Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: s8SS9ngJlvIuWWfaZEUu+p/bAGJBKi2PAxQIrx5zv0w=
Subject key identifier: 56:B5:6A:BC:AD:54:34:AC:9D:DF:24:8B:7F:41:FC:42:2C:20:B8:80
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019F129C01FE39BF6C17F99FE69B5DCA5E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 092F
Signing time: Mon 29 Jun 2026 09:00:41 +0000
Manifest this update: Mon 29 Jun 2026 09:00:41 +0000
Manifest next update: Tue 30 Jun 2026 09:00:41 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: QOIw6qGayUbIu/yElUqkz84voRrsgLSZ2cpa5uoy+hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:01:fe:39:bf:6c:17:f9:9f:e6:9b:5d:ca:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Jun 29 09:00:41 2026 GMT
Not After : Jun 30 09:00:41 2026 GMT
Subject: CN=56b56abcad5434ac9ddf248b7f41fc422c20b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:25:3e:eb:be:83:31:14:a0:9f:ff:ba:0b:
16:85:15:30:ea:05:33:56:24:83:11:c0:0b:92:d5:
ae:e7:ae:e2:b2:45:4a:cf:02:b5:14:07:0c:10:ce:
98:45:98:57:19:07:3d:d2:25:cc:eb:9f:99:21:6f:
e3:ea:c3:4c:23:fd:54:3c:f5:88:08:7b:0e:8f:fe:
37:cc:d1:52:dc:1f:eb:10:95:88:d7:77:3b:f8:70:
b0:aa:f2:fd:a0:34:d2:b7:5c:5f:0e:16:05:f9:4e:
ef:eb:a8:48:94:6f:4d:c4:be:52:00:90:35:06:4f:
70:93:7c:a4:f8:91:00:86:6f:3f:4c:d0:96:8a:56:
f0:a9:ac:2b:ef:79:83:83:59:44:c4:24:a5:51:c2:
be:57:d2:c6:de:24:9c:0b:57:1e:39:06:f8:f4:51:
5b:3f:9a:44:f4:23:f0:62:a2:03:80:38:d5:c1:ba:
03:e0:54:07:af:6b:43:82:fe:2f:8c:06:f9:53:bb:
8d:c7:70:bf:b5:9a:de:15:2e:20:d9:de:dc:65:92:
39:72:41:3e:9d:5c:6c:a7:26:b8:42:a5:a3:8f:6e:
16:d1:78:41:76:3d:00:e9:59:ee:16:22:0a:29:b1:
4b:c8:d3:1c:b2:2d:0e:26:3c:af:42:eb:eb:d5:83:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:6A:BC:AD:54:34:AC:9D:DF:24:8B:7F:41:FC:42:2C:20:B8:80
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:13:22:c8:e4:94:f5:a9:81:81:3c:f4:bc:83:13:61:62:36:
c9:6c:b7:fa:6c:fe:23:2e:20:e2:5a:b4:47:ba:ed:4e:a5:b4:
1e:e7:7e:bb:71:91:5e:47:f4:02:8e:e1:0a:15:14:cb:c9:a3:
1e:86:47:c4:df:98:b3:3d:de:a6:99:7b:37:77:e1:c0:e2:05:
ac:18:0d:93:42:1a:b1:df:e5:a9:0c:87:31:f4:b8:53:8c:70:
d0:a4:a2:10:fb:3f:1c:12:38:b7:4b:3c:99:81:84:a1:ca:a5:
67:d3:6e:3c:90:37:47:11:68:4b:4c:d2:7e:42:8d:ca:bd:5f:
4e:7b:e5:d0:a6:b7:d2:b2:09:36:40:3a:64:4c:e6:a6:c5:63:
f5:97:1f:15:ca:7a:52:36:51:44:c2:c5:67:b2:76:cf:b1:48:
40:8e:ff:a9:13:80:16:4b:7a:86:8d:00:56:d8:e1:58:56:22:
9d:71:9d:94:be:74:7f:b8:de:56:41:c1:d4:00:e2:1d:68:70:
97:06:0a:35:47:de:1d:ca:11:2c:20:09:6d:a0:52:f8:77:94:
11:d0:a7:77:88:70:36:68:48:3b:8a:85:79:70:3c:20:d9:ca:
40:25:b8:62:67:33:b3:b6:d7:18:8b:45:ff:2e:e2:c6:78:99:
9f:6b:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:15 2026 by rpki-client