Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: xPKg0EnnrHjlGbTFZD59hzZ/gJ0rcGJgtKx5cjzwfXY=
Subject key identifier: 3C:33:6C:7E:74:9F:55:F2:C4:69:DD:8F:0B:89:84:ED:2F:B7:82:5E
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019E28EFF0C6AFDBB9922DF0717FD94E19C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 08B6
Signing time: Fri 15 May 2026 00:01:13 +0000
Manifest this update: Fri 15 May 2026 00:01:13 +0000
Manifest next update: Sat 16 May 2026 00:01:13 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: cbv0A90Z5FUDir/O7RBu/BY3ch3+uKGxdU+sy89/vlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:f0:c6:af:db:b9:92:2d:f0:71:7f:d9:4e:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: May 15 00:01:13 2026 GMT
Not After : May 16 00:01:13 2026 GMT
Subject: CN=3c336c7e749f55f2c469dd8f0b8984ed2fb7825e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:44:34:ee:73:07:85:8e:b7:3b:e1:20:1e:
5d:b6:c3:37:75:f2:07:50:45:1b:a6:15:57:2d:43:
0d:48:4a:f6:46:d4:17:64:11:26:8a:53:b8:e7:4e:
a7:9a:76:d9:b9:93:0e:ce:15:ee:49:4d:a9:b4:86:
b7:18:5d:bb:e5:3c:d4:7e:44:0b:00:00:52:72:2e:
74:3d:fa:88:81:8f:37:a0:91:7a:81:07:6e:b7:9d:
b5:7a:3d:86:bb:fa:82:56:2c:6d:2f:6f:52:b4:86:
06:60:1b:d9:c1:fb:bd:82:b1:29:2c:6f:1a:4c:1c:
bd:45:78:22:b9:12:5f:38:ec:95:b0:76:2c:23:b1:
7c:58:02:a7:c5:3c:9d:7f:a9:30:2d:11:c5:d4:b5:
04:08:48:6f:f5:41:6c:d0:e5:ec:a7:c6:4a:fc:90:
0f:19:7e:d8:29:f5:94:f1:91:fe:c4:91:d8:a3:20:
bc:1c:ce:35:17:40:0e:09:ba:88:c1:29:39:17:3e:
cc:73:1e:9d:85:e6:68:f8:78:bc:fc:1f:e3:52:4b:
54:11:62:5e:fd:e5:94:ff:c1:19:b2:f0:52:00:32:
f7:86:18:95:90:56:3d:b2:ef:ba:fe:17:b8:e8:8a:
56:d3:7e:d1:c7:23:f8:d3:31:6e:65:c2:75:be:08:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:6C:7E:74:9F:55:F2:C4:69:DD:8F:0B:89:84:ED:2F:B7:82:5E
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ca:65:64:83:87:50:a9:46:4c:e5:b6:3f:3d:a6:da:a5:ae:
f9:eb:4f:f8:f9:4b:51:5e:e0:22:33:15:31:04:96:3e:a6:1a:
4f:4f:2d:08:5b:98:3f:f0:95:de:46:ea:ff:b0:f1:e1:b6:04:
15:8f:33:8d:23:d4:01:93:45:cd:2c:3c:d1:b7:eb:28:3a:d7:
b6:f2:5c:00:c9:b1:2a:21:b6:9d:aa:b3:be:3b:a1:e7:b1:24:
d0:97:ca:c2:b2:9e:55:cf:d9:3d:95:0c:b8:60:4f:a0:24:ef:
52:55:0c:d5:72:a6:2b:e7:6b:9f:4d:01:09:8c:01:a7:54:fc:
ef:bd:ab:96:6f:8e:0a:d8:01:74:2f:b1:3b:27:05:4d:0c:07:
d3:52:5a:bb:60:a3:1a:cc:3f:8d:aa:ce:cc:40:71:7c:7f:f1:
18:04:5f:84:b2:bd:92:7e:df:3e:2c:5c:d7:ca:9f:d3:a5:e1:
7f:73:42:96:a2:17:e6:5e:8f:e1:a5:9d:f9:66:e0:44:f7:fa:
e3:33:61:37:4c:47:ca:b1:3c:6a:49:87:45:7a:b2:d5:95:b2:
c8:6d:44:8a:08:c3:d3:e3:d2:2a:ca:67:76:16:f1:51:77:69:
32:10:13:13:71:a8:10:b7:8d:73:cc:85:f6:13:52:7c:31:f3:
09:a4:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:07:02 2026 by rpki-client