:9b:e2:5b:35:15:62:2b:
97:2b:fb:4e:f9:d8:2d:ae:e8:72:2d:fd:8c:0d:24:
0c:5b:e3:b8:92:fc:d3:54:83:ad:2e:df:bb:a0:21:
ee:b7:71:8a:4c:e7:2c:07:a9:0e:1e:de:54:84:2d:
a6:b7:05:24:08:1d:7a:39:97:d1:cb:2b:b5:b6:b7:
bd:c3:a4:f6:71:2f:6b:8d:b0:1e:98:50:ea:7d:df:
da:92:bf:2a:33:36:f1:35:5d:88:60:c6:e6:a7:2b:
73:9d:4e:a1:01:13:c6:60:43:ee:cb:53:1e:91:5a:
f6:22:4c:28:e2:6b:e5:5d:cd:90:c2:44:2f:50:c4:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:05:26:95:FE:49:C8:FC:43:8C:41:43:C9:74:59:F4:37:8A:9E
X509v3 Authority Key Identifier:
keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d0:01:7e:df:c5:9d:e0:2d:9d:20:fa:5f:21:51:41:a1:44:
0a:c2:35:af:80:b4:48:9d:f6:6f:5e:cd:43:ff:70:82:2c:e5:
71:ca:ea:46:f9:1b:73:ed:6f:c5:ef:57:66:dd:0c:e5:83:d0:
ab:49:bb:83:b7:a6:35:7a:49:d3:f5:ae:43:7c:7d:d7:2a:08:
21:fb:bc:f0:1e:3c:18:e7:bf:62:b4:e4:70:64:1f:af:63:94:
34:83:0b:32:ce:d4:39:e4:3b:a9:fd:81:6f:f0:79:02:35:c7:
6b:af:99:5c:26:9e:0a:8d:61:5a:f7:61:6a:82:1a:2f:3c:c9:
a0:de:b7:85:24:a8:81:48:ef:b4:4c:24:d3:a4:f0:2e:36:5d:
82:7a:1b:5c:50:9a:9e:f3:6c:ea:9f:c7:d3:f9:3e:b1:04:fc:
da:0a:48:bf:c9:13:68:0e:9a:3f:aa:7a:6d:5d:ec:64:49:a2:
74:7b:03:aa:0b:67:77:d4:d8:a4:69:3b:b4:2e:2d:e0:79:20:
72:74:99:63:24:72:a1:81:bf:c3:09:72:bc:3b:03:df:8e:6a:
16:40:5e:2c:9a:92:df:be:36:86:e2:e4:15:27:ad:74:45:a0:
fc:66:fd:e4:9f:54:66:a2:8b:0f:8d:53:19:fe:f3:d6:d2:80:
ba:95:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client