Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
File: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft (raw, json)
Hash identifier: 6mQ+jrDkl4lpFqcn3lEWEAEUiKIV8OAe4dVYR3FXWlI=
Subject key identifier: AE:A3:B2:F2:39:2E:C8:88:06:C6:16:11:FD:0B:83:6C:1D:10:15:1C
Authority key identifier: 35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
Certificate issuer: /CN=35a4ce50d0cde415473313b11b85719408faba24
Certificate serial: 019FFE3748B364557BD1A049BE22FD64A3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
Manifest number: 09A9
Signing time: Fri 14 Aug 2026 03:01:03 +0000
Manifest this update: Fri 14 Aug 2026 03:01:03 +0000
Manifest next update: Sat 15 Aug 2026 03:01:03 +0000
Files and hashes: 1: 2lJfQEwlH-6kTxU9uw2QDAzX8pc.roa (hash: 4TrMtWPwHQYSgCG5YX55g5CmUXIDn1rAauN71eaqxdk=)
2: NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl (hash: bLs5mCDBW5QwANm3mbVYgLzZkTwu6L1fKngbkPcAic0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:37:48:b3:64:55:7b:d1:a0:49:be:22:fd:64:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a4ce50d0cde415473313b11b85719408faba24
Validity
Not Before: Aug 14 03:01:03 2026 GMT
Not After : Aug 15 03:01:03 2026 GMT
Subject: CN=aea3b2f2392ec88806c61611fd0b836c1d10151c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:88:fa:21:4e:9b:bb:8e:5d:f9:8d:e4:7e:
9d:4c:28:a4:75:7c:cd:18:78:92:60:0d:c7:89:7a:
5e:4a:b6:2b:39:58:45:7b:d3:63:f1:36:23:ce:f6:
3f:5c:f1:72:b7:c1:6e:03:f6:d4:c9:69:c7:46:53:
93:84:48:b9:11:8b:26:99:7b:a1:e5:05:b0:21:77:
7e:7f:bb:7d:b1:da:49:7e:85:55:6b:ad:8a:34:8f:
a2:85:21:32:cd:bb:8d:2e:f0:78:2e:ec:00:d4:3d:
f2:f6:3d:7e:05:d4:ed:0d:08:cd:9a:12:6a:80:40:
c0:89:3d:92:f1:fd:c9:72:33:b8:01:7c:31:d6:70:
cb:fc:0b:1c:ff:71:3b:ca:94:b9:d5:f5:55:a6:4c:
c0:79:d2:ad:4e:af:48:b7:55:b6:bd:37:a4:e0:03:
01:af:46:13:00:69:de:7b:5e:21:d5:37:ad:46:81:
93:17:66:f6:3f:0c:92:9c:1f:ac:5b:73:bf:28:36:
3c:e9:64:b0:f0:20:fc:d0:77:b6:b1:6c:94:55:04:
d1:4b:e1:c1:46:53:f3:7a:6e:37:46:48:39:6f:71:
84:04:4f:3c:72:49:66:5c:b9:be:98:3f:66:24:be:
5f:6c:a3:0d:23:bf:e7:65:fa:c7:5c:a8:a0:9a:ad:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:B2:F2:39:2E:C8:88:06:C6:16:11:FD:0B:83:6C:1D:10:15:1C
X509v3 Authority Key Identifier:
keyid:35:A4:CE:50:D0:CD:E4:15:47:33:13:B1:1B:85:71:94:08:FA:BA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b50b1c-2bc5-4382-a27b-03b64c191d4a/1/NaTOUNDN5BVHMxOxG4VxlAj6uiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:66:cd:28:fa:3d:d5:5a:cd:60:2b:da:aa:eb:5f:22:f4:ed:
c7:06:50:b1:62:08:b1:bf:78:66:96:62:18:27:6e:9b:71:e8:
f0:d1:91:fa:c2:6c:55:87:08:0d:0e:d6:e2:31:04:2b:d7:e0:
8d:33:0e:8c:81:49:a8:7a:aa:df:ae:55:95:aa:56:cc:4b:d9:
7f:9d:cf:57:d1:b8:16:b8:81:71:47:29:44:9a:f8:62:2d:b0:
18:90:24:f3:ad:da:1b:64:de:a1:20:3d:a1:ca:31:6a:1e:84:
7f:a6:86:f4:4b:7e:d6:35:39:f4:50:be:65:9d:a4:73:8f:a9:
11:2d:47:f2:c6:87:66:6b:83:a1:7c:b8:92:01:ea:5c:a2:6b:
38:16:cb:d7:65:72:cb:ae:0c:0a:37:4e:cf:cd:22:e9:de:7d:
15:f0:33:b1:9d:4f:0d:b9:d2:3c:74:19:84:7e:75:8c:ad:48:
0c:a5:26:f7:0e:6f:17:38:28:03:91:7f:63:ea:d5:65:5c:ab:
97:99:1d:68:11:a5:f1:26:b5:a0:0d:79:81:dd:1b:bf:1b:0b:
c1:b0:d7:9e:8c:91:6f:a5:dc:76:9e:56:72:19:ac:c7:7a:c9:
a4:9a:81:db:78:8d:d7:d2:bd:8f:1b:ca:b1:01:78:59:bc:3b:
f2:7f:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:11:48 2026 by rpki-client